There are many ports opened by system on one Windows 8 computer:

135/tcp   open  msrpc        Microsoft Windows RPC
139/tcp   open  netbios-ssn  Microsoft Windows netbios-ssn
445/tcp   open  microsoft-ds Microsoft Windows 7 - 10 microsoft-ds (workgroup: WorkGroup)
49152/tcp open  unknown
49153/tcp open  unknown
49154/tcp open  unknown
49155/tcp open  unknown
49156/tcp open  unknown
49157/tcp open  unknown

The 4915x unknown ports are opened by system programs like svchost and wininit.

I think these ports should not be opened, since that:

  1. This computer has not be set to be visited remotely.
  2. I scanned another Windows 8 computer recently, in my memory there are no or very few open ports.

Is this normal? Are the system files modified?

1 Answer 1


I think this computer is connected to domain environment domain controller should be 2008 R2 or higher version. Therefore these ports are needs to open in client side. Sometimes computer might be previously connected to domain and changed to work-group.

Read this Article.

  • Thank you! I checked and it was really used sometimes to remote control another computer. The link is very useful! Feb 27, 2021 at 17:04

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.