What's on port 10117?
-
A number of my firewalls are seeing multiple hits per second on port 10117.
It's coming from may different wan addresses.Does anyone know what's on this port? Is there a new exploit or root kit?
![Screen Shot 2015-10-19 at 22.24.10.jpg](/public/imported_attachments/1/Screen Shot 2015-10-19 at 22.24.10.jpg)
![Screen Shot 2015-10-19 at 22.24.10.jpg_thumb](/public/imported_attachments/1/Screen Shot 2015-10-19 at 22.24.10.jpg_thumb) -
SANS noticed a jump.
https://isc.sans.edu/port.html?port=10117According to IANA it assigned to "NetIQ IQCResource Managament Svc"
https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?&page=116
Have no idea what it means in relation to your resources, but it appears to be a "reasonably well known" port number.