<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="anomalous" value="1.995260,1.565970,999,1 1 1 1 1 1 0 0 0 1 0 0,ipv46tun">
        <slice>
            <filter src_ip="203.69.242.118"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.132670,1.647330,999,1 1 1 1 1 1 1 1 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="193.213.51.201" dst_port="53611"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.816790,1.403190,999,0 0 0 1 1 1 0 0 0 1 1 1,ntscUDP">
        <slice>
            <filter src_ip="153.134.60.239" src_port="37430"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.816790,1.403190,503,0 0 0 1 1 1 0 0 0 1 1 1,salphfl">
        <slice>
            <filter src_ip="197.178.36.128" dst_ip="171.134.159.140" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.586290,1.209870,503,0 0 0 1 1 1 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="193.213.225.173" dst_ip="209.68.220.203" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.796840,1.432650,999,0 0 0 1 1 1 0 0 0 0 1 1,ptmp">
        <slice>
            <filter src_ip="36.212.32.200" src_port="995"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.470290,1.212340,999,0 0 0 1 1 1 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="153.134.134.19" dst_ip="220.160.168.218" dst_port="25"/>
        </slice>
        <from usec="0" sec="1267592827"/>
        <to usec="0" sec="1267593045"/>
    </anomaly>
    <anomaly type="anomalous" value="1.470290,1.212340,999,0 0 0 1 1 1 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="171.134.44.18" dst_ip="35.220.177.115" src_port="1040" dst_port="5050"/>
        </slice>
        <from usec="0" sec="1267592428"/>
        <to usec="0" sec="1267593222"/>
    </anomaly>
    <anomaly type="anomalous" value="1.470290,1.212340,503,0 0 0 1 1 1 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="214.242.36.184" dst_ip="173.204.65.202" src_port="80"/>
            <filter src_ip="192.162.72.56" dst_ip="173.204.65.202" src_port="80"/>
        </slice>
        <from usec="0" sec="1267592608"/>
        <to usec="0" sec="1267592805"/>
    </anomaly>
    <anomaly type="anomalous" value="1.816790,1.403190,999,0 0 0 1 1 1 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="220.33.21.27" dst_ip="193.213.228.249"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.601390,1.215620,999,0 0 0 1 1 1 1 0 0 1 1 0,ntscUDP">
        <slice>
            <filter src_ip="203.217.35.249" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.844540,1.690980,999,1 1 1 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.217.35.249" dst_port="53"/>
        </slice>
        <from usec="0" sec="1267592401"/>
        <to usec="0" sec="1267593224"/>
    </anomaly>
    <anomaly type="anomalous" value="1.519890,1.412600,999,1 1 0 0 0 0 1 1 1 1 0 0,ptmp">
        <slice>
            <filter src_ip="193.213.238.10" src_port="3124"/>
            <filter src_ip="193.213.238.10" src_port="3128"/>
            <filter src_ip="193.213.238.10" src_port="17660"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.314210,1.307600,999,0 0 0 0 0 0 1 1 1 1 0 0,mptp">
        <slice>
            <filter dst_ip="153.134.255.216" dst_port="3128"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.463670,1.361880,999,0 1 0 0 0 0 1 1 1 1 0 0,mptp">
        <slice>
            <filter dst_ip="153.134.255.211" dst_port="3128"/>
            <filter dst_ip="153.134.255.211" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.916970,1.470860,999,0 0 0 1 1 1 1 1 1 1 0 0,mptp">
        <slice>
            <filter dst_ip="193.213.238.6" dst_port="3124"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.586290,1.209870,503,0 0 0 1 1 1 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="171.39.168.81" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.270870,1.700310,020,0 1 0 1 1 1 1 1 1 1 1 1,ntscICec">
        <slice>
            <filter src_ip="3.208.231.211"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.023820,1.545670,999,0 1 1 1 1 1 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="193.213.51.201" src_port="53611"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.417620,1.336930,999,0 0 0 0 0 0 1 1 1 1 1 0,mptmp">
