HTTP detected on non-standard port inbound

Ali AlEnezi@site

•updated Sep 15, 2026•0•0•2

Detects inbound HTTP traffic directed to internal hosts on ports other than commonly used web ports (80, 443, 8080, 8443, 8000, 8888, 3128). This behavior may indicate an attempt to bypass network security controls or the use of non-standard ports for command and control or data exfiltration.