Port 1128SAP Host Control

SAP Host Control SOAP/HTTP service used by SAP Host Agent for system monitoring and administration.

transport: tcp · udp
in transit: cleartext
assignment: official
risk: 7/10
lookups: 0

also known as saphostctrl, SAP Host Agent

Technical Details

what runs on :1128

SAPHostControl carries SOAP messages as XML over HTTP, normally on TCP port 1128; the registry also lists UDP, although SOAP/HTTP deployments are conventionally TCP-based. The service is commonly associated with SAP Host Agent, with HTTPS commonly provided separately on TCP port 1129. Requests and responses use HTTP framing around SOAP envelopes.

Security Information

exposure of :1128

risk score

7/ 10risk

treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.

remote access averages 3.7 across 161 ports — this one sits 3.3 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

Port 1128 is normally cleartext and exposes a host-management interface, so it should be restricted to trusted SAP management networks rather than exposed to the Internet. An attacker who can reach it may be able to enumerate the host or attempt administrative operations, depending on SAP Host Agent version and configured authentication.

Record

iana registry entry

port: :1128
service: SAP Host Control
transport: TCPUDP
encryption: cleartext
assignment: iana registered
risk: 7/10risk
category: Remote Access System
usage: This port is used by the SAP Host Agent's SAPHostControl web service on SAP application and database hosts. SAP administration and monitoring tools use it for host-level operations, status queries, and lifecycle management.
lookups: 0rank 994
added: 2026-09-10
updated: 2026-09-10
references: IANA service name registry — port 1128

Something wrong?

This record is maintained by the engineers who use port 1128. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-09-10.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 161 in remote access →

the 8 most looked-up other ports in remote access — 161 ports carry that label.

port	service	proto	category	risk	views
:8000	Intel Remote Desktop / Alternate HTTP Port	TCP	Web Services	safe	84.3k
:8888	D2GS Admin Console	TCP	Remote Access	caution	83.7k
:8881	Atlasz Secure Server	TCP	Web Services	caution	67.6k
:5938	TeamViewer	TCPUDP	Remote Access	caution	65.0k
:8291	Winbox MikroTik Admin	TCP	Security	caution	62.9k
:8008	IBM HTTP Server Admin	TCP	Web Services	caution	58.3k
:135	Microsoft EPMAP	TCPUDP	Security	caution	51.9k
:23	Telnet	TCP	Remote Access	caution	34.8k

risk mix of the 8 listed

safe13%
caution88%

0 of 8 encrypted

Port :1128SAP Host Control

Technical Details

Security Information

Related Ports

Port 1128SAP Host Control