What's on port 10117?
A number of my firewalls are seeing multiple hits per second on port 10117.
It's coming from may different wan addresses.
Does anyone know what's on this port? Is there a new exploit or root kit?
![Screen Shot 2015-10-19 at 22.24.10.jpg](/public/imported_attachments/1/Screen Shot 2015-10-19 at 22.24.10.jpg)
![Screen Shot 2015-10-19 at 22.24.10.jpg_thumb](/public/imported_attachments/1/Screen Shot 2015-10-19 at 22.24.10.jpg_thumb)
SANS noticed a jump.
According to IANA it assigned to "NetIQ IQCResource Managament Svc"
Have no idea what it means in relation to your resources, but it appears to be a "reasonably well known" port number.