Port 8728 (MikroTik API)

MikroTik RouterOS API (8729 with TLS).

Registered (user) port, 1024-49151 TCP Remote access Do not expose to the internet

What port 8728 is used for

MikroTik RouterOS API (8729 with TLS).

Do not expose to the internet. Disable the API service if unused and restrict it to management hosts.

Port 8728 is in the registered range and has no IANA assignment. The usage above is unofficial but widespread.

Linux: is anything listening on TCP 8728?

sudo ss -tlnp 'sport = :8728'

Linux / macOS: which process owns the port

sudo lsof -nP -i :8728

Older Linux / BSD (net-tools)

sudo netstat -tlnp | grep ':8728 '

Windows (Command Prompt)

netstat -ano | findstr :8728

Windows (PowerShell)

Get-NetTCPConnection -LocalPort 8728 -State Listen | Select LocalAddress,OwningProcess

From another machine

nc -vz -w 5 HOST 8728

From Windows

Test-NetConnection HOST -Port 8728

ufw

sudo ufw deny 8728/tcp

iptables

sudo iptables -A INPUT -p tcp --dport 8728 -j DROP

nftables

sudo nft add rule inet filter input tcp dport 8728 drop

Windows Firewall

New-NetFirewallRule -DisplayName 'Block TCP 8728' -Direction Inbound -Protocol TCP -LocalPort 8728 -Action Block

All port numbers · Open port checker
Assignment data: IANA port number registry (public domain), retrieved 2026-11-10.