In practice this is an ESXi host or a VMware Workstation install; IANA's registration (ideafarm-door) has nothing to do with it.
VMware's authentication daemon and host agent listen on TCP 902 for core management traffic between vCenter Server and an ESXi host, for NFC (Network File Copy) used in provisioning, cloning and cold migration, and for the MKS channel that carries a virtual machine's mouse, keyboard and screen to a remote console. ESXi also sends a heartbeat to vCenter on UDP 902. Broadcom's documentation states the MKS port is not configurable, which is why 902 is one of the most reliable ways to identify an ESXi host on a scan. It answers with a plaintext banner naming the VMware Authentication Daemon and its version before requiring SSL.
Do not expose
This is a hypervisor management and console plane — anything that can reach it is one credential away from the screen and keyboard of every VM on the host. It belongs on an isolated management network.
$ nc -v -w 3 TARGET 902Seen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.
Get Beige Box →also available as JSON · Markdown
Corrections or a missing port? Reply @rimrocksystems.