Inbound VNC Traffic from an Unusual Location

The VNC desktop-sharing system is a common target for attackers because it provides remote access to other devices. Attackers can find weak VNC passwords through low-cost techniques such as brute force attacks or by exploiting VNC server vulnerabilities to bypass authentication. The impact to a business can be low if the connection attempt fails or if the attacker connects to a device with limited privileges. However, these activities should be examined before they facilitate critical and costly attacks.

The system might change the risk score for this detection.