What's on port 10117?
-
A number of my firewalls are seeing multiple hits per second on port 10117.
It's coming from may different wan addresses.Does anyone know what's on this port? Is there a new exploit or root kit?

 -
SANS noticed a jump.
https://isc.sans.edu/port.html?port=10117According to IANA it assigned to "NetIQ IQCResource Managament Svc"
Have no idea what it means in relation to your resources, but it appears to be a "reasonably well known" port number.