low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


False positive(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', [''])


unlabel(1, ['Internal device'], ['unknown ip'], ' simple ', ['Suspicious traffic '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Information leakage'])


False positive(1, ['Internal server'], ['Internal server', 'unknown ip'], 'divergent', ['Overflow', 'Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Password Attack'])


low risk(1, ['unknown ip'], 'Multi-type margin', 'divergent', ['Critical Event audit '])


False positive(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(3, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS ', 'Injection Attack '])


low risk(5, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'unknown ip'], 'divergent', ['XSS ', 'Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(1, ['Internal device NAT'], ['unknown ip'], 'convergent', ['Injection Attack ', 'Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


high risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Host vulnerability Exploitation '])


high risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['WEB Backdoor '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Critical event audit '])


low risk(1, ['Internal server'], ['unknown ip'], 'convergent', ['Offending application ', ''])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', [''])


False positive(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal user', 'Internal device NAT'], 'other types', ['MISC attack ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Anti-crawler'])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(2, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Injection Attack '])


medium risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Host vulnerability Exploitation '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(2, ['Internal device NAT', 'unknown ip'], 'Multi-type margin', 'divergent', ['Critical Event audit ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


False positive(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


medium risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Critical event audit '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal device'], 'convergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', [''])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


False positive(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Information leakage '])


False positive(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['Internal device NAT'], ['unknown ip'], 'convergent', ['Critical Event audit ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Cross-site Scripting ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Crawler Attack'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', [''])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Information leakage '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


high risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['webshell'])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Denial of Service Attack '])


False positive(1, ['Internal server'], ['Internal server', 'unknown ip'], 'divergent', ['Overflow', 'Other attacks exploit '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk high risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack ', 'WEB Backdoor '])


low risk(2, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'convergent', ['XSS ', 'Malicious domain access '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Cross-site Scripting ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


high risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['WEB Backdoor '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence'])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Cross-site Scripting '])


False positive(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


False positive(1, ['Internal user'], ['Internal server'], ' simple ', ['Injection Attack'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Cross-site Scripting ', 'Cross-site Scripting '])


low risk high risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack ', 'Host vulnerability Exploitation '])


low risk(2, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'unknown ip'], 'other types', ['XSS ', 'XSS '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', [''])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', [''])


low risk(1, ['Internal server'], ['unknown ip'], 'convergent', ['Offending application ', 'Sensitive information/important file leakage '])


low risk(1, ['unknown ip'], ['Government website', 'Internal server'], 'divergent', ['Information leakage', 'Weak password '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


False positive(1, ['Internal server'], ['Internal server'], 'divergent', ['Other attacks exploit ', 'Information leakage '])


False positive(1, ['Internal server'], ['unknown ip'], ' simple ', ['Scanner'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


False positive(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Weak password '])


low risk(2, ['Internal device', 'Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', [''])


False positive(1, ['Internal user'], ['Internal server'], 'divergent', ['Password Cracking '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal device'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Denial of Service Attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Trojan Behavior '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Information leakage '])


medium risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Web Application Attacks '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


False positive(1, ['Critical system server'], ['Service server', 'unknown ip'], 'convergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Government website', 'Internal server'], 'divergent', ['Information leakage', 'Weak password '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


low risk(3, ['Internal server NAT', 'unknown ip'], ['Internal device NAT'], 'divergent', ['Cross-site Scripting ', 'XSS '])


low risk(3, ['Internal server NAT', 'unknown ip'], ['Internal server NAT'], 'other types', ['XSS ', 'Cross-site Scripting '])


low risk high risk(2, ['Internal device NAT', 'unknown ip'], ['Internal server NAT', 'unknown ip'], 'other types', ['Cross-site Scripting ', 'WEB Backdoor '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack ', 'Cross-site Scripting '])


unlabel(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Injection Attack '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Info leakage'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Cross-site Scripting ', 'Injection Attack '])


medium risk(1, ['Internal server NAT'], ['unknown ip'], ' simple ', ['Middleware vulnerability '])


False positive(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


unlabel(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


high risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['WEB Backdoor '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Weak password '])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Command execution '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


medium risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Web Application Attacks '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Trojan Behavior '])


False positive(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Trojan Behavior '])


unlabel(1, ['Internal server'], ['Internal server'], ' simple ', ['Trojan behavior '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(2, ['Internal server', 'unknown ip'], ['Government website', 'unknown ip'], 'other types', ['Information leakage', 'Weak password '])


unlabel(1, ['unknown ip'], ['Government website'], ' simple ', ['Information leakage'])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Password Attack'])


unlabel(1, ['unknown ip'], ['Government website'], ' simple ', ['Overflow'])


