Port 137, 138 UDP NMDB

Scanning

┌──(root㉿INE)-[~]
└─# nmap -sU --top-ports 25 demo.ine.local
Starting Nmap 7.94SVN ( https://nmap.org ) at 2025-11-16 19:47 IST
Nmap scan report for demo.ine.local (192.220.40.3)
Host is up (0.00011s latency).

PORT      STATE         SERVICE
53/udp    closed        domain
67/udp    open|filtered dhcps
68/udp    open|filtered dhcpc
69/udp    closed        tftp
111/udp   closed        rpcbind
123/udp   open|filtered ntp
135/udp   open|filtered msrpc
137/udp   open          netbios-ns
138/udp   open|filtered netbios-dgm
139/udp   open|filtered netbios-ssn
161/udp   closed        snmp
162/udp   open|filtered snmptrap
445/udp   closed        microsoft-ds
500/udp   closed        isakmp
514/udp   open|filtered syslog
520/udp   closed        route
631/udp   open|filtered ipp
998/udp   open|filtered puparp
1434/udp  closed        ms-sql-m
1701/udp  open|filtered L2TP
1900/udp  closed        upnp
4500/udp  closed        nat-t-ike
5353/udp  closed        zeroconf
49152/udp closed        unknown
49154/udp open|filtered unknown
MAC Address: 02:42:C0:DC:28:03 (Unknown)

Nmap done: 1 IP address (1 host up) scanned in 9.26 seconds

Ports 137, 138 are open

Find the NetBIOS computer name of samba server using nmblookup

┌──(root㉿INE)-[~]
└─# nmblookup -A demo.ine.local                                                                                                                                                            
Looking up status of 192.220.40.3
        SAMBA-RECON     <00> -         H <ACTIVE> 
        SAMBA-RECON     <03> -         H <ACTIVE> 
        SAMBA-RECON     <20> -         H <ACTIVE> 
        ..__MSBROWSE__. <01> - <GROUP> H <ACTIVE> 
        RECONLABS       <00> - <GROUP> H <ACTIVE> 
        RECONLABS       <1d> -         H <ACTIVE> 
        RECONLABS       <1e> - <GROUP> H <ACTIVE> 

        MAC Address = 00-00-00-00-00-00