← Port Encyclopedia
389
LDAP
TCP/UDP
Directory
Critical Risk
Lightweight Directory Access Protocol — Active Directory queries, LDAP injection
🔍 How to Scan Port 389
nmap -sV -p 389 target
nmap -sV -sC --script=banner -p 389 target
nc -zv target 389
🛡️ Security Considerations
- Scan port 389 with
nmap -sVto identify the exact service and version - If LDAP is not needed, close or firewall this port immediately
- Check for default credentials if a management interface runs on this port
- Use
searchsploit ldapto find known exploits - Monitor traffic on port 389 with Wireshark or tcpdump for anomalies
- Ensure the service is patched to the latest version to prevent known CVE exploitation