# Port 137, 138 UDP NMDB

### Scanning

```
┌──(root㉿INE)-[~]
└─# nmap -sU --top-ports 25 demo.ine.local
Starting Nmap 7.94SVN ( https://nmap.org ) at 2025-11-16 19:47 IST
Nmap scan report for demo.ine.local (192.220.40.3)
Host is up (0.00011s latency).

PORT      STATE         SERVICE
53/udp    closed        domain
67/udp    open|filtered dhcps
68/udp    open|filtered dhcpc
69/udp    closed        tftp
111/udp   closed        rpcbind
123/udp   open|filtered ntp
135/udp   open|filtered msrpc
137/udp   open          netbios-ns
138/udp   open|filtered netbios-dgm
139/udp   open|filtered netbios-ssn
161/udp   closed        snmp
162/udp   open|filtered snmptrap
445/udp   closed        microsoft-ds
500/udp   closed        isakmp
514/udp   open|filtered syslog
520/udp   closed        route
631/udp   open|filtered ipp
998/udp   open|filtered puparp
1434/udp  closed        ms-sql-m
1701/udp  open|filtered L2TP
1900/udp  closed        upnp
4500/udp  closed        nat-t-ike
5353/udp  closed        zeroconf
49152/udp closed        unknown
49154/udp open|filtered unknown
MAC Address: 02:42:C0:DC:28:03 (Unknown)

Nmap done: 1 IP address (1 host up) scanned in 9.26 seconds
```

Ports 137, 138 are open

### Find the NetBIOS computer name of samba server using nmblookup

```
┌──(root㉿INE)-[~]
└─# nmblookup -A demo.ine.local                                                                                                                                                            
Looking up status of 192.220.40.3
        SAMBA-RECON     <00> -         H <ACTIVE> 
        SAMBA-RECON     <03> -         H <ACTIVE> 
        SAMBA-RECON     <20> -         H <ACTIVE> 
        ..__MSBROWSE__. <01> - <GROUP> H <ACTIVE> 
        RECONLABS       <00> - <GROUP> H <ACTIVE> 
        RECONLABS       <1d> -         H <ACTIVE> 
        RECONLABS       <1e> - <GROUP> H <ACTIVE> 

        MAC Address = 00-00-00-00-00-00
```


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://notes.cavementech.com/pentesting-quick-reference/port-137-138-udp-nmdb.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.