Loading...
[get complete service list]
Top of page
Port Information
Protocol Service Name
tcp dabber [trojan] Dabber Worm backdoor
tcp monkeycom MonkeyCom
udp monkeycom MonkeyCom
Top IPs Scanning
Today Yesterday
172.104.138.223 (37)172.104.138.223 (49)
104.156.155.12 (12)118.123.105.93 (35)
8.219.210.186 (8)222.186.13.133 (34)
109.205.213.116 (7)118.123.105.89 (20)
104.156.155.5 (6)185.85.239.13 (19)
199.45.154.124 (6)94.156.166.117 (18)
113.249.159.56 (6)104.156.155.13 (15)
207.90.244.11 (4)113.249.159.56 (10)
194.180.49.191 (3)8.222.189.131 (10)
104.156.155.3 (3)92.255.57.59 (9)
Port diary mentions
URL
ISC DHCPD buffer overflow exploit code produced in the lab
Samba - Buffer Overrun, HP Remote Command Execution, Top 15 Worms, Hosts File, SasserDabber Activity
Top of page
User Comments
Submitted By Date
Comment
2015-10-31 07:55:57
Port 9898 is also use by FileMaker Web Engine as a loop back Port to IIS
Shahjahan Khan 2012-09-06 01:15:50
TCP Port 9898 is also used by Tripwire Agent that install on servers to communicate Tripwire Enterprise Servers.
2006-12-31 08:10:43
Also used for TOC/TOC2 (The other AIM protocol), so could cause problems for users if blocked outbound.
Joel Esler 2004-05-18 22:17:32
9898 is one of the backdoor ports used in Sasser. Sasser opens an ftp server on port 9898.
Travis Biehn 2004-05-14 18:03:06
Used by the dabber worm as a backdoor.
Harald Weiss 2004-05-14 01:51:59
9898 TCP has been reported as beeing related to a Backdoor of the Dabber Virus : http://www.lurhq.com/dabber.html for more info
Bill McCarty 2004-02-26 19:07:55
On Feb 25, 2004, I logged several probes of tcp/3127 and tcp/9898. Apparently, there's some association between MyDoom, which plays with tcp/3127, and this port.
Top of page
CVE Links
CVE # Description
Top of page