low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


medium risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Vulnerability Scanning '])


medium risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Offending application '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


unlabel(1, ['Internal server'], ['Internal device'], 'convergent', [''])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Cross-site Scripting ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Critical system server', 'unknown ip'], 'divergent', ['WAF Common Defence', 'Info Leak '])


unlabel(1, ['unknown ip'], ['Critical system server', 'Internal server'], 'divergent', ['Info leakage', 'Information leakage '])


unlabel(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence'])


medium risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Host vulnerability Exploitation '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(2, ['Internal server', 'unknown ip'], ['unknown ip'], 'other types', ['WAF Common Defence', 'Information leakage '])


low risk(1, ['unknown ip'], ['unknown ip'], 'convergent', ['System scan probe ', 'Command execution '])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Information leakage '])


unlabel(1, ['Internal server'], ['unknown ip'], 'convergent', ['Information leakage '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(1, ['Internal device NAT'], ['unknown ip'], 'convergent', ['Injection Attack ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


unlabel(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['System scan probe '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], 'divergent', ['Information leakage ', 'Information leakage '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Offending application '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


medium risk(1, ['unknown ip'], ['Government website', 'Internal server'], 'divergent', 'Multiple attack types')


medium risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler', 'Protocol integrity'])


unlabel(1, ['unknown ip'], ['Government website', 'Internal server'], 'divergent', ['Information leakage', 'Information leakage '])


medium risk(1, ['unknown ip'], ['unknown ip'], ' simple ', 'Multiple attack types')


medium risk(1, ['unknown ip'], ['Internal server', 'unknown ip'], 'divergent', ['WAF Common Defence', 'Directory traversal '])


medium risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Cross-site Scripting (XSS)'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence'])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', [''])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Anti-crawler'])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


unlabel(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Cross-site Scripting '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


unlabel(1, ['Internal server'], ['Internal server'], ' simple ', ['Brute-force guessing '])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Network scanning '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


False positive(1, ['Internal device'], ['Internal server'], 'divergent', ['Information leakage ', 'Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], 'divergent', ['Password Cracking '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(5, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'other types', ['XSS ', 'Injection Attack '])


low risk(3, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


medium risk(1, ['unknown ip'], ['Government website', 'Internal server'], 'divergent', 'Multiple attack types')


medium risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Injection Attack ', 'Cross-site Scripting '])


medium risk(1, ['unknown ip'], ['Internal server', 'unknown ip'], 'divergent', ['WAF Common Defence', 'Directory traversal '])


medium risk(1, ['unknown ip'], ['Internal server', 'unknown ip'], 'divergent', 'Multiple attack types')


medium risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Protocol integrity', 'Cross-site Scripting (XSS)', 'SQL Injection'])


medium risk(1, ['unknown ip'], ['unknown ip'], ' simple ', 'Multiple attack types')


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence'])


medium risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['SQL Injection '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Information leakage ', 'Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


unlabel(1, ['Internal user'], ['unknown ip'], 'divergent', ['Vulnerability Scanning '])


low risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Information leakage '])


medium risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


unlabel(1, ['unknown ip'], ['Critical system server', 'Internal server'], 'divergent', ['Information leakage', 'Information leakage '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence', 'WEB scan probe '])


medium risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Middleware Vulnerability '])


False positive(1, ['Internal server'], ['Internal server', 'unknown ip'], 'divergent', ['Overflow', 'Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit '])


unlabel(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Injection Attack '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


unlabel(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Password Attack'])


unlabel(1, ['Internal device NAT'], ['unknown ip'], 'convergent', ['WEB Backdoor ', 'Host vulnerability Exploitation '])


unlabel(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical event audit '])


unlabel(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WEB Scan probe '])


low risk(1, ['unknown ip'], ['Critical system server', 'Internal device NAT'], 'divergent', ['Critical Event audit '])


unlabel(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Host Exploit '])


unlabel(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


unlabel(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['WEB Backdoor '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


medium risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Information leakage '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(2, ['Internal device', 'Internal server'], ['Internal server'], 'divergent', ['Information leakage ', 'Directory traversal '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', [''])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Vulnerability Scanning '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


low risk(2, ['Critical system server', 'unknown ip'], ['Internal server', 'unknown ip'], 'convergent', ['Information leakage ', 'Info leakage'])


medium risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Offending application ', 'Sensitive information/important file leakage '])


medium risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Overflow', 'Scanner'])


medium risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Trojan Behavior ', 'XXE attack'])


medium risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Protocol integrity', 'Cross-site Scripting (XSS)'])


medium risk(1, ['unknown ip'], ['unknown ip'], 'convergent', 'Multiple attack types')


