['flow', 'http', 'http', 'fileinfo', 'http', 'fileinfo', 'http', 'http', 'http', 'fileinfo', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http', 'http']
src_ip: 172.16.0.1, src_port: 52298, dest_ip: 192.168.10.50, dest_port: 80, event_type: flow, proto: TCP, app_proto: http, flow_pkts_toserver: 208, flow_pkts_toclient: 107, flow_bytes_toserver: 61639, flow_bytes_toclient: 190727, flow_age: 60, flow_state: established, flow_reason: timeout, tcp_tcp_flags: 1b, tcp_tcp_flags_ts: 1b, tcp_tcp_flags_tc: 1b, tcp_syn: True, tcp_fin: True, tcp_psh: True, tcp_ack: True, tcp_state: established ; pcap_cnt: 3868219, event_type: http, proto: TCP, tx_id: 0, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_content_type: text/html, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 302, http_redirect: ../../login.php, http_length: 0 ; pcap_cnt: 3868222, event_type: http, proto: TCP, tx_id: 1, http_hostname: 205.174.165.68, http_url: /dv/login.php, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_content_type: text/html, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 200, http_length: 700 ; pcap_cnt: 3868224, event_type: fileinfo, proto: TCP, http_hostname: 205.174.165.68, http_url: /dv/login.php, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_content_type: text/html, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 200, http_length: 700, app_proto: http, fileinfo_filename: /dv/login.php, fileinfo_gaps: False, fileinfo_state: CLOSED, fileinfo_stored: False, fileinfo_size: 1523, fileinfo_tx_id: 1 ; pcap_cnt: 3868225, event_type: http, proto: TCP, tx_id: 2, http_hostname: 205.174.165.68, http_url: /dv/dvwa/css/login.css, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_content_type: text/css, http_http_refer: http://205.174.165.68/dv/login.php, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 200, http_length: 406 ; pcap_cnt: 3868229, event_type: fileinfo, proto: TCP, http_hostname: 205.174.165.68, http_url: /dv/dvwa/css/login.css, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_content_type: text/css, http_http_refer: http://205.174.165.68/dv/login.php, http_http_method: GET, http_protocol: HTTP/1.1, http_status: 200, http_length: 406, app_proto: http, fileinfo_filename: /dv/dvwa/css/login.css, fileinfo_gaps: False, fileinfo_state: CLOSED, fileinfo_stored: False, fileinfo_size: 842, fileinfo_tx_id: 2 ; pcap_cnt: 3868243, event_type: http, proto: TCP, tx_id: 3, http_hostname: 205.174.165.68, http_url: /dv/dvwa/images/login_logo.png, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/login.php, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 6501 ; pcap_cnt: 3868260, event_type: http, proto: TCP, tx_id: 4, http_hostname: 205.174.165.68, http_url: /favicon.ico, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 14490 ; pcap_cnt: 3868280, event_type: http, proto: TCP, tx_id: 5, http_hostname: 205.174.165.68, http_url: /favicon.ico, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 15782 ; pcap_cnt: 3868280, event_type: fileinfo, proto: TCP, http_hostname: 205.174.165.68, http_url: /dv/login.php, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/login.php, http_http_method: POST, http_protocol: HTTP/1.1, http_length: 0, app_proto: http, fileinfo_filename: /dv/login.php, fileinfo_gaps: False, fileinfo_state: CLOSED, fileinfo_stored: False, fileinfo_size: 88, fileinfo_tx_id: 6 ; event_type: http, proto: TCP, tx_id: 6, http_hostname: 205.174.165.68, http_url: /dv/login.php, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/login.php, http_http_method: POST, http_protocol: HTTP/1.1, http_length: 52037 ; event_type: http, proto: TCP, tx_id: 7, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 8, http_hostname: 205.174.165.68, http_url: /dv/dvwa/css/main.css, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 9, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%27BLV5DIBIS87PYKBE1QQHCJ22ET7LUGGUCPP9OTYYPSB697X2E7%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 10, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 11, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%274IX6WF7YU8XE4XV7F78KR868GYBVZ8SLVEBA2WMLHD1NKP7ZVK%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 12, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 13, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%279PRBGN0KXTIRDJWTY9DKY8IVZKIUDMTHH8PCBZ6PM37OLPFVG4%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 14, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 15, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%27WPV1RRR4KHVU03DRW4HYNUYSNCSXSXHPHM6PYQZVFYOV8H4KNQ%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 16, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 17, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%272CBJ75LBD30SXIF6MLVV3UGZZKJNW3MZXSYLSUIHRM8JU2740F%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 18, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 19, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%2705WXMDQYHK5Q3D6GYEW7V8IM3UYHIMFOEIAZVE5R65PZL9U5RU%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 20, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 21, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%27L6OI4KXBDJAJE8IK4NYPSSD1XZTAFF7F3HBO78B92UC567POSO%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 22, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 23, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%27QGK8G8RA33TIM7J51IUWN9DBLUSM0ETCHNJNHAAB17A8ZSS191%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 24, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 25, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%27YALJTURZHIW5HE8YHE69BGG8UYBCL708W474V406I9KBG65H7Z%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 26, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 27, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%27WDFO6A9LFMN1DSRDJIYN1FWAXYOPCRHO896TKSV4WONVLL65R1%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 28, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 29, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%273FAV4J4Q4J8ATJT7KOP2F99OVOGGT0V3ZZMYEOEZPAUJE49OYE%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 30, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 31, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%272PVB2IUCZ3QPH7ZOSQV3H9S6Z6U292NH9569T3LT7WWEUGBF6Z%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 32, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 33, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%27RS7GDWODIASI51T2294CKMST1RI0X0EYI0IXLD6OKU1FN7FFRS%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 34, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 35, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%27W89CGMMK62E1GV49DBL7ONL9U5GBA4NZGY3S7GH4NZFLRIA8Y4%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 36, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 37, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%27NQP9NIXMDV6R1KS5VZXRGLOINY6GLAVGORZ78KX57QML5M4LKQ%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 38, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 39, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%278RX9CMTFK1Q8NBICVGXSMZQVAC8GV98FDVGQ4IL2RUYKAIDWQ6%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 40, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 41, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%27WAMPEBQCWGNOLZAPBL7VTY7HCIZDIFZ3QLD0CKLY37IN5JTUEA%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 42, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 43, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%27WOTQT2NC6A9ZG57NK0EDNC1DUCIYKUF1K6KJ48T09PWIMPVHLG%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 44, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 45, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%27PG5I5CY8V37HR0DQ9OAEKZ871KG22KXSUR4994YALYGU3GIYRR%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 46, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 47, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%270BD8TMDNJ0T3FFK3890XRM5X5N3KLM44O4ST5NST7WG7XSXNTQ%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 48, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 49, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%272JL6WH4Z06OV182ZEXKMG045QWGSI84FJ0QB3V4RVOFU3MA4EX%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 50, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 51, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%27C68CQEEJGR90P7FOGIW5UNLNAY5VUFY5HJ4H7HF044FEIYW1NL%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 52, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 53, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%27IM5P8ZBU13AX6LYH55GTDSW39ARPDUMODWYL3W41N9LQALMZFR%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 54, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 55, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%276G3Z53O372DILG22HB7XVJBHEKGM4CI10V925N1E8YH11ALUAM%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 56, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 57, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%27WNRON60D3UVZGDRBQ9AP9IYXRAHGNR87XNEOS1TUC437UAW3ZX%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 58, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 59, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%27MPMDSL7JFOJBBHIIXAW1RBW9AUWERPZF1PGQVTAKCA93IKK9KP%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 60, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 61, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%27SJBLOE5DZ6NAIQS6XZV5VXPATIQKSKUNWJYUHQEY7SZ3MGIK1T%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 62, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 63, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%271GSB4HQAP0NBQC0ODZD420WU8PSHAOJBJUCHIYF6UA9B7WR8NL%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 64, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 65, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%27ZO6C2LBBY42SFPLZMGVGE8PMJAHLTBAQ3P88I6FH6ATP1TYHUX%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 66, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 67, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%2754PM06LFQOJCB2KK8PBRACA05P2XSQVSN5OV8EKJ1P0E4AD7ZC%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 68, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 69, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%27OGL4NN1CWBSR73VRN12ZUCHOX8OSAH18ZFHA3HZLBS0UW1X3XR%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 70, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 71, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%27XYAH310SWMHQWQ7S8YXD375UGRBP501WUM2PJQ77OLQ4CU3KH5%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 72, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 73, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%27VV8NUVBFRWPMXM13XWLQY35VT6L2EYB5AL8L6CIOE14J468HF1%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 74, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 75, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%27T02TLH1ZX5CU0T3UU4OR47TLPXCSW4J0WAVANAY15PK4XAEUSL%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 76, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 77, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%27P2E2HAIDNIPBU358SNFXXLT0T3KLBL67Z6W2FE6ICVZXZ1HTHT%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 78, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 79, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%27H03YK8FS27AQY6673MF0MDH1KCMGMXLUC0JLNR5ERWLQKRO1AT%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 80, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 81, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%271SYQD27Q6E6NBV0TEQA9GKMVFQA9PVXO2PC5R6ZDB2KDV4DBUI%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 82, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 83, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%272QSW4M9XQEEOYEUD3VYRP48GO6PHFIIT8RIFN918AMWU860GCU%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 84, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 85, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%27LD4CKTW5USS857LFFXESSCTEUOBZ7EIR4G3NPXAJBAEPFUXGG4%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 86, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 87, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/?name=%3Cscript%3Econsole.log%28%27AMJ6M403OFJAKYORXO5BPF5ADR2AR1KZNWBRHAQOEPDFO5QDJQ%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_refer: http://205.174.165.68/dv/vulnerabilities/xss_r/, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0 ; event_type: http, proto: TCP, tx_id: 88, http_hostname: 205.174.165.68, http_url: /dv/vulnerabilities/xss_r/, http_http_user_agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0, http_http_method: GET, http_protocol: HTTP/1.1, http_length: 0
The network event indicates a Web Attack - XSS. Cross-site scripting (XSS) attacks involve injecting malicious scripts into web applications. Typically, the logs show HTTP requests with suspicious parameters or scripts aiming to execute in the context of a web application. These requests often contain encoded or obfuscated payloads, indicating attempts to bypass input validation mechanisms. Common indicators include unusual query strings, presence of HTML tags, and JavaScript code in parameters, which are not typical in normal web traffic. This behavior is consistent with XSS attacks, which aim to exploit vulnerabilities in web applications to execute arbitrary scripts in the context of a user session.
classification: Attack
justification: The network event indicates a Web Attack - XSS. Cross-site scripting (XSS) attacks involve injecting malicious scripts into web applications. Typically, the logs show HTTP requests with suspicious parameters or scripts aiming to execute in the context of a web application. These requests often contain encoded or obfuscated payloads, indicating attempts to bypass input validation mechanisms. Common indicators include unusual query strings, presence of HTML tags, and JavaScript code in parameters, which are not typical in normal web traffic. This behavior is consistent with XSS attacks, which aim to exploit vulnerabilities in web applications to execute arbitrary scripts in the context of a user session.