{
  "port": 9898,
  "protocol": "both",
  "service": "monkeycom",
  "oneLiner": "Registered as MonkeyCom with no published specification — in practice an unidentified high port.",
  "whatItIs": "IANA lists 9898 on both TCP and UDP as `monkeycom`, registered by an individual with no referenced document, and Nmap carries the same name forward. There is no public protocol description, no maintained implementation to point at, and no reason to expect the registered service on a modern network. A listener on 9898 is almost certainly an unrelated application that chose the number; fingerprint it rather than trusting the registry name.",
  "exposure": {
    "verdict": "careful",
    "note": "The registry name tells you nothing about what is actually answering. Identify the process before making an exposure decision."
  },
  "checkCommand": "sudo lsof -nP -iTCP:9898 -sTCP:LISTEN",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    }
  ]
}
