{
  "port": 50002,
  "protocol": "tcp",
  "service": "iiimsf (by convention)",
  "oneLiner": "Unregistered; historically associated with the Internet/Intranet Input Method Server Framework.",
  "whatItIs": "There is no IANA assignment for 50002 because it lies in the Dynamic/Private range. Nmap's service database names it iiimsf — the Internet/Intranet Input Method Server Framework, the input-method server used by Solaris-era desktops — which is the only well-attested association the number has. On modern systems an open 50002 is far more likely to be an arbitrary application port in a 50000-based block than an IIIM server, so identify it rather than trusting the label.",
  "exposure": {
    "verdict": "careful",
    "note": "A desktop input-method server has no business on a network interface at all; anything else here is unidentified until you fingerprint it."
  },
  "checkCommand": "nmap -Pn -sV -p 50002 TARGET",
  "links": [
    {
      "title": "Nmap source repository (nmap-services, where 50002 is listed as iiimsf)",
      "url": "https://github.com/nmap/nmap",
      "kind": "github"
    },
    {
      "title": "RFC 6335 — IANA Procedures for Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.rfc-editor.org/rfc/rfc6335.html",
      "kind": "spec"
    }
  ]
}