        <slice>
            <filter src_ip="153.134.255.211"/>
            <filter src_ip="193.213.228.224" src_port="39684"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.610140,1.439790,999,1 1 0 0 0 0 1 1 1 1 1 0,mptp">
        <slice>
            <filter dst_ip="193.213.238.10" dst_port="3124"/>
            <filter dst_ip="193.213.238.10" dst_port="3128"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.494590,1.177380,999,0 0 0 1 1 1 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="36.212.32.200" src_port="995"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.999264,1.233410,999,0 0 0 0 0 0 0 0 0 0 0 1,mptp">
        <slice>
            <filter dst_ip="36.212.32.200" dst_port="995"/>
            <filter dst_ip="36.212.32.200" dst_port="993"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.974208,1.190920,999,1 0 0 0 0 0 1 1 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="193.213.238.7" dst_port="3124"/>
            <filter dst_ip="193.213.238.7" dst_port="3128"/>
        </slice>
        <from usec="0" sec="1267592401"/>
        <to usec="0" sec="1267592897"/>
    </anomaly>
    <anomaly type="suspicious" value="0.892772,1.140950,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="171.59.147.245" dst_ip="40.181.242.142" src_port="80" dst_port="46749"/>
        </slice>
        <from usec="0" sec="1267592891"/>
        <to usec="0" sec="1267592893"/>
    </anomaly>
    <anomaly type="suspicious" value="1.073130,1.138330,999,1 1 0 0 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="171.39.211.137" dst_port="25"/>
            <filter src_ip="173.204.139.138" dst_ip="192.97.86.67" dst_port="25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.272100,1.361520,020,1 0 1 0 0 0 0 0 0 1 0 0,ntscICec">
        <slice>
            <filter src_ip="3.208.231.211"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.892772,1.140950,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="41.55.108.41" dst_ip="193.213.229.69" dst_port="80"/>
        </slice>
        <from usec="0" sec="1267592613"/>
        <to usec="0" sec="1267593218"/>
    </anomaly>
    <anomaly type="suspicious" value="1.304460,1.318080,999,1 1 0 0 0 0 1 0 0 1 0 1,ptmp">
        <slice>
            <filter src_ip="153.134.255.211" src_port="3128"/>
            <filter src_ip="153.134.255.211" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.892772,1.140950,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.213.238.7" src_port="3128"/>
            <filter src_ip="193.213.238.7" src_port="3124"/>
            <filter src_ip="193.213.238.7" src_port="3127"/>
        </slice>
        <from usec="0" sec="1267592424"/>
        <to usec="0" sec="1267593300"/>
    </anomaly>
    <anomaly type="suspicious" value="0.892772,1.140950,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="130.163.192.98" dst_port="23"/>
        </slice>
        <from usec="0" sec="1267593215"/>
        <to usec="0" sec="1267593224"/>
    </anomaly>
    <anomaly type="suspicious" value="1.400490,1.442980,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="130.163.21.65" dst_port="23"/>
        </slice>
        <from usec="0" sec="1267592748"/>
        <to usec="0" sec="1267592752"/>
    </anomaly>
    <anomaly type="suspicious" value="0.892772,1.140950,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="40.87.80.248" dst_port="139"/>
        </slice>
        <from usec="0" sec="1267593193"/>
        <to usec="0" sec="1267593223"/>
    </anomaly>
    <anomaly type="suspicious" value="1.417570,1.447810,020,1 1 1 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="130.163.21.65"/>
        </slice>
        <from usec="0" sec="1267592716"/>
        <to usec="0" sec="1267592762"/>
    </anomaly>
    <anomaly type="suspicious" value="1.339280,1.393370,503,0 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="171.59.82.129" dst_ip="40.181.245.253" src_port="80" dst_port="64738"/>
        </slice>
        <from usec="0" sec="1267592749"/>
        <to usec="0" sec="1267592751"/>
    </anomaly>
    <anomaly type="suspicious" value="1.339280,1.393370,999,0 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="212.117.18.20" src_port="2425" dst_port="2425"/>