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence'])


medium risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Weak password '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Information leakage', 'Scanner'])


unlabel(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


unlabel(1, ['unknown ip'], ['Critical system server', 'Internal server'], 'divergent', ['Information leakage', 'Information leakage '])


medium risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Middleware Vulnerability ', 'WEB scan probe '])


unlabel(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Injection Attack '])


low risk(5, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal device NAT'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(2, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'unknown ip'], 'other types', ['XSS ', 'WEB Backdoor '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


unlabel(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


unlabel(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


unlabel(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Host vulnerability Exploitation '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['webshell'])


False positive(1, ['Internal device'], ['Internal server'], 'divergent', 'Multiple attack types')


False positive(1, ['Internal device'], ['Internal server'], 'divergent', ['Command execution ', 'File upload '])


False positive(1, ['Internal device'], ['Internal server'], 'divergent', ['Password Cracking ', 'Sensitive file detection'])


False positive(1, ['Internal device'], ['Internal server'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], 'divergent', ['Dangerous script upload'])


False positive(1, ['Internal device'], ['Internal server'], 'divergent', ['webshell upload '])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


unlabel(1, ['Internal device'], ['unknown ip'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['Password Cracking '])


low risk(4, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Injection Attack '])


low risk(6, ['Internal server NAT', 'Internal device NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(3, ['Internal server NAT', 'Internal device NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal device NAT'], 'divergent', ['Cross-site Scripting ', 'XSS '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Cross-site Scripting ', 'Cross-site Scripting '])


unlabel(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Cross-site Scripting ', 'WEB Backdoor '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


unlabel(1, ['Internal user'], ['unknown ip'], 'divergent', ['Vulnerability Scanning '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['webshell', 'Directory traversal '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Injection Attack '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attack '])


unlabel(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


unlabel(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Information leakage', 'Scanner'])


unlabel(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence'])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


unlabel(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


unlabel(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Vulnerability Scanning '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


unlabel(1, ['Internal device'], ['Internal server'], ' simple ', ['Trojan Behavior '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(3, ['Internal server NAT', 'unknown ip'], ['Internal server NAT'], 'other types', ['Cross-site Scripting ', 'Cross-site Scripting '])


medium risk(1, ['Internal server NAT'], ['unknown ip'], 'other types', ['Cross-site Scripting ', 'Middleware vulnerability '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Directory traversal '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Vulnerability Scanning '])


unlabel(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Injection Attack '])


medium risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(2, ['Internal device', 'Internal server'], ['Internal server'], 'divergent', ['Information leakage ', 'Directory traversal '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password Cracking '])


low risk(1, ['Internal user'], ['Internal server'], 'divergent', ['Password Cracking '])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', [''])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', [''])


high risk(1, ['unknown ip'], ['Critical system server', 'Internal server'], 'divergent', ['Information leakage', 'Information leakage '])


high risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence', 'WEB scan probe '])


low risk(3, ['Critical system server', 'unknown ip'], ['Government website'], 'other types', ['Information leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Scanner'])


unlabel(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Command Execution '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Critical Event audit '])


low risk(9, ['Internal server NAT', 'unknown ip'], ['Internal device NAT', 'unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS ', 'XSS '])


medium risk(7, ['Internal server NAT', 'Internal device NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Host vulnerability Exploitation '])


unlabel(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


unlabel(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Host vulnerability Exploitation '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence'])


low risk(1, ['unknown ip'], ['Critical system server', 'Internal device NAT', 'unknown ip'], 'divergent', ['Critical Event audit '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['Internal device NAT'], ['unknown ip'], 'convergent', ['Cross-site Scripting ', 'Cross-site Scripting '])


unlabel(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['XSS '])


