Connection overview

Introduction

Every My Remote Mac instance is reachable in two complementary ways, and you can use both at the same time: a graphical macOS desktop and a terminal. This page explains both, the ports they use, and the brute-force protection that’s enabled by default.

How it works

1. Desktop (GUI) — VNC / Apple Screen Sharing

A full macOS desktop, exactly as if you were sitting in front of the machine — the standard VNC protocol, which macOS calls Screen Sharing. Best for Xcode’s UI, app testing, and anything visual.

The VNC port is 59010, not the default 5900

For security, the desktop is served on port 59010 instead of VNC’s well-known 5900. Moving off the default port dramatically cuts automated brute-force attempts. Always include the port in your client, e.g. vnc://YOUR-IP:59010.

2. Terminal — SSH

Root-capable shell access on port 22 for builds, scripts, package installs and CI/CD. Supports password and key-based authentication.

Always connect with your username

You must specify your account username — for both password and key authentication. If you omit it, SSH falls back to your local computer’s username, which doesn’t exist on the Mac, and the connection is refused (you get “kicked”).

ssh your-username@YOUR-IP          # ✅ correct
ssh YOUR-IP                        # ❌ refused — no username

Brute-force protection (fail2ban)

Both services are watched by fail2ban. After 5 failed logins within 10 minutes, the offending IP is banned for 1 hour — on SSH and VNC. So double-check your username, port and key before retrying, or you may lock yourself out temporarily. See Security.

Examples — set up your platform

From macOS Built-in Screen Sharing + Terminal.

From Windows A VNC viewer + SSH (Terminal or PuTTY).

From Linux Remmina / TigerVNC + OpenSSH.

SSH keys Passwordless, key-based login.

Performance Make the remote desktop feel snappy.

Ports reference

Service	Port	Protocol
SSH	22	TCP
Screen Sharing / VNC	59010	TCP

If a connection fails, a local firewall or VPN blocking these ports is the most common cause — see Troubleshooting.

FAQ

Which ports do I connect to?

SSH is on port 22 and the VNC / Screen Sharing desktop is on port 59010 (not the default 5900). The custom VNC port reduces automated brute-force attacks.

Why do I get disconnected immediately over SSH?

You almost certainly omitted your username. Always connect as ssh your-username@YOUR-IP — this is required for both password and key authentication.

I see "Your screen is being observed" on the Mac. Is someone watching me?

No. macOS shows that indicator whenever Screen Sharing / Remote Management is active and a session is connected — which is your own VNC connection. It is not a third party. Click the menu-bar icon to see the active sessions. See Apple's explanation: support.apple.com/en-us/120315.

I entered the wrong password a few times and now nothing connects. Why?

fail2ban bans an IP for 1 hour after 5 failed logins within 10 minutes, on both SSH and VNC. Wait for the ban to expire or contact support, then retry with the correct username, port and key.

Can I use AnyDesk, TeamViewer or another remote desktop?

Yes — you have full admin, so you can install them. They run independently of the built-in Screen Sharing (ARD): set up unattended access and grant macOS Screen Recording + Accessibility permissions (do this once over the built-in VNC). The built-in Screen Sharing on port 59010 is the supported default.

Do you offer KVM or IPMI access?

Not currently. Access is over SSH (port 22) and VNC / Screen Sharing (port 59010).