Event ID - 5904

Port No5904
Service Namevnc
RFC Doc0
ProtocolTCP
DescriptionTo quote the webpage: "VNC stands for Virtual Network Computing. It is, in essence, a remote display system which allows you to view a computing 'desktop' environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures."
Reference LinkPort No:5904 Service Name:vnc Protocol:TCP
AttackUnless you are using VNC remotely all incoming traffic for ports 5800 to 5809 and 5900 to 5909 can safely be considered hostile. Very few operating systems use these ports for clients or server programs, there should be little if any trafficon these ports outside of VNC.

Action:
Block ports 5800 to 5809 and 5900 to 5909 unless you plan to use VNC remotely over the Internet

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.