What is port 5900 used for?

Port 5900 is the standard TCP port used for VNC (Virtual Network Computing). It is commonly used by TigerVNC, RealVNC, UltraVNC, TightVNC. Cross-platform graphical screen-sharing system using the Remote Frame Buffer (RFB) protocol.

How do I check if port 5900 is open?

Enter your public IP or hostname into the scanner tool and click Check. A sub-second raw TCP socket handshake will be initiated from our edge server to port 5900 on your target. If the 3-way handshake finishes with SYN-ACK, the port is OPEN. If an RST packet is returned, the host is reachable but the port is CLOSED. If packets time out without response, the port is FILTERED by an ISP or firewall.

Is port 5900 safe to expose to the public internet?

Exposing port 5900 carries elevated security risks (High risk). Standard VNC implementations lack strong encryption and truncate passwords to 8 characters. Tunnel VNC through SSH or VPN. For remote services, consider placing them behind a secure VPN (such as WireGuard or Tailscale) or restricting inbound access with strict IP firewall rules.

Why does port 5900 show as closed or filtered?

If port 5900 reports CLOSED or FILTERED, confirm that: 1) Your service is actively running and bound to 0.0.0.0 (not just localhost/127.0.0.1); 2) Your router has a port forwarding rule directing external port 5900 to your machine's local IP; 3) Your operating system firewall (Windows Defender Firewall, ufw, or iptables) allows incoming connections on port 5900.