Since turning off VNC ports it's stopped happening
Ok. So who else is burning with curiosity for the who and why?

Niggles, do you know who installed VNC to begin with?