← Port Encyclopedia
3268
LDAP-GC
TCP
Directory
High Risk
LDAP Global Catalog — Active Directory forest-wide queries
🔍 How to Scan Port 3268
nmap -sV -p 3268 target
nmap -sV -sC --script=banner -p 3268 target
nc -zv target 3268
🛡️ Security Considerations
- Scan port 3268 with
nmap -sVto identify the exact service and version - If LDAP-GC is not needed, close or firewall this port immediately
- Check for default credentials if a management interface runs on this port
- Use
searchsploit ldap-gcto find known exploits - Monitor traffic on port 3268 with Wireshark or tcpdump for anomalies
- Ensure the service is patched to the latest version to prevent known CVE exploitation