What it checks
Whether the Remote Desktop (RDP, 3389) or VNC (5900) port accepts a connection from the internet.
A pass means: No remote desktop ports accept connections from the internet.
Possible findings
Remote desktop port reachable from the internet
Severity: MediumConfidence: Medium confidenceKind: Security issue
What we found
A remote desktop port (RDP or VNC) accepted a connection from the internet.
Why it matters
Internet-facing remote desktop services are one of the most common ways ransomware gets in, through stolen passwords or unpatched flaws.
How to fix it
Put remote desktop behind a VPN or a gateway with multi-factor authentication, and close the port to the internet.