description-logo Description

This indicates an attempt to use the NTLM over HTTP protocol.
NT LAN Manager (NTLM) is an authentication protocol used on networks running Microsoft Windows. It is the successor of the older protocol, Microsoft LAN Manager (LANMAN). NTLM is a challenge-response authentication protocol.

affected-products-logoAffected Products

NTLM over HTTP

Impact logoImpact

Unexpected network communication

Technology

Browser-Based, Network-Protocol, Client-Server, Peer-to-Peer, Cloud-Based, Mobile-Device

Behavior

  • Reasonable

Default Ports

  • TCP/80
  • TCP/443