389,636,3268,3269,9389 - Pentesting ldap

LDAP stands for "Lightweight Directory Access Protocol". It is an open, vendor-neutral, industry standard application protocol for accessing and maintaining distributed directory information services over an Internet Protocol (IP) network.

nmap

*Using this you will be able to see the public information (like the domain name):

sudo nmap -n -sV --script "ldap* and not brute" $IP