<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="anomalous" value="1.832300,1.626170,010,1 1 0 0 0 0 1 1 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="57.71.151.85" dst_port="22"/>
        </slice>
        <from usec="0" sec="1301893605"/>
        <to usec="0" sec="1301893854"/>
    </anomaly>
    <anomaly type="anomalous" value="4.190130,3.255680,010,1 1 1 1 1 0 1 1 1 1 1 1,ntscSYNt">
        <slice>
            <filter src_ip="189.52.205.145" src_port="6000" dst_port="1433"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.346950,1.656100,999,1 1 0 1 1 1 1 1 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="192.244.89.78"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.826880,1.508190,503,1 1 0 1 0 0 0 0 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="192.244.88.139" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.848850,1.553190,503,1 1 0 0 0 0 0 0 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="192.244.88.180" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.138050,2.775430,010,1 1 1 0 0 0 0 0 0 1 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.131.134.60" src_port="6000" dst_port="9415"/>
            <filter src_ip="125.131.134.60" src_port="6000" dst_port="7092"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.360980,2.361430,999,1 1 0 1 1 1 1 1 1 1 1 1,ptmpla">
        <slice>
            <filter src_ip="143.233.95.117" dst_ip="161.233.212.201"/>
            <filter src_ip="143.233.95.117" dst_ip="88.10.118.108"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.588280,2.879020,999,1 1 1 1 1 1 1 1 0 0 0 0,ipv46tun">
        <slice>
            <filter src_ip="204.190.100.21"/>
        </slice>
        <from usec="0" sec="1301893200"/>
        <to usec="0" sec="1301894101"/>
    </anomaly>
    <anomaly type="anomalous" value="1.530400,1.457660,503,1 1 0 1 0 0 1 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="193.154.39.170" dst_port="53"/>
            <filter src_ip="193.154.39.170" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.346950,1.656100,999,1 1 0 1 1 1 1 1 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="192.244.182.52" src_port="58584"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.672230,1.482680,503,0 0 0 1 1 1 0 0 0 1 1 0,ptmplaHTTP">
        <slice>
            <filter src_ip="142.74.166.69" dst_ip="89.88.228.106" src_port="80"/>
            <filter src_ip="142.74.166.69" dst_ip="89.88.228.68" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.886160,1.533940,999,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="153.110.12.227" dst_ip="89.88.225.216"/>
            <filter src_ip="153.110.12.227" dst_ip="89.88.228.241"/>
            <filter src_ip="153.110.12.227" src_port="80"/>
            <filter src_ip="153.110.12.227" src_port="21"/>
            <filter dst_ip="89.88.225.216" src_port="21"/>
            <filter dst_ip="89.88.228.241" src_port="80"/>
            <filter src_ip="153.110.84.47" dst_ip="89.88.225.216" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.616390,2.263710,010,1 0 0 0 0 0 1 1 1 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="193.144.141.167"/>
        </slice>
        <from usec="0" sec="1301893200"/>
        <to usec="0" sec="1301893772"/>
    </anomaly>
    <anomaly type="anomalous" value="1.936600,1.522400,999,0 0 0 1 1 1 1 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="143.233.95.117" dst_ip="82.248.17.135"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.871310,1.516940,999,0 1 0 1 1 0 1 1 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="192.244.89.79"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.245760,2.328460,999,1 1 0 1 1 1 1 1 1 1 1 0,mptmp">
        <slice>
            <filter src_ip="192.244.89.78"/>
            <filter src_ip="192.244.89.79"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.087790,2.297350,999,0 0 0 1 1 1 1 1 1 1 1 1,alphfl">
        <slice>
            <filter src_ip="143.233.95.117" dst_ip="85.61.21.195"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.886160,1.533940,503,0 0 0 1 1 1 0 0 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="193.154.3.58" src_port="53"/>
            <filter dst_ip="193.154.3.58" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.826880,1.508190,503,1 1 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="192.244.88.137" dst_port="80"/>
            <filter dst_ip="192.244.88.138" dst_port="80"/>
            <filter dst_ip="192.244.88.136" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.097750,1.541780,503,1 0 0 1 1 1 1 0 0 1 1 1,ptmpHTTP">
        <slice>
            <filter src_ip="192.244.88.180" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.886160,1.533940,503,0 0 0 1 1 1 0 0 0 1 1 1,salphfl">
        <slice>
            <filter src_ip="214.140.2.234" dst_ip="171.102.65.179" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.886160,1.533940,503,0 0 0 1 1 1 0 0 0 1 1 1,mptplaHTTP">
        <slice>
            <filter src_ip="117.105.80.41" dst_ip="137.179.6.113" src_port="80"/>