False positive(1, ['Internal server'], ['unknown ip'], 'divergent', ['Overflow', 'Scanner'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Injection Attack '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Cross-site Scripting ', 'WEB Backdoor '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['System scan probe '])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack ', 'Cross-site Scripting '])


low risk(2, ['Internal server NAT', 'unknown ip'], ['Internal device NAT', 'unknown ip'], 'divergent', ['Cross-site Scripting ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


unlabel(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Injection Attack '])


medium risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Host Exploit '])


False positive(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting ', 'Cross-site Scripting '])


medium risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence', 'WEB scan probe '])


unlabel(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Command ', 'Command Execution '])


False positive(1, ['unknown ip'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Weak password '])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', [''])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


False positive(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Trojan Behavior '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['Offending application '])


unlabel(1, ['unknown ip'], ['Government website', 'Internal server'], 'divergent', ['Information leakage', 'Weak password '])


False positive(1, ['Internal server'], ['Internal server', 'unknown ip'], 'divergent', ['Overflow', 'Other attacks exploit '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', 'Multiple attack types')


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS ', 'Cross-site Scripting '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Cross-site Scripting ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


False positive(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal device NAT'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


medium risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Host vulnerability Exploitation '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Weak password '])


medium risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Web Application Attacks '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Trojan Behavior '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Offending application '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


unlabel(1, ['unknown ip'], ['Government website', 'Internal server'], 'divergent', ['Information leakage', 'Weak password '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(2, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(2, ['Internal server NAT', 'unknown ip'], ['Internal device NAT', 'unknown ip'], 'other types', ['Injection Attack ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


False positive(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack ', 'Cross-site Scripting '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['Internal device NAT'], ['unknown ip'], 'convergent', ['Injection Attack ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Injection Attack '])


medium risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Host vulnerability Exploitation '])


unlabel(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Command Execute '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Weak password '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Trojan Behavior '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


unlabel(1, ['Internal device'], ['unknown ip'], ' simple ', [''])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal server'], ['unknown ip'], 'convergent', ['Offending application ', 'Weak password '])


False positive(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Information leakage '])


low risk(2, ['Internal server', 'unknown ip'], ['Government website', 'unknown ip'], 'other types', ['Information leakage', 'Weak password '])


low risk(8, ['Internal server NAT', 'unknown ip'], ['Internal device NAT'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(1, ['Internal device NAT'], ['unknown ip'], 'convergent', ['Injection Attack ', 'Cross-site Scripting '])


low risk(2, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(2, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['XSS '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting ', 'WEB Backdoor '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['System scan probe '])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Information leakage '])


False positive(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Weak password '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', [''])


False positive(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(3, ['Critical system server', 'Internal server', 'unknown ip'], ['unknown ip'], 'convergent', ['Offending application ', 'Info leakage'])


low risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Weak password '])


False positive(1, ['Internal user'], ['Internal server'], ' simple ', ['Password Cracking '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', [''])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Trojan Behavior '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Privilege escalation '])


low risk(1, ['Government website'], ['unknown ip'], 'convergent', ['Anti-crawler'])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS ', 'Injection Attack '])


low risk(2, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(4, ['Internal server NAT', 'Internal device NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Host Exploit '])


low risk high risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Cross-site Scripting ', 'Host Exploit '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


unlabel(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


medium risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Host vulnerability Exploitation '])


medium risk(1, ['Internal server NAT'], ['unknown ip'], ' simple ', ['Middleware vulnerability '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Injection Attack '])


False positive(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Cross-site Scripting ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


False positive(1, ['Internal user'], ['Internal server'], ' simple ', ['Injection Attack'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', [''])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Trojan Behavior '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


False positive(1, ['Internal user'], ['Internal server'], 'divergent', ['Password Cracking '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


unlabel(1, ['Internal device'], ['unknown ip'], ' simple ', ['Denial of Service Attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


unlabel(1, ['Internal server'], ['Internal server'], ' simple ', ['Trojan behavior '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(2, ['Internal device NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(3, ['Internal server NAT', 'Internal device NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


unlabel(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Trojan remote control '])


False positive(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], 'divergent', ['Information leakage ', 'Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(4, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


unlabel(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


unlabel(1, ['Internal device NAT'], ['unknown ip'], 'convergent', ['WEB Backdoor ', 'Host vulnerability Exploitation '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', 'Multiple attack types')


