VNC
First display endpoint in the common VNC remote-framebuffer range.
VNC endpoints in environments where this service is explicitly configured.
Client to server
Do not expose directly to the internet; tunnel through a VPN or SSH and require strong authentication.