Understanding Port 3389: The Gateway to Remote Desktop Protocol - Avica
Port forwarding to non-3389 (internet-facing) port --> RDP port with secure password & lockout - is it safe for small home lab (2-3 computers) or am I going to get ransomwared inside