3

There are many ports opened by system on one Windows 8 computer:

PORT      STATE SERVICE      VERSION
135/tcp   open  msrpc        Microsoft Windows RPC
139/tcp   open  netbios-ssn  Microsoft Windows netbios-ssn
445/tcp   open  microsoft-ds Microsoft Windows 7 - 10 microsoft-ds (workgroup: WorkGroup)
49152/tcp open  unknown
49153/tcp open  unknown
49154/tcp open  unknown
49155/tcp open  unknown
49156/tcp open  unknown
49157/tcp open  unknown

The 4915x unknown ports are opened by system programs like svchost and wininit.

I think these ports should not be opened, since that:

  1. This computer has not be set to be visited remotely.
  2. I scanned another Windows 8 computer recently, in my memory there are no or very few open ports.

Is this normal? Are the system files modified?

1 Answer 1

5

I think this computer is connected to domain environment domain controller should be 2008 R2 or higher version. Therefore these ports are needs to open in client side. Sometimes computer might be previously connected to domain and changed to work-group.

Read this Article.

1
  • Thank you! I checked and it was really used sometimes to remote control another computer. The link is very useful!
    – Sherry869
    Feb 27, 2021 at 17:04

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .