What's on port 10117?

[andyblackham]

A number of my firewalls are seeing multiple hits per second on port 10117.
It's coming from may different wan addresses.

Does anyone know what's on this port? Is there a new exploit or root kit?


[mer]

SANS noticed a jump.
https://isc.sans.edu/port.html?port=10117

According to IANA it assigned to "NetIQ IQCResource Managament Svc"

https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?&page=116

Have no idea what it means in relation to your resources, but it appears to be a "reasonably well known" port number.