← Port Encyclopedia
389
LDAP
TCP/UDP
Directory Critical Risk
Lightweight Directory Access Protocol — Active Directory queries, LDAP injection

🔍 How to Scan Port 389

nmap -sV -p 389 target
nmap -sV -sC --script=banner -p 389 target
nc -zv target 389

🛡️ Security Considerations

  • Scan port 389 with nmap -sV to identify the exact service and version
  • If LDAP is not needed, close or firewall this port immediately
  • Check for default credentials if a management interface runs on this port
  • Use searchsploit ldap to find known exploits
  • Monitor traffic on port 389 with Wireshark or tcpdump for anomalies
  • Ensure the service is patched to the latest version to prevent known CVE exploitation