high risk(1, ['Internal server'], ['unknown ip'], 'convergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Offending application '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


False positive(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Information leakage '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence'])


False positive(1, ['Internal server'], ['Internal server'], 'divergent', ['Other attacks exploit ', 'Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Government website'], ['unknown ip'], 'convergent', ['Anti-crawler'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Anti-crawler'])


low risk(6, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Injection Attack'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


low risk(1, ['Internal device'], ['unknown ip'], 'divergent', ['MISC attack '])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Offending application '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Offending application '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


medium risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Trojan remote control '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Offending application '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Denial of Service Attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(1, ['Internal server'], ['Internal server', 'unknown ip'], 'divergent', ['Scanner', 'Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', [''])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(2, ['Critical system server', 'unknown ip'], ['Internal server', 'unknown ip'], 'convergent', ['Info leakage', 'Information leakage '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Information leakage', 'Overflow'])


high risk(1, ['Internal server'], ['unknown ip'], 'convergent', ['Sensitive information/important file leakage ', 'Unauthorized access/permission bypass '])


high risk(1, ['unknown ip'], ['Critical system server', 'Internal server'], 'divergent', ['WEB scan probe ', 'Directory traversal '])


high risk(1, ['unknown ip'], ['Government website', 'Internal server'], 'divergent', ['Information leakage', 'Other attacks exploit '])


high risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Information disclosure ', 'Info leakage', 'File directory attack '])


high risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Information leakage'])


high risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Information leakage '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['unknown ip'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', 'Multiple attack types')


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Directory traversal ', 'Unauthorized access/permission bypass '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


high risk(5, ['Government website', 'Internal server', 'unknown ip'], ['Government website', 'Critical system server', 'unknown ip'], 'divergent', 'Multiple attack types')


high risk(1, ['unknown ip'], ['Government website', 'Internal server'], 'divergent', ['Overflow', 'Sensitive information/important file leakage '])


high risk(1, ['Internal server'], ['unknown ip'], 'convergent', ['Sensitive information/important file leakage ', 'Directory traversal '])


high risk(1, ['unknown ip'], ['unknown ip'], 'convergent', ['Information disclosure ', 'Information leakage ', 'Info leakage'])


medium risk(1, ['unknown ip'], ['unknown ip'], 'convergent', ['Information disclosure ', 'Information leakage ', 'Info leakage'])


high risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['File directory attack '])


high risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Directory traversal '])


high risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Unauthorized access/permission bypass '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


high risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Information disclosure ', 'Information leakage ', 'Info leakage'])


high risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['File directory attack '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence'])


unlabel(1, ['Internal server'], ['unknown ip'], 'convergent', ['Information leakage ', 'Unauthorized access/permission bypass '])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['unknown ip'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Denial of Service Attack '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Offending application '])


low risk high risk(2, ['Government website', 'Internal server'], ['unknown ip'], 'convergent', ['Information leakage', 'Sensitive information/important file leakage '])


high risk(1, ['Government website'], ['unknown ip'], 'convergent', ['Overflow', 'Scanner'])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Crawler Attack'])


False positive(1, ['Internal user'], ['Internal server'], ' simple ', ['Injection Attack'])


high risk(1, ['Internal server'], ['unknown ip'], 'convergent', ['Sensitive information/important file leakage ', 'Unauthorized access/permission bypass '])


False positive(1, ['Internal server'], ['Internal server'], 'divergent', ['Other attacks exploit ', 'Information leakage '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Offending application '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


low risk high risk(1, ['unknown ip'], ['Government website', 'Critical system server'], 'divergent', ['Information leakage', 'Info leakage'])


high risk(1, ['unknown ip'], ['Government website', 'Internal server'], 'divergent', ['Overflow', 'Sensitive information/important file leakage '])


high risk(1, ['Internal server'], ['unknown ip'], 'convergent', ['Sensitive information/important file leakage '])


high risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Scanner'])


high risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Anti-crawler'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


