diff --git a/rules/web/win_webshell_regeorg.yml b/rules/web/win_webshell_regeorg.yml
index a5ab1af05..c823666cb 100644
--- a/rules/web/win_webshell_regeorg.yml
+++ b/rules/web/win_webshell_regeorg.yml
@@ -21,7 +21,6 @@ detection:
             - '*connect&target*'
             - '*cmd=connect*'
             - '*cmd=disconnect*'
-            - '*&port*'
             - '*cmd=forward*'
     filter:
         referer: null