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Injection Attack '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


low risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Weak password '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Information leakage ', 'Directory traversal '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Command execution ', 'Code Execution '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'File upload '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Unauthorized access/permission bypass ', 'Improper default configuration '])


False positive(1, ['Internal device'], ['Internal server'], 'divergent', ['Password Cracking '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password Cracking '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Sensitive file detection', 'Dangerous script upload', 'webshell upload '])


False positive(1, ['Internal device'], ['Internal server NAT', 'Storage management server', 'unknown ip'], 'divergent', ['Information leakage ', 'Information leakage '])


False positive(1, ['Internal device'], ['unknown ip'], ' simple ', ['Vulnerability Scanning '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal user'], ' simple ', [''])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


medium risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Web Application Attacks '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Trojan Behavior '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


high risk(1, ['unknown ip'], ['Government website', 'Internal server'], 'divergent', ['Overflow', 'Code Execution '])


high risk(1, ['unknown ip'], ['Government website'], ' simple ', ['SQL Injection'])


low risk high risk(1, ['unknown ip'], ['Critical system server'], ' simple ', 'Multiple attack types')


high risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Command execution '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Injection Attack '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(2, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'convergent', ['Cross-site Scripting ', 'Malicious domain access '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


high risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['WEB Backdoor '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


False positive(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Command execution '])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Network scanning '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


low risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Weak password '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage ', 'Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


False positive(1, ['Critical system server'], ['Service server', 'unknown ip'], 'convergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(2, ['Critical system server', 'unknown ip'], ['Internal server', 'unknown ip'], 'convergent', ['Offending application ', 'Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


unlabel(1, ['Internal device'], ['unknown ip'], ' simple ', ['Suspicious Traffic '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Trojan Behavior '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attack '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Cross-site Scripting ', 'Injection Attack '])


low risk(2, ['Internal device NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(2, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Cross-site Scripting ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


False positive(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal device NAT'], 'divergent', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


False positive(1, ['Internal device'], ['Internal server'], 'divergent', ['Information leakage ', 'Directory traversal '])


False positive(1, ['Internal device'], ['Internal server'], 'divergent', ['Command execution ', 'File upload '])


medium risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence', 'WEB scan probe '])


False positive(1, ['Internal device'], ['Internal server'], 'divergent', ['Other attacks exploit ', 'Unauthorized access/permission bypass '])


False positive(1, ['Internal device'], ['Internal server'], 'divergent', ['Dangerous script upload'])


False positive(1, ['Internal device'], ['Internal server'], 'divergent', ['Sensitive file detection', 'webshell upload '])


low risk(1, ['Internal device'], ['Internal server'], ' simple ', ['Weak password '])


False positive(1, ['unknown ip'], ['Internal server'], ' simple ', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], 'divergent', ['Application Exploit', 'Directory traversal '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], 'divergent', ['Java Reverse Sequence Vulnerability', 'Dangerous script upload'])


low risk(1, ['Internal device'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage ', 'Other attacks exploit '])


False positive(1, ['Internal device'], ['Internal server'], 'divergent', 'Multiple attack types')


False positive(1, ['Internal device'], ['Internal server'], 'divergent', ['Application Exploit', 'File upload '])


False positive(1, ['Internal device'], ['Internal server'], 'divergent', ['Java Reverse Sequence Vulnerability', 'Unauthorized access/permission bypass '])


False positive(1, ['Internal device'], ['Internal server'], 'divergent', ['Information leakage ', 'webshell upload '])


False positive(1, ['Internal device'], ['Internal server'], 'divergent', ['Overflow attacks '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['The system command executes', 'Dangerous script upload'])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['File reading '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Improper default configuration '])


medium risk(1, ['Internal device'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


False positive(2, ['Internal device', 'Internal server'], ['Internal server'], 'divergent', 'Multiple attack types')


False positive medium risk(1, ['unknown ip'], ['Internal server', 'unknown ip'], 'divergent', 'Multiple attack types')


False positive(1, ['Internal device'], ['Internal server'], 'divergent', ['Sensitive file detection'])


unlabel(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Overflow'])


medium risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence'])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Java Reverse Sequence Vulnerability'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Trojan Behavior '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', [''])