False positive(1, ['Internal server'], ['Internal server'], 'divergent', ['Other attacks exploit ', 'Information leakage '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Denial of Service Attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Offending application '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Government website'], ['unknown ip'], 'convergent', ['Anti-crawler'])


high risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Information leakage'])


low risk(1, ['unknown ip'], ['Government website', 'Critical system server'], 'divergent', ['Information leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Information leakage'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack ', 'WEB Backdoor '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Critical event audit '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


unlabel(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['WEB Backdoor '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', [''])


low risk(1, ['unknown ip'], ['Internal server'], 'convergent', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


low risk(3, ['Internal server NAT', 'unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device'], 'convergent', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage ', ''])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Denial of Service Attack '])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Offending application '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', [''])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Anti-crawler'])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


low risk(1, ['unknown ip'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Offending application '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Denial of Service Attack '])


low risk(3, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence'])


False positive(1, ['Internal user'], ['Internal server'], ' simple ', ['Injection Attack'])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', [''])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


unlabel(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Host traffic anomaly '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


unlabel(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Crawler Attack'])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


high risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Command Execution '])


False positive(1, ['Internal user'], ['Internal server'], ' simple ', ['Injection Attack'])


low risk(2, ['Internal device', 'unknown ip'], ['Internal user', 'unknown ip'], 'other types', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Offending application '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Internal device NAT', 'unknown ip'], 'divergent', ['Critical Event audit '])


high risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['WEB Backdoor '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Injection Attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['Internal device'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal server'], 'convergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(3, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site scripting attacks '])


False positive(1, ['Internal server'], ['Internal server'], 'divergent', ['Other attacks exploit ', 'Information leakage '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Offending application '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Anti-crawler'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', [''])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Offending application '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


high risk(1, ['unknown ip'], ['Government website', 'Internal server'], 'divergent', ['Overflow', 'Code Execution '])


high risk(1, ['unknown ip'], ['Government website'], ' simple ', ['SQL Injection'])


high risk(1, ['unknown ip'], ['unknown ip'], ' simple ', 'Multiple attack types')


high risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Command execution '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


medium risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Host vulnerability Exploitation '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


unlabel(1, ['Internal user'], ['unknown ip'], 'divergent', [''])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


medium risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Denial of Service Attack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Offending application '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(3, ['Critical system server', 'Internal server', 'unknown ip'], ['unknown ip'], 'convergent', ['Offending application ', 'Info leakage'])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(3, ['Internal server NAT', 'Internal device NAT', 'unknown ip'], ['Internal server NAT', 'unknown ip'], 'divergent', ['Cross-site Scripting ', 'XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Offending application '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Offending application '])


low risk(2, ['Internal device', 'unknown ip'], ['Internal device', 'Internal user', 'unknown ip'], 'other types', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


medium risk(1, ['unknown ip'], ['Government website', 'Internal server'], 'divergent', ['Overflow', 'Sensitive information/important file leakage '])


medium risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Protocol integrity'])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Critical Event audit '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Offending application '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server', 'unknown ip'], 'divergent', ['Scanner', 'Information leakage '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['unknown ip'], ['unknown ip'], 'divergent', ['Critical Event audit '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


False positive(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal device'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal device'], 'divergent', ['Information leakage ', 'Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence'])


False positive(1, ['Internal server'], ['unknown ip'], ' simple ', ['Scanner'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['unknown ip'], ['unknown ip'], 'convergent', ['WAF Common Defence'])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Offending application '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(9, ['Internal server NAT', 'unknown ip'], ['Internal device NAT', 'unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


high risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal device'], 'divergent', ['Information leakage ', 'Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Critical event audit '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence'])


False positive(1, ['Internal device'], ['Internal device', 'Critical system server'], 'divergent', ['Information leakage ', 'Password Cracking '])


False positive(1, ['Internal device'], ['Internal device', 'Critical system server'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


high risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Host Exploit '])


low risk(1, ['unknown ip'], ['unknown ip'], 'divergent', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical event audit '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Denial of Service Attack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Offending application '])


low risk(1, ['unknown ip'], ['Internal device'], 'convergent', ['MISC attack '])


False positive(1, ['Internal device'], ['Critical system server'], 'divergent', ['Information leakage ', 'Password Cracking '])


