Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    What's on port 10117?

    Firewalling
    2
    2
    565
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      andyblackham last edited by

      A number of my firewalls are seeing multiple hits per second on port 10117.
      It's coming from may different wan addresses.

      Does anyone know what's on this port? Is there a new exploit or root kit?

      ![Screen Shot 2015-10-19 at 22.24.10.jpg](/public/imported_attachments/1/Screen Shot 2015-10-19 at 22.24.10.jpg)
      ![Screen Shot 2015-10-19 at 22.24.10.jpg_thumb](/public/imported_attachments/1/Screen Shot 2015-10-19 at 22.24.10.jpg_thumb)

      1 Reply Last reply Reply Quote 0
      • M
        mer last edited by

        SANS noticed a jump.
        https://isc.sans.edu/port.html?port=10117

        According to IANA it assigned to "NetIQ IQCResource Managament Svc"

        https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?&page=116

        Have no idea what it means in relation to your resources, but it appears to be a "reasonably well known" port number.

        1 Reply Last reply Reply Quote 0
        • First post
          Last post