            <filter src_ip="117.105.80.40" dst_ip="137.179.6.113" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.886160,1.533940,503,0 0 0 1 1 1 0 0 0 1 1 1,ptmpHTTP">
        <slice>
            <filter src_ip="137.174.7.93" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.886160,1.533940,501,0 0 0 1 1 1 0 0 0 1 1 1,salphfl">
        <slice>
            <filter src_ip="153.110.12.234" dst_ip="89.88.225.89" src_port="21"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.042890,1.550520,999,0 0 0 1 1 1 1 1 0 1 1 0,ntscUDP">
        <slice>
            <filter src_ip="143.233.115.88" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.878920,1.496450,503,1 1 0 1 0 0 1 0 0 1 1 1,ptmpHTTP">
        <slice>
            <filter src_ip="143.233.221.96" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.221410,1.599600,503,0 0 0 1 1 1 1 1 0 1 1 1,ptmpHTTP">
        <slice>
            <filter src_ip="193.154.3.58" dst_port="53"/>
            <filter src_ip="193.154.3.58" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.718370,1.477120,503,0 0 0 1 0 0 1 1 0 1 1 1,ptmpHTTP">
        <slice>
            <filter src_ip="192.244.88.132" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.407230,1.561620,901,1 1 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="143.233.193.68" dst_ip="161.26.28.192" dst_port="80"/>
        </slice>
        <from usec="0" sec="1301893801"/>
        <to usec="0" sec="1301893803"/>
    </anomaly>
    <anomaly type="suspicious" value="1.407230,1.561620,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="209.138.40.30"/>
        </slice>
        <from usec="0" sec="1301893239"/>
        <to usec="0" sec="1301893284"/>
    </anomaly>
    <anomaly type="suspicious" value="1.407230,1.561620,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="209.196.212.132" dst_port="139"/>
        </slice>
        <from usec="0" sec="1301893884"/>
        <to usec="0" sec="1301893910"/>
    </anomaly>
    <anomaly type="suspicious" value="1.407230,1.561620,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="112.128.249.61" dst_port="445"/>
            <filter src_ip="112.128.249.61" dst_port="139"/>
        </slice>
        <from usec="0" sec="1301893553"/>
        <to usec="0" sec="1301893606"/>
    </anomaly>
    <anomaly type="suspicious" value="1.407230,1.561620,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="209.138.40.30" dst_port="445"/>
            <filter src_ip="209.138.40.30" dst_port="139"/>
        </slice>
        <from usec="0" sec="1301893239"/>
        <to usec="0" sec="1301893284"/>
    </anomaly>
    <anomaly type="suspicious" value="1.474150,1.550290,010,1 1 0 0 0 0 1 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="71.104.126.9" dst_port="139"/>
        </slice>
        <from usec="0" sec="1301894055"/>
        <to usec="0" sec="1301894101"/>
    </anomaly>
    <anomaly type="suspicious" value="1.463020,1.484200,999,0 0 0 1 1 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="192.244.80.64" src_port="2117"/>
        </slice>
        <from usec="0" sec="1301893215"/>
        <to usec="0" sec="1301894003"/>
    </anomaly>
    <anomaly type="suspicious" value="1.230780,1.485980,999,0 0 0 1 0 0 1 1 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="193.101.140.185" dst_ip="10.64.17.12" src_port="53"/>
        </slice>
        <from usec="0" sec="1301893200"/>
        <to usec="0" sec="1301894101"/>
    </anomaly>
    <anomaly type="suspicious" value="1.263170,1.531630,020,0 0 0 0 0 0 1 1 0 0 0 0,hostout">
        <slice>
            <filter src_ip="137.174.65.136"/>
        </slice>
        <from usec="0" sec="1301893605"/>
        <to usec="0" sec="1301893651"/>
    </anomaly>
    <anomaly type="suspicious" value="1.263170,1.531630,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="143.233.115.87" dst_port="53"/>
        </slice>
        <from usec="0" sec="1301893605"/>
        <to usec="0" sec="1301893651"/>
    </anomaly>
    <anomaly type="suspicious" value="1.263170,1.531630,010,0 0 0 0 0 0 1 1 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="161.27.160.200" src_port="80"/>
        </slice>
        <from usec="0" sec="1301893605"/>
        <to usec="0" sec="1301893651"/>
    </anomaly>
    <anomaly type="suspicious" value="1.263170,1.531630,999,0 0 0 0 0 0 1 1 0 0 0 0,mptmp">
        <slice>
            <filter src_port="5060" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1301893605"/>
        <to usec="0" sec="1301893651"/>
    </anomaly>
    <anomaly type="suspicious" value="1.200040,1.347660,503,0 0 0 1 1 0 0 0 0 1 1 0,ptmpHTTP">
        <slice>
            <filter src_ip="143.233.105.27" dst_port="53"/>
            <filter src_ip="143.233.105.27" dst_ip="216.42.132.24" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.902496,1.349620,503,0 0 0 1 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="143.233.155.179" dst_port="80"/>
            <filter dst_ip="1.158.100.76" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.006550,1.362430,503,0 0 0 1 1 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="143.233.92.34" dst_ip="121.143.164.199"/>