False positive(1, ['Internal device'], ['Critical system server'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server', 'unknown ip'], 'divergent', ['Scanner', 'Information leakage '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Anti-crawler'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS '])


low risk(3, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Offending application '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


unlabel(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


False positive(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


False positive(1, ['Internal server'], ['unknown ip'], ' simple ', ['Scanner'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


False positive(1, ['Internal server'], ['Internal server', 'unknown ip'], 'divergent', ['Scanner', 'Other attacks exploit '])


low risk(6, ['Internal server NAT', 'unknown ip'], ['Internal device NAT', 'unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Internal device NAT'], 'divergent', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


False positive(1, ['Internal user'], ['Internal server'], ' simple ', ['Injection Attack'])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


low risk(1, ['unknown ip'], ['Internal device'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Offending application '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


False positive(1, ['Internal server'], ['unknown ip'], ' simple ', ['Scanner'])


low risk(1, ['Government website'], ['unknown ip'], 'convergent', ['Anti-crawler', 'Protocol integrity'])


low risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Anti-crawler'])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


low risk(1, ['unknown ip'], ['Government website', 'Critical system server'], 'divergent', ['Information leakage', 'Info leakage'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server', 'unknown ip'], 'divergent', ['Scanner', 'Information leakage '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Information leakage '])


False positive(1, ['Internal server'], ['unknown ip'], ' simple ', ['Scanner'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Anti-crawler'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Denial of Service Attack '])


False positive(1, ['Internal server'], ['Internal server', 'unknown ip'], 'divergent', ['Scanner', 'Information leakage '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


low risk(3, ['Internal server NAT', 'unknown ip'], ['Internal server NAT'], 'divergent', ['XSS ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server', 'unknown ip'], 'divergent', ['Scanner', 'Other attacks exploit '])


unlabel(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Protocol integrity'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Internal device NAT'], 'divergent', ['XSS '])


high risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Command Execution '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Offending application '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Denial of Service Attack '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack ', 'Critical Event audit '])


low risk(2, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


low risk(3, ['Internal server NAT', 'Internal device NAT', 'unknown ip'], ['Internal server NAT', 'unknown ip'], 'divergent', ['XSS ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Crawler Attack'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Command execution '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Offending application '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Anti-crawler'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(3, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Password Cracking '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Anti-crawler'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


False positive(1, ['Internal user'], ['Internal server'], ' simple ', ['Injection Attack'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


low risk(1, ['unknown ip'], ['Government website', 'unknown ip'], 'other types', ['Protocol integrity', 'Cross-site Scripting '])


False positive(1, ['Internal server'], ['Internal server', 'unknown ip'], 'divergent', ['Overflow', 'Information leakage '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Anti-crawler'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Critical event audit '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Government website', 'unknown ip'], 'other types', ['Protocol integrity', 'XSS '])


unlabel(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Information leakage'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(2, ['Internal device', 'unknown ip'], ['Internal user', 'unknown ip'], 'divergent', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal device'], 'divergent', ['Information leakage ', 'Information leakage '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Anti-crawler', 'Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Information leakage'])


low risk(3, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


unlabel(1, ['Internal server'], ['Internal server'], ' simple ', ['Weak password '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Denial of Service Attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage ', 'Password Cracking '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Government website', 'unknown ip'], 'other types', ['Protocol integrity', 'XSS '])


low risk(1, ['Government website'], ['unknown ip'], 'convergent', ['Anti-crawler'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Internal device NAT', 'unknown ip'], 'divergent', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence'])


False positive(1, ['Internal device'], ['Internal device'], 'divergent', ['Information leakage ', 'Password Cracking '])


False positive(1, ['Internal device'], ['Internal device'], 'divergent', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['XSS ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Protocol integrity'])


low risk(1, ['unknown ip'], ['Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['Internal device'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal device'], 'divergent', ['Information leakage ', 'Information leakage '])