unlabel(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Host vulnerability Exploitation '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['Internal server'], ' simple ', ['Password Cracking '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', [''])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['unknown ip'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


medium risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Information leakage', 'Scanner'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Anti-crawler'])


low risk(2, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['Cross-site Scripting ', 'XSS '])


low risk(4, ['Internal server NAT', 'Internal device NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Injection Attack '])


low risk(2, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Cross-site scripting attacks '])


low risk(2, ['Internal device NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Cross-site Scripting '])


unlabel(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['WEB Backdoor '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


medium risk(1, ['Internal server NAT'], ['unknown ip'], ' simple ', ['Middleware vulnerability '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


high risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence', 'WEB scan probe '])


low risk(1, ['unknown ip'], 'Multi-type margin', 'divergent', ['Critical Event audit '])


high risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Command Execution '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence'])


unlabel(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Middleware Vulnerability '])


unlabel(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


medium risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


unlabel(1, ['Internal device'], ['Internal server'], ' simple ', [''])


unlabel(1, ['Internal device'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Vulnerability Scanning '])


medium risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Information leakage', 'Scanner'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


medium risk(1, ['unknown ip'], ['Internal server', 'unknown ip'], 'divergent', 'Multiple attack types')


unlabel(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Overflow'])


medium risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


low risk(7, ['Internal server NAT', 'unknown ip'], ['Internal device NAT', 'unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(3, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS ', 'Cross-site Scripting '])


high risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['WEB Backdoor '])


unlabel(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Injection Attack '])


unlabel(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Host Exploit '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence'])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


unlabel(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


low risk(1, ['unknown ip'], 'Multi-type margin', 'divergent', ['Critical Event audit '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


unlabel(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


medium risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Host vulnerability Exploitation '])


False positive(1, ['Internal device'], ['Internal server'], 'divergent', ['Directory traversal ', 'Unauthorized access/permission bypass '])


False positive(1, ['Internal device'], ['Internal server'], 'divergent', ['Sensitive file detection'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', [''])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Vulnerability Scanning '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


medium risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal server'], ' simple ', ['Password Cracking '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Information leakage', 'Scanner'])


unlabel(1, ['unknown ip'], ['Government website'], ' simple ', ['SQL Injection'])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(2, ['Internal device NAT', 'unknown ip'], ['Internal server NAT', 'unknown ip'], 'other types', ['Cross-site Scripting ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


medium risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Host vulnerability Exploitation '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


unlabel(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


medium risk(1, ['Internal server NAT'], ['unknown ip'], ' simple ', ['Middleware vulnerability '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence'])


medium risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Injection Attack '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


low risk high risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Cross-site Scripting ', 'WEB Backdoor '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


medium risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], 'divergent', ['Directory traversal ', 'Unauthorized access/permission bypass '])


low risk(1, ['Internal user'], ['Internal device', 'unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['Internal server'], 'divergent', ['Password Cracking '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


unlabel(1, ['Internal user'], ['Internal server'], ' simple ', ['Offending application '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


medium risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Web Application Attacks '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


unlabel(1, ['unknown ip'], ['Government website'], ' simple ', ['Protocol integrity'])


low risk(1, ['unknown ip'], ['Government website', 'Critical system server'], 'divergent', ['Information leakage', 'Info leakage'])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


unlabel(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


low risk(8, ['Internal server NAT', 'unknown ip'], ['Internal device NAT', 'unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


medium risk(4, ['Internal server NAT', 'Internal device NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Host Exploit '])


low risk(3, ['Internal server NAT', 'Internal device NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(2, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


unlabel(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


unlabel(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


medium risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


unlabel(1, ['unknown ip'], ['Critical system server'], 'divergent', ['Denial of Service Attack '])


low risk(1, ['unknown ip'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Offending application '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


medium risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Web Application Attacks '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', [''])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Vulnerability Scanning '])


False positive(1, ['Internal server'], ['Internal server', 'unknown ip'], 'divergent', ['Overflow', 'Other attacks exploit '])


False positive(1, ['Internal server'], ['unknown ip'], ' simple ', ['Scanner'])


unlabel(1, ['unknown ip'], ['Government website'], ' simple ', ['Protocol integrity'])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


unlabel(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


low risk(8, ['Internal server NAT', 'unknown ip'], ['Internal device NAT'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


low risk(3, ['Internal device NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['Cross-site Scripting ', 'XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


medium risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence'])