False positive(1, ['Internal user'], ['Internal server'], ' simple ', ['Password Cracking '])


unlabel(1, ['Internal device'], ['unknown ip'], ' simple ', [''])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(1, ['Internal server'], ['Internal server', 'unknown ip'], 'divergent', ['Overflow', 'Other attacks exploit '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage ', 'Information leakage '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(5, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(2, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'unknown ip'], 'divergent', ['Cross-site Scripting ', 'Cross-site Scripting '])


low risk(3, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'convergent', ['XSS ', 'Malicious domain access '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(2, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['Cross-site Scripting ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


False positive(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


medium risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Host vulnerability Exploitation '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Weak password '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


False positive(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', [''])


False positive(1, ['Internal device'], ['Internal server'], 'divergent', ['Information leakage ', 'Directory traversal '])


False positive(1, ['Internal device'], ['Internal server'], 'divergent', 'Multiple attack types')


False positive(1, ['Internal device'], ['Internal server'], 'divergent', ['Code Execution ', 'Other attacks exploit '])


False positive(1, ['Internal device'], ['Internal server'], 'divergent', ['Application Exploit', 'Unauthorized access/permission bypass '])


False positive(1, ['Internal device'], ['Internal server'], 'divergent', ['Dangerous script upload', 'webshell upload '])


False positive(1, ['Internal device'], ['Internal server'], 'divergent', ['Sensitive file detection'])


False positive(1, ['Internal device'], ['Internal server'], 'divergent', ['Java Reverse Sequence Vulnerability'])


False positive(1, ['Internal device'], ['Internal server'], 'divergent', ['Improper default configuration ', 'File download ', 'Overflow attacks '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Other attacks exploit '])


False positive(1, ['Internal user'], ['Internal server'], ' simple ', ['Password Cracking '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Trojan Behavior '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal device'], ['Internal server'], ' simple ', ['Information leakage '])


medium risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', 'Multiple attack types')


unlabel(1, ['Internal server'], ['Internal server'], ' simple ', ['Overflow attacks '])


unlabel(1, ['Internal server'], ['Internal server'], ' simple ', ['Improper default configuration '])


low risk(1, ['Government website'], ['unknown ip'], 'convergent', ['Anti-crawler'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


False positive(1, ['Internal server'], ['unknown ip'], ' simple ', ['Scanner'])


unlabel(1, ['unknown ip'], ['Government website'], ' simple ', ['Overflow'])


low risk(7, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Injection Attack '])


low risk(7, ['Internal server NAT', 'Internal device NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'XSS '])


low risk high risk(2, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Host Exploit '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Password Attack'])


False positive(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


False positive(1, ['Internal device'], ['Internal server'], 'divergent', 'Multiple attack types')


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Java Reverse Sequence Vulnerability', 'Other attacks exploit '])


low risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Weak password '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


False positive(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Information leakage '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], 'divergent', ['Information leakage ', 'Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', [''])


False positive(1, ['Internal user'], ['Internal server'], 'divergent', ['Password Cracking '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Suspicious Traffic '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Trojan Behavior '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Code Execution '])


False positive(1, ['Internal device'], ['unknown ip'], ' simple ', ['Vulnerability Scanning '])


unlabel(1, ['Internal device'], ['Internal server'], ' simple ', ['Trojan behavior '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(2, ['Critical system server', 'unknown ip'], ['Internal server', 'unknown ip'], 'convergent', ['Offending application ', 'Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Weak password '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


low risk(1, ['unknown ip'], ['Government website', 'Critical system server'], 'divergent', ['Information leakage', 'Anti-crawler'])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Injection Attack ', 'Cross-site Scripting '])


low risk(9, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'convergent', 'Multiple attack types')


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal device NAT'], 'divergent', ['XSS ', 'XSS '])


unlabel(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(2, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


False positive(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


medium risk(1, ['Internal device NAT'], ['unknown ip'], 'convergent', ['Host Exploit '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


unlabel(1, ['unknown ip'], ['Internal server'], 'divergent', ['Sensitive information/important file leakage '])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


False positive(1, ['Internal user'], ['Internal server'], 'divergent', ['Password Cracking '])


False positive(1, ['Internal device'], ['Internal server'], 'divergent', ['Information leakage ', 'Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Privilege Escalation '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


unlabel(1, ['Internal user'], ['unknown ip'], 'divergent', ['Vulnerability Scanning ', 'Directory traversal '])


medium risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Web Application Attacks '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Trojan Behavior '])


