False positive(1, ['Internal server'], ['Internal server', 'unknown ip'], 'divergent', ['Information leakage', 'Other attacks exploit '])


False positive(1, ['Internal server'], ['Internal server'], 'divergent', ['Weak password ', 'Information leakage '])


low risk(2, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'unknown ip'], 'other types', ['XSS ', 'Injection Attack '])


low risk(2, ['Internal device NAT', 'unknown ip'], ['Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Critical Event audit '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Crawler Attack'])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


high risk(1, ['unknown ip'], ['Internal server', 'unknown ip'], 'divergent', 'Multiple attack types')


high risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence', 'WEB scan probe '])


high risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Privilege Escalation '])


high risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Command ', 'Command Execution '])


low risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Critical system server', 'Internal device NAT', 'unknown ip'], 'divergent', ['Critical Event audit '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


medium risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Trojan remote control '])


medium risk(1, ['Internal server NAT'], ['unknown ip'], ' simple ', ['Middleware vulnerability '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


low risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Weak password '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Offending application '])


low risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Offending application '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Information leakage '])


high risk(1, ['unknown ip'], ['Government website', 'Internal server'], 'divergent', ['Overflow', 'Command execution '])


low risk(1, ['Government website'], ['unknown ip'], 'convergent', ['Anti-crawler', 'Protocol integrity'])


high risk(1, ['unknown ip'], ['Government website'], ' simple ', ['SQL Injection'])


high risk(1, ['unknown ip'], ['unknown ip'], ' simple ', 'Multiple attack types')


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Code Execution '])


False positive(1, ['Internal server'], ['Internal server', 'unknown ip'], 'divergent', ['Overflow', 'Other attacks exploit '])


low risk(1, ['unknown ip'], ['Critical system server', 'unknown ip'], 'divergent', ['WAF Common Defence'])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Information leakage'])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


medium risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Critical system server', 'Internal device NAT', 'unknown ip'], 'divergent', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


high risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Privilege escalation '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


unlabel(1, ['Internal device'], ['Internal server'], ' simple ', ['Trojan Behavior '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(2, ['Critical system server', 'unknown ip'], ['Internal server', 'unknown ip'], 'convergent', ['Info leakage', 'Weak password '])


low risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Offending application '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Government website'], ['unknown ip'], 'convergent', ['Anti-crawler', 'Protocol integrity'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Overflow'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], 'Multi-type margin', 'divergent', ['Critical Event audit '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


high risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Command Execute '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Offending application '])


high risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['webshell'])


low risk(2, ['Internal device NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Critical Event audit '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['XSS ', 'XSS '])


low risk(1, ['unknown ip'], ['Government website', 'unknown ip'], 'other types', ['Protocol integrity', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


high risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Command Execution '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Critical Event audit '])


False positive(1, ['Internal user'], ['Internal server'], ' simple ', ['Injection Attack'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['XSS ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Protocol integrity'])


False positive(1, ['Internal server'], ['Internal server', 'unknown ip'], 'divergent', ['Information leakage', 'Information leakage '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], 'Multi-type margin', 'divergent', ['Critical Event audit '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Government website', 'unknown ip'], 'other types', ['Protocol integrity', 'XSS '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['XSS '])


unlabel(1, ['unknown ip'], ['Government website'], ' simple ', ['Information leakage'])


unlabel(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server', 'Internal device NAT', 'unknown ip'], 'divergent', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Anti-crawler'])


