Finding and Monitoring RDP and VNC with Censys

Censys announced it now collects RDP (3389) and VNC (5900–5903) data, encouraging organizations to search their footprint for exposed remote desktop services and remediate or take insecure hosts offline. The post emphasizes that RDP/VNC are high-risk access points and provides best-practice guidance—strong unique passwords with MFA, VPN restriction, least privilege, account lockouts, network-level authentication, RDP gateways, firewall controls, and timely patching—to reduce unauthorized access.