[milo9477]

[center]6,938 EXPOSED SERVICES — ALL VERIFIED ALIVE
Masscan + live TCP handshake, 2026-09-25 — not "ports open", every entry answered[/center]

What you get — 6,938 services verified alive by handshake (not just open ports):
- 2,378 RDP (3389) — fresh ransomware targets
- 976 MongoDB (27017)
- 887 PostgreSQL (5432)
- 556 MySQL (3306)
- 496 SMB (445)
- 328 HTTP panels (8080 answering 200 OK)
- 1,317 HTTP alt (8080/8000/8443/3000...)

Method: masscan over 9 public /8 blocks (1, 20, 34, 51, 72, 8, 142, 172.58/15) + per-service TCP handshake probe. RDP targets verified at the 3389 banner level. Read-only recon, nothing was touched.

File: ip:port, sectioned per service
Download (Gofile): https://gofile.io/d/8frk
SHA256: 498516fcfb2d96cba377f31547cd83e52d07f9c7c9e537abaca64787b3312d20 (31 KB)

Price: 15-25 USD or 0.003-0.005 BTC
Wallet: bc1qpswu3wryg57l0srckat6gcez8n8v56d2f6c2rn
PM after payment or request a sample section first.

Buyer verification: any ip:port is re-testable live in seconds:

nc -zv <ip> <port> # or: echo | nc -w3 <ip> 3389 (RDP banner) mariadb -h <ip> -P 3306 -u root -e "show databases" (a good chunk of the MySQL/Mongo section is no-auth — see my other thread)

v2 coming soon — second /8 block sweep in progress, +25,000 live targets, same format, same price class.

New product this week: fresh MySQL no-auth instances on GCP with PII inside (Korean student exam app: 1,116 student records + 40 named graders; Saudi loan UAT app: iqama, phones, bcrypt PINs, IBANs, SAR loans) + a live ransomware fleet (cuq.in, RECOVER_YOUR_DATA tables) — dedicated thread in this section soon.

PM for samples, bundles (with my 82.9M FR lot, 359M MS, 708M INTL) or questions.