What's on port 10117?

andyblackham

A number of my firewalls are seeing multiple hits per second on port 10117.
It's coming from may different wan addresses.

Does anyone know what's on this port? Is there a new exploit or root kit?

![Screen Shot 2015-10-19 at 22.24.10.jpg](/public/imported_attachments/1/Screen Shot 2015-10-19 at 22.24.10.jpg)
![Screen Shot 2015-10-19 at 22.24.10.jpg_thumb](/public/imported_attachments/1/Screen Shot 2015-10-19 at 22.24.10.jpg_thumb)

mer

SANS noticed a jump.
https://isc.sans.edu/port.html?port=10117

According to IANA it assigned to "NetIQ IQCResource Managament Svc"

https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?&page=116

Have no idea what it means in relation to your resources, but it appears to be a "reasonably well known" port number.