This alert is triggered when an attempt is made to initiate a new HTTPS connection (TCP port 443) that does not complete the handshake. This could indicate potential scanning or probing activity aimed at identifying open HTTPS ports without establishing a full connection.

• http-rules