What is MonkeyCom on port 9898?

Question

In /etc/services on a few machines I've checked, port 9898 is associated with a service called MonkeyCom:

monkeycom   9898/udp     # MonkeyCom
monkeycom   9898/tcp     # MonkeyCom

The first reference I found in a google search for MonkeyCom says it's part of the Sasser virus. That seems like a misinterpretation to me -- it's more likely that Sasser is using 9898 but that there's some older service called MonkeyCom which originally got the assignment.

Who can tell me what MonkeyCom is?

Solution 1

MonkeyCom is (or was - as far as I can determine it is now defunct) a videophone/file transfer program.
As far as I can determine nothing legitimate is currently using port 9898 - it's pretty much just Sasser and a few other bits of nasty.

Solution 2

Tripwire Enterprise uses 9898 as it's default port for communication between server and agent.

Solution 3

pgpool might be using that port.

You can do a "lsof | grep 9898" and check.

Comments

[Phot Sirch]

Do you have a source for that defunct videophone program or the reference to it?

[voretaq7]

serverwatch.com/tutorials/article.php/10825_3521746_2/… is the most authoritative one I found. The referenced site is long gone however & makes no mention of the MonkeyCom product.

[mugen kenichi]

Or lsof -i :9898

[user3355924]

I can conrirm that the tripwire agent is running on this port with an enterprise license on my machines. I would have voted up the first tripwire suggestion but don't have the rep points yet.

[Cbhihe]

+1 for mentioning pgpool.

[Phot Sirch]

Thank the Internet Archive for this page: web.archive.org/web/20040603165425/http://www.random-grp.com‌​/…. Using Google translate, the opening description says "MonkeyCom is a personal communication tool that allows you to easily transfer files between two computers connected via a telephone line using a modem or directly connected via serial cable or network."

[naXa stands with Ukraine]

9898 port is used in Xiaomi Mi Smart Home Hub device (if enabled).