Hi!
What’s the ip range in the Inbound rules? That’s not included in the screenshot. Also, in the results of ss I can see there’s no VNC server running, so make sure to follow all the instructions as mentioned in the course. And as long as your AWS account is not older than 1 year and you are using the same instance as showed by Zaid in the lectures you shouldn’t be charged, you may have selected a big size instance or more storage or something different.
Greetings!
Diego