False positive(1, ['Internal device'], ['Internal device'], 'divergent', ['Password Cracking '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Denial of Service Attack '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Trojan Behavior '])


low risk(1, ['unknown ip'], ['Government website', 'unknown ip'], 'other types', ['Protocol integrity', 'XSS '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Cross-site Scripting '])


low risk(5, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(3, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['unknown ip'], ['Internal device NAT', 'unknown ip'], 'divergent', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal device'], 'convergent', ['MISC attack '])


low risk(1, ['Internal device'], ['Internal device'], 'divergent', ['Information leakage ', 'Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(6, ['Internal server NAT', 'unknown ip'], ['Internal server NAT'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS '])


high risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['XSS '])


False positive(1, ['Internal user'], ['Internal server'], ' simple ', ['Injection Attack'])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


high risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['XSS ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Denial of Service Attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal device'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['Internal device'], ['Internal device'], 'divergent', ['Information leakage ', 'Password Cracking '])


low risk(1, ['Internal device'], ['Internal device'], 'divergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server', 'unknown ip'], 'convergent', ['Information leakage ', 'Application Exploit'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Command execution ', 'Code Execution '])


high risk(1, ['unknown ip'], ['Critical system server'], ' simple ', 'Multiple attack types')


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Dangerous script upload'])


unlabel(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WEB Logic vulnerability '])


high risk(1, ['unknown ip'], ['Government website', 'unknown ip'], 'other types', ['Protocol integrity', 'XSS '])


False positive(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage'])


low risk(6, ['Internal server NAT', 'unknown ip'], ['Internal server NAT'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['Internal device'], ['Internal device'], 'divergent', ['Information leakage ', 'Information leakage '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(2, ['Internal device', 'unknown ip'], ['Internal device', 'Internal user', 'unknown ip'], 'other types', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', [''])


low risk high risk(1, ['Government website'], ['unknown ip'], 'convergent', ['Anti-crawler', 'Protocol integrity'])


low risk(8, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


high risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Command Execution '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Internal device'], 'convergent', ['MISC attack '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal device'], ['Internal device'], ' simple ', ['Information leakage ', 'Information leakage '])


high risk(1, ['unknown ip'], ['Government website', 'Internal server'], 'divergent', ['Overflow', 'Code Execution '])


high risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Cross-site Scripting ', 'WEB Backdoor '])


high risk(1, ['unknown ip'], ['Government website', 'unknown ip'], 'other types', ['Protocol integrity', 'Cross-site Scripting '])


high risk(1, ['unknown ip'], ['Government website'], ' simple ', ['SQL Injection'])


high risk(1, ['unknown ip'], ['unknown ip'], ' simple ', 'Multiple attack types')


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


high risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['XSS '])


high risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Scan Attack'])


high risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Command execution '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Anti-crawler'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Critical Event audit '])


unlabel(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Protocol integrity'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


unlabel(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Host vulnerability Exploitation '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['Internal server NAT'], ['unknown ip'], ' simple ', ['Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Critical event audit '])


high risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Scan Attack'])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(2, ['Internal device', 'unknown ip'], ['Internal user', 'unknown ip'], 'other types', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['Internal device'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal device'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['Internal server NAT'], ['unknown ip'], ' simple ', ['Info leakage'])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Critical event audit '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WEB Scan Probe '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Injection Attack '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal device'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(3, ['Internal server NAT', 'unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Critical Event audit '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


high risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal device'], 'convergent', ['MISC attack '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(5, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(1, ['unknown ip'], 'Multi-type margin', 'divergent', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence'])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Denial of Service Attack '])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Offending application '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Government website', 'Critical system server'], 'divergent', ['Information leakage', 'Info leakage'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Critical system server', 'Internal device NAT', 'unknown ip'], 'divergent', ['Critical Event audit '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


False positive(1, ['Internal user'], ['Internal server'], ' simple ', ['Injection Attack'])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Anti-crawler'])


unlabel(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Information leakage'])


False positive(1, ['Internal server'], ['unknown ip'], ' simple ', ['Overflow'])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(2, ['Internal device NAT', 'unknown ip'], 'Multi-type margin', 'divergent', ['XSS ', 'Critical Event audit '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['WAF Common Defence', 'Info Leak '])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Password Cracking '])


low risk(1, ['unknown ip'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(1, ['Internal server'], ['Internal server', 'unknown ip'], 'convergent', ['Offending application ', 'Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Denial of Service Attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


