3389 port is for remote desktop protocol on windows ,  everyone can connect remote windows server via RDP  .
SO ... Hackers always like testing 3389 port using weak password  no matter what services you run