Port 1129SAP Host Control (SAPControl)

Secure SOAP web-service endpoint used to monitor and control SAP instances and SAP host services.

transport: tcp · udp
in transit: encrypted
assignment: official
risk: 8/10
lookups: 0

also known as saphostctrls, SAP Start Service

Technical Details

what runs on :1129

SAP Host Control exposes SAP's SOAP-based administration interface over HTTPS, normally through the SAP start service (sapstartsrv) on TCP 1129. Requests use SOAP/XML over a TLS-protected HTTP connection and provide operations such as process-status queries and instance lifecycle control. SAP deployments commonly also expose the non-TLS HTTP variant on TCP 1128; although the registry assignment lists both TCP and UDP, normal SAPControl traffic is HTTPS over TCP.

Security Information

exposure of :1129

risk score

8/ 10risk

treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.

web services averages 3.6 across 133 ports — this one sits 4.4 above.

in transit

encrypted

payloads are protected on the wire

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

This is a remote administration interface, not a general-purpose web service, and can expose sensitive host and SAP instance information or perform lifecycle operations when authenticated. Restrict it to trusted management networks, enforce SAP and TLS authentication controls, and do not expose it directly to the public internet; investigate unexpected Internet exposure as a potentially high-impact administrative service.

Record

iana registry entry

port: :1129
service: SAP Host Control (SAPControl)
transport: TCPUDP
encryption: tls / encrypted
assignment: iana registered
risk: 8/10risk
category: Web Services System
usage: SAPControl clients and SAP administration tools use this endpoint to query, start, stop, and manage SAP instances through the SAP start service. It is commonly encountered on SAP application servers and hosts running the SAP Host Agent. The usual secure endpoint is TCP port 1129; TCP 1128 is commonly used for the corresponding HTTP service.
lookups: 0rank 994
added: 2026-08-31
updated: 2026-08-31
references: IANA service name registry — port 1129

Something wrong?

This record is maintained by the engineers who use port 1129. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-08-31.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 133 in web services →

the 8 most looked-up other ports in web services — 133 ports carry that label.

port	service	proto	category	risk	views
:8888	Sun Answerbook & Alt HTTP	TCP	Web Services	caution	123.9k
:8000	Intel Remote Desktop / Alternate HTTP Port	TCP	Web Services	safe	84.3k
:8888	NewsEDGE	TCPUDP	Web Services	caution	83.3k
:8888	HTTP Alternative Port	TCP	Web Services	caution	76.5k
:8888	GNUmp3d Streaming HTTP	TCP	Web Services	caution	76.3k
:9080	Groove RPC	TCPUDP	Web Services	caution	70.8k
:8881	Atlasz Secure Server	TCP	Web Services	caution	67.6k
:80	HTTP	TCPUDP	Web Services	caution	67.3k

risk mix of the 8 listed

safe13%
caution88%

0 of 8 encrypted

Port :1129SAP Host Control (SAPControl)

Technical Details

Security Information

Related Ports

Port 1129SAP Host Control (SAPControl)