VMware has a built-in VNC server on both ESX and their desktop virtualization products.[1]
If you don't configure a password to connect, no password is required.
[1]: https://pubs.vmware.com/workstation-9/index.jsp#com.vmware.w...
If you don't configure a password to connect, no password is required.
[1]: https://pubs.vmware.com/workstation-9/index.jsp#com.vmware.w...
Why this would be exposed to the public Internet, I have no idea. Maybe some poor soul was doing this in a combination of being directly plugged in, no NAT/router in the way, and lack of or weak OS-side firewall.
Speaking of NAT, IPv6 might make these things even riskier, but I hope most people are running a firewall on their OS. The built-in ones on Windows, Mac, Linux should all do fine.