False positive(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


unlabel(1, ['unknown ip'], ['Government website'], ' simple ', ['Overflow'])


unlabel(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Anti-crawler'])


low risk(1, ['unknown ip'], ['Government website', 'Critical system server'], 'divergent', ['Information leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack ', 'Cross-site Scripting '])


low risk(2, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Injection Attack '])


low risk(3, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk high risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Cross-site Scripting ', 'Host Exploit '])


low risk(2, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


medium risk(1, ['Internal device NAT'], ['unknown ip'], 'convergent', ['Host Exploit '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server', 'unknown ip'], 'divergent', ['Critical Event audit '])


False positive(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


unlabel(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Critical Event audit '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Command execution '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Offending application '])


unlabel(1, ['Internal user'], ['unknown ip'], 'divergent', ['Vulnerability Scanning ', 'Directory traversal '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Trojan Behavior '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(2, ['Internal device', 'Internal server'], ['Internal device', 'Internal server'], 'divergent', 'Multiple attack types')


False positive(2, ['Internal device', 'Internal server'], ['Internal device', 'Internal server'], 'other types', ['Java Reverse Sequence Vulnerability', 'File upload '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Information leakage ', 'Information leakage '])


False positive(1, ['Internal server'], ['Internal device'], 'convergent', ['Sensitive file detection', 'Overflow attacks ', 'Insert backdoor file'])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Dangerous script upload'])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['webshell upload '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', [''])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(2, ['Critical system server', 'unknown ip'], ['Government website', 'unknown ip'], 'other types', ['Information leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Information leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Anti-crawler'])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


low risk(7, ['Internal server NAT', 'unknown ip'], ['Internal device NAT', 'unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(3, ['Internal device NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack ', 'XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


low risk(3, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS ', 'Injection Attack '])


low risk(3, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Host vulnerability Exploitation '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


unlabel(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


False positive(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


unlabel(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Command execution '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


False positive(1, ['Internal server'], ['Internal server'], 'divergent', ['Other attacks exploit ', 'Information leakage '])


unlabel(1, ['Internal device'], ['Internal server'], ' simple ', ['Directory traversal ', 'Unauthorized access/permission bypass '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Vulnerability Scanning '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Directory traversal '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', 'Multiple attack types')


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Improper default configuration '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', [''])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Trojan Behavior '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Denial of Service Attack '])


low risk(1, ['unknown ip'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Offending application '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Vulnerability Scanning '])


False positive(1, ['Internal server'], ['Internal device'], 'convergent', ['Password crack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(1, ['Internal server'], ['unknown ip'], 'divergent', ['Overflow', 'Scanner'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Government website', 'unknown ip'], 'divergent', ['Information leakage', 'Anti-crawler'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Anti-crawler'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(5, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk high risk(2, ['Internal device NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'WEB Backdoor '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS ', 'Cross-site Scripting '])


low risk high risk(1, ['Internal device NAT'], ['unknown ip'], 'convergent', ['Critical Event audit ', 'WEB Backdoor '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Cross-site Scripting ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


unlabel(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


False positive(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


unlabel(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


medium risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Web Application Attacks '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


unlabel(1, ['Internal user'], ['unknown ip'], 'divergent', ['Offending application ', 'Vulnerability Scanning '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Directory traversal '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', [''])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Offending application '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', [''])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Privilege Escalation '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Information leakage'])


unlabel(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


unlabel(1, ['unknown ip'], ['Internal server'], 'divergent', ['Sensitive information/important file leakage ', 'Code Execution '])


low risk(1, ['unknown ip'], ['Internal server', 'unknown ip'], 'divergent', ['Anti-crawler', 'Information leakage '])


high risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence', 'WAF Common Defence', 'Info leakage'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


unlabel(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Injection Attack '])


low risk(3, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Injection Attack '])


low risk(2, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


False positive(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


unlabel(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['Internal device NAT'], ['unknown ip'], 'convergent', ['Cross-site Scripting '])


False positive(1, ['Internal server'], ['Internal server'], 'divergent', ['Other attacks exploit ', 'Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', [''])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


unlabel(1, ['Internal device'], ['Internal server'], ' simple ', [''])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Vulnerability Scanning '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Denial of Service Attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Denial of Service Attack '])


unlabel(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Denial of Service Attack '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server', 'unknown ip'], 'divergent', ['Overflow', 'Other attacks exploit '])


low risk(2, ['Critical system server', 'unknown ip'], ['Critical system server', 'unknown ip'], 'divergent', ['Critical Event audit ', 'Info leakage'])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(2, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


medium risk(4, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Host vulnerability Exploitation '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


