Precisely. 3389 usually gets hammered non stop by various tools that are readily accessible and just waiting for that 1:19B mistake. I go back to school dqys and start custom port allocation at 10,000 but the last time I've needed to solve for port(3389)&svc(RDP)dest(NVR) is never.
As sysadmin...