// REFERENCE
Port 3268 (AD Global Catalog)
Protocol: TCP
Service: Global Catalog
High risk
Active Directory Global Catalog: forest-wide LDAP (its TLS version is 3269). It flags a Domain Controller and allows enumerating the whole forest. Restrict it to the internal network.
Related tools
Work with this in:
Related
53
Port 53 (DNS) 88
Port 88 (Kerberos) 389
Port 389 (LDAP) 636
Port 636 (LDAPS) 43
Port 43 (WHOIS) 853
Port 853 (DNS over TLS)
Port 53 (DNS) 88
Port 88 (Kerberos) 389
Port 389 (LDAP) 636
Port 636 (LDAPS) 43
Port 43 (WHOIS) 853
Port 853 (DNS over TLS)
Assignments per the IANA port registry. Educational content.