False positive(1, ['Internal user'], ['Internal server'], ' simple ', ['Injection Attack'])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


medium risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Web Application Attacks '])


unlabel(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Denial of Service Attack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Vulnerability Scanning '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Trojan Behavior '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Denial of Service Attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Anti-crawler'])


low risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Anti-crawler'])


unlabel(1, ['unknown ip'], ['Government website'], ' simple ', ['Protocol integrity'])


low risk(7, ['Internal server NAT', 'unknown ip'], ['Internal device NAT', 'unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence', 'Info Leak '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['System scan probe '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Critical event audit '])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(2, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Critical Event audit '])


low risk(3, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Host vulnerability Exploitation '])


low risk(2, ['Internal device NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Critical Event audit '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


medium risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


unlabel(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Command Execute '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


False positive(1, ['Internal user'], ['Internal device'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


medium risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['Web Application Attacks '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


unlabel(1, ['unknown ip'], ['Government website'], ' simple ', ['Protocol integrity'])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(2, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Critical Event audit '])


low risk(4, ['Internal server NAT', 'Internal device NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Critical Event audit '])


low risk(5, ['Internal server NAT', 'Internal device NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Critical Event audit '])


low risk(3, ['Internal device NAT', 'unknown ip'], ['Internal server NAT', 'unknown ip'], 'divergent', ['XSS ', 'Critical Event audit '])


medium risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Trojan remote control '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


unlabel(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal device NAT', 'unknown ip'], 'divergent', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Critical Event audit '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


low risk(1, ['unknown ip'], ['Critical system server'], 'divergent', ['Denial of Service Attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal server'], ['Internal server'], ' simple ', ['Web Application Attacks '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


False positive(1, ['Internal user'], ['Internal device'], ' simple ', ['Information leakage '])


low risk(2, ['Critical system server', 'unknown ip'], ['Internal server', 'unknown ip'], 'convergent', ['Offending application ', 'Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['unknown ip'], ['Government website', 'Critical system server'], 'divergent', ['Information leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


unlabel(1, ['unknown ip'], ['Government website'], ' simple ', ['Protocol integrity'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal device NAT', 'unknown ip'], 'divergent', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting ', 'Cross-site Scripting '])


low risk(2, ['Internal device NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'WEB Backdoor '])


low risk(3, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Critical Event audit '])


low risk(2, ['Internal device NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Critical Event audit '])


low risk(3, ['Internal device NAT', 'unknown ip'], ['Internal server NAT', 'unknown ip'], 'divergent', ['XSS ', 'Critical Event audit '])


medium risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Host vulnerability Exploitation '])


medium risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Host vulnerability Exploitation '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack ', 'Critical Event audit '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Critical event audit '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence'])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


False positive(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Information leakage '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


high risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['webshell'])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


unlabel(1, ['unknown ip'], ['Government website'], ' simple ', ['Overflow'])


low risk(1, ['Internal server'], ['Internal server', 'unknown ip'], 'divergent', ['Overflow', 'Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit '])


unlabel(1, ['unknown ip'], ['Government website'], ' simple ', ['Protocol integrity'])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


medium risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(7, ['Internal server NAT', 'unknown ip'], ['Internal device NAT', 'unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting ', 'WEB Backdoor '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Critical event audit '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Injection Attack ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


unlabel(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


high risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['webshell'])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', [''])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['unknown ip'], ['Government website', 'Critical system server'], 'divergent', ['Information leakage', 'Info leakage'])


unlabel(1, ['unknown ip'], ['Government website'], ' simple ', ['Protocol integrity'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Anti-crawler'])


unlabel(1, ['unknown ip'], ['Government website'], ' simple ', ['Overflow'])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


low risk(7, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(3, ['Internal device NAT', 'unknown ip'], ['Internal server NAT'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site scripting attacks '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Injection Attack '])


low risk(2, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


unlabel(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Denial of Service Attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Denial of Service Attack '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