False positive(1, ['Internal server'], ['Internal server', 'unknown ip'], 'divergent', ['Overflow', 'Information leakage '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(1, ['unknown ip'], 'Multi-type margin', 'divergent', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


low risk(2, ['Critical system server', 'unknown ip'], ['Internal server', 'unknown ip'], 'convergent', ['WAF Common Defence', 'Information leakage '])


high risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Host Exploit '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Offending application '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Anti-crawler'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(2, ['Critical system server', 'unknown ip'], 'Multi-type margin', 'divergent', ['Critical Event audit ', 'Info leakage'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Crawler Attack'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Critical event audit '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


medium risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(7, ['Internal server NAT', 'unknown ip'], ['Internal server NAT'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Cross-site Scripting '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Offending application '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage ', 'Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Critical Event audit '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


high risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Trojan Behavior '])


low risk(1, ['Internal server'], ['unknown ip'], 'convergent', ['Offending application '])


unlabel(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Protocol integrity'])


low risk(6, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


False positive(1, ['Internal user'], ['Internal server'], ' simple ', ['Injection Attack'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device'], 'convergent', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


medium risk(2, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Middleware vulnerability '])


low risk high risk(3, ['Internal server NAT', 'unknown ip'], ['Internal server NAT'], 'divergent', ['XSS ', 'WEB Backdoor '])


medium risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Injection Attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Command execution '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', [''])


low risk(2, ['Internal device', 'unknown ip'], ['Internal device', 'Internal user', 'unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Offending application '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal server NAT'], ['unknown ip'], 'other types', ['XSS ', 'Middleware vulnerability '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Information leakage'])


low risk(8, ['Internal server NAT', 'unknown ip'], ['Internal device NAT'], 'convergent', ['Injection Attack ', 'Critical Event audit '])


low risk(1, ['Internal server NAT'], ['unknown ip'], ' simple ', ['Malicious domain access '])


low risk(2, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'convergent', ['Malicious domain access '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', [''])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Offending application '])


low risk(1, ['unknown ip'], ['Internal server'], 'convergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


False positive(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage'])


low risk high risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack ', 'WEB Backdoor '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS '])


low risk(1, ['unknown ip'], ['Critical system server', 'Internal device NAT', 'unknown ip'], 'divergent', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(1, ['Internal server'], ['Internal server', 'unknown ip'], 'convergent', ['Offending application ', 'Information leakage '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal device'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Internal device NAT', 'unknown ip'], 'divergent', ['Critical Event audit '])


high risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Host vulnerability Exploitation '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical event audit '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Critical Event audit '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Denial of Service Attack '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


False positive(1, ['Service server'], ['Critical system server'], ' simple ', ['Information leakage '])


low risk(1, ['Internal server'], ['unknown ip'], 'convergent', ['Offending application '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', [''])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Scanner'])


low risk(1, ['unknown ip'], ['Critical system server', 'Internal device NAT', 'unknown ip'], 'divergent', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(6, ['Internal server NAT', 'unknown ip'], ['Internal server NAT'], 'convergent', ['Injection Attack ', 'Malicious domain access '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server', 'unknown ip'], 'divergent', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence'])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


False positive(1, ['Internal server'], ['Internal server'], 'divergent', ['Other attacks exploit ', 'Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal server'], 'convergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


low risk(6, ['Internal server NAT', 'unknown ip'], ['Internal server NAT'], 'convergent', ['Injection Attack ', 'Malicious domain access '])


low risk(4, ['Internal server NAT', 'unknown ip'], ['Critical system server', 'Internal device NAT'], 'divergent', ['XSS ', 'Critical Event audit '])


low risk(2, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'unknown ip'], 'divergent', ['XSS ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Injection Attack '])


high risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['WEB Backdoor '])


low risk(1, ['unknown ip'], 'Multi-type margin', 'divergent', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Critical Event audit '])


False positive(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


medium risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Injection Attack '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])