{
  "port": 99,
  "protocol": "tcp",
  "service": "Metagram Relay",
  "oneLiner": "IANA-registered as Metagram Relay; historically also squatted by backdoors.",
  "whatItIs": "Port 99 is registered as `metagram`, Metagram Relay, an early message-relay service registered by Geoff Goodfellow. There is no published specification and no implementation in current use, so the registration is the only firm fact. Because it sits just under 100 and is normally closed, it has repeatedly been used as a listening port by hobby backdoors and hand-rolled admin shells. Anything open on 99 deserves a banner grab, not an assumption.",
  "exposure": {
    "verdict": "careful",
    "note": "No legitimate modern service claims this port; an unexplained listener on 99 is worth investigating rather than firewalling and forgetting."
  },
  "checkCommand": "nc -vz TARGET 99",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    }
  ]
}