        </slice>
        <from usec="0" sec="1267593018"/>
        <to usec="0" sec="1267593020"/>
    </anomaly>
    <anomaly type="suspicious" value="0.957719,1.110030,999,1 1 0 0 0 0 1 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="153.134.255.210" src_port="3128"/>
            <filter src_ip="153.134.255.210" src_port="3124"/>
            <filter src_ip="153.134.255.210" src_port="3127"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.823076,1.083980,999,0 1 0 0 0 0 1 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="3.215.166.231" dst_ip="193.213.238.7" dst_port="3128"/>
        </slice>
        <from usec="0" sec="1267592716"/>
        <to usec="0" sec="1267593001"/>
    </anomaly>
    <anomaly type="suspicious" value="0.885736,1.079280,999,1 0 0 0 0 0 1 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="153.134.255.210" dst_port="3128"/>
            <filter dst_ip="153.134.255.210" dst_port="3124"/>
            <filter dst_ip="153.134.255.210" dst_port="3127"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.095320,1.144440,503,1 1 0 0 0 0 1 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="193.213.225.173" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.286500,1.339170,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="193.213.238.11" dst_port="44825"/>
        </slice>
        <from usec="0" sec="1267592401"/>
        <to usec="0" sec="1267592762"/>
    </anomaly>
    <anomaly type="suspicious" value="0.823076,1.083980,010,0 1 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="4.80.69.181" dst_port="4899"/>
        </slice>
        <from usec="0" sec="1267593211"/>
        <to usec="0" sec="1267593259"/>
    </anomaly>
    <anomaly type="suspicious" value="1.286500,1.339170,999,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="173.204.164.4" dst_port="49138"/>
        </slice>
        <from usec="0" sec="1267592401"/>
        <to usec="0" sec="1267592447"/>
    </anomaly>
    <anomaly type="suspicious" value="0.883953,1.130300,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="153.134.139.138" dst_port="25576"/>
        </slice>
        <from usec="0" sec="1267592401"/>
        <to usec="0" sec="1267592447"/>
    </anomaly>
    <anomaly type="suspicious" value="0.883953,1.130300,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="153.134.139.138" src_port="25576"/>
        </slice>
        <from usec="0" sec="1267592401"/>
        <to usec="0" sec="1267592447"/>
    </anomaly>
    <anomaly type="suspicious" value="0.883953,1.130300,999,0 0 0 0 0 0 1 1 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="171.39.211.141" dst_ip="221.146.217.72" src_port="53"/>
            <filter src_ip="173.204.116.118" dst_ip="221.146.217.72" src_port="53"/>
            <filter src_ip="203.9.33.140" dst_ip="221.146.217.72" src_port="53"/>
            <filter src_ip="173.204.217.9" dst_ip="221.146.217.72" src_port="53"/>
        </slice>
        <from usec="0" sec="1267592851"/>
        <to usec="0" sec="1267592897"/>
    </anomaly>
    <anomaly type="suspicious" value="0.883953,1.130300,999,0 0 0 0 0 0 1 1 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="193.213.228.10" dst_ip="10.128.0.1" dst_port="36769"/>
        </slice>
        <from usec="0" sec="1267592851"/>
        <to usec="0" sec="1267592897"/>
    </anomaly>
    <anomaly type="suspicious" value="0.785378,1.011990,999,0 0 0 0 0 0 1 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="153.134.255.210" dst_port="3128"/>
            <filter dst_ip="153.134.255.210" dst_port="3124"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.286500,1.339170,999,0 0 0 0 0 0 1 1 1 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="192.104.76.182" src_port="80"/>
            <filter dst_ip="192.104.76.182" src_port="53"/>
            <filter dst_ip="192.104.76.182" dst_port="31983"/>
        </slice>
        <from usec="0" sec="1267592401"/>
        <to usec="0" sec="1267592897"/>
    </anomaly>
    <anomaly type="suspicious" value="0.856300,1.124110,020,0 0 0 0 0 0 0 1 0 0 0 0,ntscICecrqICecrqdurmterp">
        <slice>
            <filter dst_ip="3.208.231.211"/>
        </slice>
