Looking at the network settings for the Azure VM that got popped in the incident that ruined my weekend:201 RDP 3389 TCP Any Any Allow