My sister’s computer (Win7 Ultimate) has been trying to access my computer (Win7 Home Premium), from these various ports. I recently wiped my HDD and reinstalled my OS. We are both connected to the same router with DD-WRT.
Is this Windows trying to establish file/printer sharing, or could it be something malicious?
full sized image
edit: image URL added by Mod. kail
Quite normal between devices on a LAN.
The 137 to 139 are for NetBIOS (file and printer sharing)
The 2869 is SSDP discovery
The 5357 is part of Network discovery
You’ll have to run a netstat -ano to find the PID of the svchost using port 50898. From the PID you can tell which hosted process is making the call.