{
  "port": 666,
  "protocol": "both",
  "service": "mdqs / doom",
  "oneLiner": "Registered twice — as mdqs, and to id Software for Doom — but neither is what you will find running.",
  "whatItIs": "IANA carries two registrations for 666 on both TCP and UDP: \"mdqs\", with no description, and \"doom\", assigned to id Software. The Doom entry is a 1990s artefact from the era when games registered ports; Doom's own multiplayer ran over IPX, and modern source ports such as Chocolate Doom and GZDoom use their own UDP ports rather than 666. Because the number is memorable and unclaimed in practice, it gets picked deliberately by hobby projects and by scanner and malware authors alike, so treat a listener here as unidentified until you fingerprint it.",
  "exposure": {
    "verdict": "never",
    "note": "Nothing standard listens here, so an open 666 is an unknown service you have not accounted for — identify it before deciding anything else about it."
  },
  "checkCommand": "nc -vz -w 3 TARGET 666",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 666",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=666",
      "kind": "iana"
    }
  ]
}
