Used by Windows (and services on UNIX like SAMBA). The main danger on the Internet is that by crafting special messages sent to this port, a hacker can convince Windows that their machine is "local", and can therefore bypass some of Microsoft's security settings that differentiate between "local" and "internet" zones.