False positive(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Government website', 'Critical system server'], 'divergent', ['Information leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


unlabel(1, ['unknown ip'], ['Government website'], ' simple ', ['Protocol integrity'])


medium risk(4, ['Internal server NAT', 'Internal device NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Host Exploit '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(2, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack ', 'WEB Backdoor '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Trojan Behavior '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['webshell'])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


unlabel(1, ['Internal device'], ['Internal server'], ' simple ', [''])


False positive(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


medium risk(2, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Middleware vulnerability '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


False positive(1, ['unknown ip'], ['Government website', 'Critical system server'], 'divergent', ['Information leakage', 'Info leakage'])


unlabel(1, ['unknown ip'], ['Government website'], ' simple ', ['Protocol integrity'])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


unlabel(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Crawler Attack'])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site scripting attacks '])


low risk(2, ['Critical system server', 'unknown ip'], ['Internal server', 'unknown ip'], 'convergent', ['Info leakage', 'Weak password '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


unlabel(1, ['unknown ip'], ['unknown ip'], ' simple ', ['WAF Common Defence'])


False positive(1, ['Internal user'], ['Internal server'], ' simple ', ['Injection Attack'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


False positive(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Information leakage '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', [''])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


unlabel(1, ['Internal device'], ['unknown ip'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


False positive(1, ['unknown ip'], ['Government website', 'Critical system server'], 'divergent', ['Information leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


unlabel(1, ['unknown ip'], ['Government website'], ' simple ', ['Protocol integrity'])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(5, ['Internal server NAT', 'unknown ip'], ['Internal device NAT'], 'other types', ['XSS ', 'Injection Attack '])


low risk(3, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Cross-site scripting attacks '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


unlabel(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Weak password '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


False positive(1, ['Service server'], ['Critical system server'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


unlabel(1, ['unknown ip'], ['Government website'], ' simple ', ['Protocol integrity'])


False positive(1, ['unknown ip'], ['Government website', 'Critical system server'], 'divergent', ['Information leakage', 'Info leakage'])


low risk(5, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(3, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Cross-site Scripting '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['Internal device'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Denial of Service Attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


unlabel(1, ['Internal device'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Denial of Service Attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


False positive(1, ['unknown ip'], ['Government website', 'Critical system server'], 'divergent', ['Information leakage', 'Info leakage'])


unlabel(1, ['unknown ip'], ['Government website'], ' simple ', ['Protocol integrity'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(6, ['Internal server NAT', 'unknown ip'], ['unknown ip'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(3, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


unlabel(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Privilege escalation '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal server'], 'convergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage ', 'Password Cracking '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


False positive(1, ['unknown ip'], ['Government website', 'Critical system server'], 'divergent', ['Information leakage', 'Info leakage'])


unlabel(1, ['unknown ip'], ['Government website'], ' simple ', ['Protocol integrity'])


low risk(4, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(9, ['Internal server NAT', 'unknown ip'], ['Internal device NAT'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Cross-site Scripting '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Denial of Service Attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Denial of Service Attack '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


unlabel(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Denial of Service Attack '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


unlabel(1, ['unknown ip'], ['Government website'], ' simple ', ['Protocol integrity'])


low risk(8, ['Internal server NAT', 'unknown ip'], ['Internal device NAT'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(2, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(5, ['Internal server NAT', 'Internal device NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'WEB Backdoor '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


high risk(1, ['unknown ip'], ['Critical system server'], 'divergent', ['Middleware Vulnerability '])


unlabel(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Command Execute '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Command execution '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Vulnerability Scanning '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


unlabel(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Denial of Service Attack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal device'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['Internal server'], ['Internal server'], 'divergent', ['MISC attack ', 'Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Suspicious Traffic '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


False positive(1, ['Internal server'], ['Internal server', 'unknown ip'], 'divergent', ['Overflow', 'Other attacks exploit '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


unlabel(1, ['unknown ip'], ['Government website'], ' simple ', ['Protocol integrity'])


unlabel(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['WEB Backdoor '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(3, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


high risk(1, ['Internal device NAT'], ['unknown ip'], 'convergent', ['Injection Attack ', 'Host vulnerability Exploitation '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Weak password '])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Weak password '])


