For most of the workloads, these type of HTTP connections from the nodes are visible in the network graph with unexpected port numbers, shown out of no where.