EMS Listening Ports

Terminal Services are ENABLED

Remote Access is ENABLED

Anomalous high port listening activity by STANDARD WINDOWS PROCESSES