False positive(1, ['Internal server'], ['Internal server', 'unknown ip'], 'divergent', ['Information leakage', 'Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS ', 'Cross-site Scripting '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Government website'], ['unknown ip'], 'convergent', ['Information leakage'])


low risk(1, ['unknown ip'], ['Government website', 'unknown ip'], 'other types', ['Protocol integrity', 'XSS '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(2, ['Internal server NAT', 'unknown ip'], ['Critical system server', 'unknown ip'], 'other types', ['XSS ', 'Critical Event audit '])


low risk(2, ['Critical system server', 'unknown ip'], ['Critical system server', 'Internal device NAT', 'unknown ip'], 'divergent', ['Critical Event audit ', 'Critical event audit '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical event audit '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['Government website'], ['unknown ip'], 'convergent', ['Information leakage'])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Protocol integrity'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(2, ['Internal server NAT', 'unknown ip'], 'Multi-type margin', 'divergent', ['XSS ', 'Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage ', 'Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal server'], 'convergent', ['Information leakage '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Denial of Service Attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Offending application '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['XSS ', 'XSS '])


low risk(1, ['unknown ip'], ['Government website', 'unknown ip'], 'other types', ['Protocol integrity', 'Cross-site Scripting '])


False positive(1, ['Internal server'], ['Internal server', 'unknown ip'], 'divergent', ['Overflow', 'Information leakage '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], 'Multi-type margin', 'divergent', ['Critical Event audit '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Internal device NAT'], 'divergent', ['Critical Event audit '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Denial of Service Attack '])


low risk(1, ['unknown ip'], ['Internal device'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(2, ['Critical system server', 'unknown ip'], ['Internal server', 'unknown ip'], 'convergent', ['Offending application ', 'Info leakage'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


medium risk(2, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'unknown ip'], 'divergent', ['XSS ', 'Middleware vulnerability '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Government website', 'unknown ip'], 'other types', ['Protocol integrity', 'XSS '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Critical system server', 'Internal device NAT', 'unknown ip'], 'divergent', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


high risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Command Execute '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS '])


medium risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Trojan remote control '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Offending application '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal server'], 'convergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Information leakage'])


low risk(1, ['unknown ip'], ['Government website', 'unknown ip'], 'other types', ['Protocol integrity', 'XSS '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Anti-crawler'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], 'Multi-type margin', 'divergent', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Critical Event audit '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


medium risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Information leakage '])


low risk(1, ['Internal server'], ['unknown ip'], 'convergent', ['Offending application '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['unknown ip'], ['Government website', 'unknown ip'], 'other types', ['Protocol integrity', 'XSS '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Scan Attack'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Information leakage'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Critical system server', 'Internal device NAT', 'unknown ip'], 'divergent', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


low risk(3, ['Internal server NAT', 'unknown ip'], ['Internal server NAT'], 'other types', ['XSS ', 'Injection Attack '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


False positive(1, ['Internal server'], ['Internal server'], 'divergent', ['Other attacks exploit ', 'Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Anti-crawler'])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


False positive(1, ['Internal server'], ['Internal server', 'unknown ip'], 'divergent', ['Overflow', 'Other attacks exploit '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], 'Multi-type margin', 'divergent', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Scan Attack'])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', [''])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server', 'Internal device NAT', 'unknown ip'], 'divergent', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal server'], 'convergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'WAF Common Defence'])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


False positive(1, ['Internal user'], ['Internal server'], ' simple ', ['Injection Attack'])


False positive(1, ['Internal server'], ['Internal server'], 'divergent', ['Other attacks exploit ', 'Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Offending application '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Anti-crawler'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Critical system server', 'Internal device NAT', 'unknown ip'], 'divergent', ['Critical Event audit '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', [''])


unlabel(1, ['unknown ip'], ['Government website'], ' simple ', ['Information leakage'])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Information leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Critical Event audit '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['unknown ip'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(1, ['Internal device'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(3, ['Critical system server', 'Internal server', 'unknown ip'], ['unknown ip'], 'convergent', ['Offending application ', 'Info leakage'])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Government website'], ['unknown ip'], 'convergent', ['Information leakage'])


low risk(1, ['Government website'], ['unknown ip'], 'convergent', ['Anti-crawler'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Critical system server', 'Internal device NAT', 'unknown ip'], 'divergent', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