False positive(1, ['Internal server'], ['Internal server'], 'divergent', ['Information leakage ', 'Suspicious Traffic '])


low risk(1, ['Internal server'], ['Internal server'], 'divergent', ['MISC attack ', 'Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', [''])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


unlabel(1, ['unknown ip'], ['Government website'], ' simple ', ['Protocol integrity'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Anti-crawler'])


False positive(1, ['Internal server'], ['Internal server', 'unknown ip'], 'divergent', ['Overflow', 'Other attacks exploit '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(3, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(2, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Injection Attack '])


low risk(3, ['Internal server NAT', 'unknown ip'], ['Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server', 'Internal device NAT'], 'divergent', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal server'], ['Internal server'], 'divergent', ['MISC attack ', 'Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], 'divergent', ['Information leakage ', 'Suspicious Traffic '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Denial of Service Attack '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Offending application '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], 'convergent', ['Information leakage '])


unlabel(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Denial of Service Attack '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Scanner'])


unlabel(1, ['unknown ip'], ['Government website'], ' simple ', ['Protocol integrity'])


False positive(1, ['Internal server'], ['Internal server', 'unknown ip'], 'divergent', ['Overflow', 'Information leakage '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack ', 'Cross-site Scripting '])


low risk(2, ['Internal server NAT', 'unknown ip'], ['Internal device NAT', 'unknown ip'], 'other types', ['XSS ', 'Malicious domain access '])


low risk(4, ['Internal server NAT', 'unknown ip'], ['Critical system server', 'Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS ', 'Critical Event audit '])


low risk(5, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Malicious domain access '])


medium risk(2, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


unlabel(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal server'], ['Internal server'], 'divergent', 'Multiple attack types')


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device'], 'convergent', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['Offending application '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', [''])


False positive(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['Internal device'], ['unknown ip'], 'divergent', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


medium risk(2, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(6, ['Internal server NAT', 'Internal device NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(4, ['Internal server NAT', 'Internal device NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


unlabel(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Injection Attack '])


low risk(5, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server', 'unknown ip'], 'divergent', ['Critical Event audit '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


low risk(1, ['Internal device NAT'], ['unknown ip'], 'convergent', ['Cross-site Scripting ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


medium risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Host vulnerability Exploitation '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage ', 'Other attacks exploit '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


False positive(1, ['Internal server'], ['Internal server'], 'divergent', ['Information leakage ', 'Suspicious Traffic ', 'Information leakage '])


low risk(1, ['Internal server'], ['Internal server'], 'divergent', ['MISC attack '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Network scanning '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', [''])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['Vulnerability Scanning '])


unlabel(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Denial of Service Attack '])


False positive(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Information leakage '])


low risk high risk(1, ['unknown ip'], ['Critical system server'], 'divergent', ['WAF Common Defence', 'Info Leak '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Information leakage', 'Info leakage'])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['Internal server'], 'divergent', ['Information leakage '])


medium risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['WAF Common Defence'])


low risk(1, ['unknown ip'], ['Government website'], ' simple ', ['Anti-crawler'])


low risk(2, ['Internal device NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(2, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(1, ['Internal device NAT'], ['unknown ip'], 'convergent', ['Cross-site Scripting ', 'Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['Internal device NAT'], ['unknown ip'], 'convergent', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Critical Event audit '])


low risk(5, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Injection Attack '])


low risk(1, ['Internal device NAT'], ['unknown ip'], 'convergent', ['Critical Event audit ', 'Cross-site Scripting '])


False positive(1, ['unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Critical Event audit '])


unlabel(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Cross-site Scripting ', 'Cross-site Scripting '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


low risk(1, ['unknown ip'], ['Internal device NAT', 'unknown ip'], 'divergent', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal device NAT'], 'divergent', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical event audit '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Other attacks exploit ', 'Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])


low risk(1, ['unknown ip'], ['Internal server'], 'divergent', ['Network scanning '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


False positive(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Trojan Behavior '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['webshell'])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage ', 'Password Cracking '])


False positive(1, ['Internal server'], ['Internal server'], 'divergent', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


unlabel(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Denial of Service Attack '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