False positive(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical event audit '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Cross-site scripting attacks ', 'XSS '])


unlabel(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


False positive(1, ['Internal user'], ['Internal server'], ' simple ', ['Injection Attack'])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Weak password ', 'Other attacks exploit '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['unknown ip'], ['Internal server', 'Internal server NAT'], 'convergent', ['Information leakage ', 'Trojan remote control '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], 'divergent', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Vulnerability Scanning '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', [''])


medium risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Web Application Attacks '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Offending application '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Government website', 'Critical system server'], 'divergent', ['Information leakage', 'Info leakage'])


low risk(2, ['Internal device NAT', 'unknown ip'], 'Multi-type margin', 'divergent', ['Cross-site Scripting ', 'Critical Event audit '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence'])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(2, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'unknown ip'], 'other types', ['XSS ', 'Injection Attack '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS '])


False positive(1, ['Internal server'], ['Internal server'], 'divergent', ['Other attacks exploit ', 'Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['Offending application '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


False positive(1, ['Internal server'], ['Internal server', 'unknown ip'], 'divergent', ['Overflow', 'Other attacks exploit '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Anti-crawler'])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


low risk(6, ['Internal server NAT', 'unknown ip'], ['Internal device NAT', 'unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site scripting attacks '])


low risk(1, ['unknown ip'], ['Critical system server', 'Internal device NAT', 'unknown ip'], 'divergent', ['Critical Event audit '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(2, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


unlabel(1, ['Internal device'], ['Internal server'], ' simple ', [''])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal server'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Denial of Service Attack '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Anti-crawler'])


False positive(1, ['Internal server'], ['Internal server', 'unknown ip'], 'divergent', ['Overflow', 'Other attacks exploit '])


low risk(6, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(2, ['Internal server NAT', 'unknown ip'], 'Multi-type margin', 'divergent', ['Cross-site Scripting ', 'Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


unlabel(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Injection Attack '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence'])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


False positive(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Vulnerability Scanning '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['Offending application '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


low risk(1, ['unknown ip'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(2, ['Critical system server', 'unknown ip'], ['Internal server', 'unknown ip'], 'convergent', ['Offending application ', 'Info leakage'])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(4, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence', 'Info Leak '])


low risk(1, ['unknown ip'], ['Internal server', 'unknown ip'], 'divergent', ['System scan probe ', 'Info leakage', 'Information leakage '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical event audit '])


low risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Critical system server', 'Internal device NAT', 'unknown ip'], 'divergent', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Offending application '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(4, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Injection Attack '])


low risk(2, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(4, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


medium risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Host vulnerability Exploitation '])


low risk(1, ['unknown ip'], 'Multi-type margin', 'divergent', ['Critical Event audit '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


low risk(1, ['Internal device NAT'], ['unknown ip'], 'convergent', ['Injection Attack ', 'WEB Backdoor '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


False positive(1, ['Internal server'], ['Internal server'], 'divergent', ['Other attacks exploit ', 'Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Offending application '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


low risk(1, ['Internal user'], ['Service server'], ' simple ', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Anti-crawler'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Anti-crawler'])


False positive(1, ['Internal server'], ['Internal server', 'unknown ip'], 'divergent', ['Overflow', 'Information leakage '])


low risk(1, ['unknown ip'], ['Critical system server', 'Internal device NAT', 'unknown ip'], 'divergent', ['Critical Event audit '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


low risk(2, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'WEB Backdoor '])


low risk(5, ['Internal server NAT', 'Internal device NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Info leakage'])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


False positive(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Information leakage '])


low risk(2, ['Internal device', 'unknown ip'], ['Internal user', 'unknown ip'], 'other types', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', [''])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


low risk(5, ['Internal server NAT', 'unknown ip'], ['Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Trojan remote control '])


medium risk(3, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Middleware vulnerability '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Anti-crawler'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


False positive(1, ['Internal user'], ['Internal server'], ' simple ', ['Injection Attack'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


low risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Network scanning '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Offending application '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


medium risk(1, ['unknown ip'], ['Internal server', 'Internal server NAT'], 'convergent', ['Information leakage ', 'Middleware vulnerability '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Denial of Service Attack '])


low risk(1, ['Internal server'], ['unknown ip'], 'convergent', ['Information leakage '])


False positive(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage ', 'Information leakage '])


high risk(1, ['unknown ip'], ['Critical system server', 'Internal server'], 'divergent', ['Anti-crawler', 'Code Execution '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Anti-crawler'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])