False positive(1, ['Internal server'], ['Internal server'], 'divergent', ['Sensitive information/important file leakage ', 'Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', [''])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', [''])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], 'Multi-type margin', 'divergent', ['Critical Event audit '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(2, ['Critical system server', 'unknown ip'], ['Internal server', 'unknown ip'], 'convergent', ['Offending application ', 'Info leakage'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device NAT', 'unknown ip'], 'divergent', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Internal device'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal user'], ['Internal device'], ' simple ', ['Information leakage '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


False positive(1, ['Internal user'], ['Internal server'], ' simple ', ['Injection Attack'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


high risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['webshell'])


high risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Insert backdoor file'])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal device NAT', 'unknown ip'], 'divergent', ['Critical Event audit '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(2, ['Internal device', 'unknown ip'], ['Internal device', 'Internal user', 'unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


high risk(1, ['unknown ip'], ['Government website', 'Internal server'], 'divergent', ['Overflow', 'Code Execution '])


high risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage ', 'Other attacks exploit '])


high risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Cross-site Scripting (XSS)'])


high risk(1, ['unknown ip'], ['unknown ip'], ' simple ', 'Multiple attack types')


high risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Insert backdoor file'])


unlabel(1, ['unknown ip'], ['Government website'], ' simple ', ['Overflow'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['Internal device'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Critical system server', 'Internal device NAT', 'unknown ip'], 'divergent', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Information leakage'])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS ', 'Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


False positive(1, ['Internal server'], ['Internal server'], 'divergent', ['Other attacks exploit ', 'Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Government website'], ['unknown ip'], 'convergent', ['Anti-crawler'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Anti-crawler'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Critical system server', 'Internal device NAT', 'unknown ip'], 'divergent', ['Critical Event audit '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal device'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(2, ['Internal server', 'unknown ip'], ['Internal server'], 'other types', ['Information leakage ', 'Other attacks exploit '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage ', 'Information leakage '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


unlabel(1, ['unknown ip'], ['Government website', 'Internal server'], 'divergent', ['Overflow', 'Sensitive information/important file leakage '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Internal device NAT', 'unknown ip'], 'divergent', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal server'], 'convergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Government website'], ['unknown ip'], 'convergent', ['Anti-crawler'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Critical event audit '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Cross-site Scripting '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit '])


low risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Offending application '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Government website'], ['unknown ip'], 'convergent', ['Anti-crawler'])


low risk(1, ['Government website'], ['unknown ip'], 'convergent', ['Information leakage'])


unlabel(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Critical system server', 'Internal device NAT', 'unknown ip'], 'divergent', ['Critical Event audit '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Offending application '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Information leakage'])


unlabel(1, ['unknown ip'], ['Government website'], ' simple ', ['Information leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(2, ['Internal server', 'unknown ip'], ['Internal server'], 'other types', ['Information leakage ', 'Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Trojan Behavior '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


low risk(1, ['unknown ip'], ['Critical system server', 'Internal device NAT', 'unknown ip'], 'divergent', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal device NAT', 'unknown ip'], 'divergent', ['Critical Event audit '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Critical system server', 'unknown ip'], 'divergent', ['WAF Common Defence'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical event audit '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['WAF Common Defence', 'Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence'])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Government website'], ['unknown ip'], 'convergent', ['Anti-crawler'])


low risk(2, ['Internal server NAT', 'unknown ip'], ['Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Critical Event audit '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal device'], ['unknown ip'], 'divergent', ['Information leakage ', 'Information leakage '])


low risk(1, ['Government website'], ['unknown ip'], 'convergent', ['Overflow', 'Anti-crawler'])


unlabel(1, ['unknown ip'], ['Government website'], ' simple ', ['Information leakage'])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Information leakage'])


unlabel(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Anti-crawler'])


low risk(1, ['unknown ip'], ['Internal device NAT', 'unknown ip'], 'divergent', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])