Subnet and PortsPort 389: LDAP
A directory service used for logins, address books and company directories.
Registry entry
| Port | Protocols | Registered name | IANA description | Assignee | Reference | Note |
|---|---|---|---|---|---|---|
| 389 | tcp, udp | ldap | Lightweight Directory Access Protocol | Tim Howes | n/a |
What it is used for
A directory service used for logins, address books and company directories.
The risk
Plain LDAP sends data unprotected; exposed directories leak staff details.
What to do
Use LDAPS or STARTTLS; never expose it to the internet.
In the registry
Port 389 is a system port (0 to 1023), the range for standard services. The registry lists one service for this number. Its main entry is ldap, "Lightweight Directory Access Protocol", registered for tcp, udp.
How to find out whether it is open on your computer
On your own computer or server, ask the operating system which programs are listening for connections, and look for port 389 in the list. If a program you do not recognise listens on it, find out what it is before you close it. From outside, test only networks that you own or have permission to test: scanning other people's networks can be treated as an attack.
Is port 389 safe to leave open?
It depends on what is listening and who can reach it. Open only what you need, restrict by address where possible, keep the software updated, and use encryption and strong authentication. The advice above applies to this port.
Does the registered name prove what runs on port 389?
No. Programs can use any port. The registry tells you what the number was reserved for.
This is an independent guide. It is not connected with IANA, the IETF or any network equipment maker. Address and port data come from the IANA registries as fetched on 14 November 2026; RFC texts were read from rfc-editor.org. Check the originals for anything you rely on.