False positive(1, ['Internal server'], ['Internal server', 'unknown ip'], 'divergent', ['Scanner', 'Information leakage '])


unlabel(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Protocol integrity'])


unlabel(1, ['unknown ip'], ['Government website'], ' simple ', ['SQL Injection'])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['XSS ', 'Injection Attack '])


medium risk(4, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'unknown ip'], 'convergent', 'Multiple attack types')


low risk(3, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS ', 'Malicious domain access '])


low risk(1, ['unknown ip'], ['Internal server NAT'], 'divergent', ['Cross-site Scripting ', 'XSS '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal device NAT'], 'divergent', ['XSS '])


medium risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Host vulnerability Exploitation '])


low risk(1, ['unknown ip'], ['Critical system server', 'Internal device NAT', 'unknown ip'], 'divergent', ['Critical Event audit '])


low risk(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage', 'Info leakage'])


high risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Injection Attack '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


low risk(1, ['unknown ip'], ['unknown ip'], ' simple ', ['Critical Event audit '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage', 'Info leakage'])


medium risk(1, ['unknown ip'], ['Critical system server', 'unknown ip'], 'divergent', ['WAF Common Defence'])


False positive(1, ['Internal user'], ['Internal server'], ' simple ', ['Injection Attack'])


low risk(1, ['unknown ip'], ['Internal server'], 'divergent', ['Network scanning '])


low risk(1, ['unknown ip'], ['Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['Internal user'], ['Internal device'], 'divergent', ['Information leakage '])


False positive(1, ['Internal device'], ['Internal server'], 'divergent', ['Information leakage ', 'Password Cracking '])


False positive(1, ['Internal device'], ['Internal server'], 'divergent', ['Password Cracking ', 'Password Cracking ', 'Weak password Attack '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Information leakage '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


low risk(1, ['Internal device'], ['unknown ip'], ' simple ', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['Web Application Attacks '])


low risk(1, ['Internal server'], ['unknown ip'], ' simple ', ['Information leakage '])


False positive(1, ['Internal server'], ['Internal server'], 'divergent', ['Information leakage ', 'Suspicious Traffic '])


False positive(1, ['Internal server'], ['Internal server'], ' simple ', ['Network scanning '])


False positive(1, ['Internal device'], ['Internal server'], ' simple ', ['Password crack '])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Offending application '])


False positive(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Information leakage '])


low risk(1, ['Internal device'], ['unknown ip'], 'divergent', ['MISC attack '])


medium risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['Information leakage '])


unlabel(1, ['Internal user'], ['unknown ip'], ' simple ', ['Suspicious Traffic '])


False positive(1, ['Internal server'], ['Internal server', 'unknown ip'], 'divergent', ['Information leakage', 'Other attacks exploit '])


low risk(1, ['Internal server NAT'], ['unknown ip'], 'convergent', ['Injection Attack ', 'Cross-site Scripting '])


low risk(2, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(3, ['Internal server NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT'], 'divergent', ['XSS ', 'Cross-site Scripting '])


low risk(3, ['Internal server NAT', 'Internal device NAT', 'unknown ip'], ['Internal server NAT', 'Internal device NAT', 'unknown ip'], 'divergent', ['XSS ', 'Critical Event audit '])


low risk(1, ['unknown ip'], ['Internal device NAT'], 'divergent', ['XSS '])


low risk(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


unlabel(1, ['unknown ip'], ['Internal server NAT'], ' simple ', ['Cross-site Scripting '])


low risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


unlabel(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Cross-site Scripting '])


medium risk(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Host vulnerability Exploitation '])


low risk(1, ['Critical system server'], ['unknown ip'], 'convergent', ['Info leakage'])


unlabel(1, ['unknown ip'], ['Critical system server'], ' simple ', ['Info leakage'])


high risk(1, ['unknown ip'], ['Critical system server', 'unknown ip'], 'divergent', ['WAF Common Defence'])


unlabel(1, ['unknown ip'], ['Internal device NAT'], ' simple ', ['Injection Attack '])


low risk(1, ['Internal user'], ['unknown ip'], 'divergent', ['MISC attack '])


low risk(1, ['Internal user'], ['unknown ip'], ' simple ', ['MISC attack '])


low risk(1, ['unknown ip'], ['Internal device', 'Internal user'], 'convergent', ['MISC attack '])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', [''])


unlabel(1, ['unknown ip'], ['Internal server'], ' simple ', ['Sensitive information/important file leakage '])