        <from usec="0" sec="1267592851"/>
        <to usec="0" sec="1267592897"/>
    </anomaly>
    <anomaly type="suspicious" value="1.023060,1.239060,503,0 0 0 0 0 0 1 0 0 0 0 1,mptpHTTP">
        <slice>
            <filter dst_ip="193.213.232.218" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.754120,1.005070,503,0 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="173.204.111.60" dst_ip="36.212.162.106" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.163230,1.230980,999,0 0 0 0 0 0 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="153.134.62.131" src_port="17477"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.754120,1.005070,999,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="153.134.105.122" dst_ip="3.159.235.60" src_port="4500" dst_port="2035"/>
            <filter src_ip="153.134.105.122" dst_ip="5.169.33.81" src_port="4500" dst_port="4500"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.754120,1.005070,501,0 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="192.192.22.56" dst_ip="171.61.184.32" src_port="21"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.858141,1.072790,999,1 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="193.213.228.249" dst_ip="220.33.21.27"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.754120,1.005070,503,0 0 0 0 0 0 0 0 0 1 1 0,mptplaHTTP">
        <slice>
            <filter src_ip="93.138.187.228" dst_ip="173.204.111.60" src_port="80"/>
            <filter src_ip="48.196.154.186" dst_ip="173.204.111.60" src_port="80"/>
            <filter src_ip="48.196.154.129" dst_ip="173.204.111.60" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.163230,1.230980,503,0 0 0 0 0 0 0 0 0 1 1 1,alphflHTTP">
        <slice>
            <filter src_ip="55.130.239.235" dst_ip="192.96.144.42" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.163230,1.230980,503,0 0 0 0 0 0 0 0 0 1 1 1,salphfl">
        <slice>
            <filter src_ip="222.47.48.153" dst_ip="173.204.179.44" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.286500,1.339170,999,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="153.134.255.210" dst_port="3128"/>
            <filter dst_ip="153.134.255.210" dst_port="3124"/>
        </slice>
        <from usec="0" sec="1267592401"/>
        <to usec="0" sec="1267592762"/>
    </anomaly>
    <anomaly type="suspicious" value="0.785378,1.011990,503,0 0 0 0 0 0 1 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="192.96.166.200" src_port="53"/>
            <filter dst_ip="192.96.166.200" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.183730,1.236640,503,0 0 0 0 0 0 1 0 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="193.213.232.219" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.754120,1.005070,503,0 0 0 0 0 0 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="193.213.232.218" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.163230,1.230980,503,0 0 0 0 0 0 0 0 0 1 1 1,alphflHTTP">
        <slice>
            <filter src_ip="193.213.225.173" dst_ip="213.112.96.192" src_port="80" dst_port="50433"/>
            <filter src_ip="193.213.225.173" dst_ip="213.112.96.192" src_port="80" dst_port="50432"/>
            <filter src_ip="193.213.225.173" dst_ip="213.112.96.192" src_port="80" dst_port="50405"/>
            <filter src_ip="193.213.225.173" dst_ip="213.112.96.192" src_port="80" dst_port="50404"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.754120,1.005070,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="177.5.22.251" dst_ip="104.146.21.1" src_port="80" dst_port="49396"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.754120,1.005070,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="171.59.109.189" dst_ip="40.181.246.190" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.754120,1.005070,999,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="36.212.32.200" dst_port="995"/>
            <filter dst_ip="36.212.32.200" dst_port="993"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.754120,1.005070,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="171.39.211.231" dst_ip="35.176.232.13" src_port="80" dst_port="55992"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