            <filter src_ip="143.233.92.34" dst_port="80"/>
            <filter src_ip="143.233.92.34" dst_port="20480"/>
            <filter dst_ip="121.143.164.199" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.200040,1.347660,503,0 0 0 1 1 0 0 0 0 1 1 0,ptmpHTTP">
        <slice>
            <filter src_ip="192.244.90.3" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.946182,1.399730,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="137.174.205.120" dst_ip="120.4.16.159" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.946182,1.399730,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="172.82.32.246" dst_ip="193.144.82.46" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.287050,1.453910,503,0 0 0 0 0 0 0 0 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="193.144.81.131" src_port="80"/>
            <filter dst_ip="193.144.81.131" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.359900,1.441730,503,0 0 0 0 0 0 1 0 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="193.154.39.170" src_port="53"/>
            <filter dst_ip="193.154.39.170" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.946182,1.399730,503,0 0 0 0 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="153.110.138.117" src_port="80"/>
            <filter dst_ip="215.5.175.139" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.210220,1.371450,503,1 0 0 1 0 0 0 0 0 1 1 0,ptmplaHTTP">
        <slice>
            <filter src_ip="143.233.155.170" dst_ip="57.4.42.136" src_port="80"/>
            <filter src_ip="143.233.155.170" dst_ip="118.123.61.39" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.255290,1.405740,503,0 0 0 1 0 0 0 0 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="192.244.88.132" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.946182,1.399730,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="218.156.185.101" dst_ip="171.102.148.207" src_port="1035" dst_port="4500"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.902496,1.349620,503,0 0 0 1 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="94.32.173.116" dst_ip="137.174.143.27" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.287050,1.453910,503,0 0 0 0 0 0 0 0 0 1 1 1,mptplaHTTP">
        <slice>
            <filter src_ip="143.233.225.251" dst_ip="121.195.176.247" src_port="80"/>
            <filter src_ip="143.233.225.248" dst_ip="121.195.176.247" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.287050,1.453910,503,0 0 0 0 0 0 0 0 0 1 1 1,mptplaHTTP">
        <slice>
            <filter src_ip="143.233.132.33" dst_ip="124.214.8.115" src_port="443"/>
            <filter src_ip="143.233.225.251" dst_ip="124.214.8.115" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.255290,1.405740,503,0 0 0 1 0 0 0 0 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="192.244.82.8" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.946182,1.399730,501,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="173.2.218.4" dst_ip="171.102.128.44"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.946182,1.399730,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="193.135.244.201" dst_ip="171.102.90.14" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.255290,1.405740,503,0 0 0 1 0 0 0 0 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="192.244.87.39" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.287050,1.453910,503,0 0 0 0 0 0 0 0 0 1 1 1,salphfl">
        <slice>
            <filter src_ip="171.102.65.179" dst_ip="214.140.2.234" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.287050,1.453910,503,0 0 0 0 0 0 0 0 0 1 1 1,salphfl">
        <slice>
            <filter src_ip="137.181.178.84" dst_ip="215.5.175.19" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.946182,1.399730,503,0 0 0 0 0 0 0 0 0 1 1 0,mptplaHTTP">
        <slice>
            <filter src_ip="137.181.217.198" dst_ip="215.5.175.129" src_port="80"/>
            <filter src_ip="137.181.77.219" dst_ip="215.5.175.129" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.255290,1.405740,999,0 0 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="153.110.12.234" dst_ip="215.5.175.132"/>
            <filter src_ip="153.110.12.234" src_port="80"/>
            <filter dst_ip="215.5.175.132" src_port="80"/>
            <filter src_ip="153.110.12.234" dst_ip="89.88.225.89" src_port="21"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.946182,1.399730,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="143.233.225.251" dst_ip="219.80.210.236" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.946182,1.399730,501,0 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="171.102.128.44" dst_ip="89.88.225.109" src_port="21"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.946182,1.399730,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="143.233.165.27" dst_ip="88.164.58.82" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.287050,1.453910,503,0 0 0 0 0 0 0 0 0 1 1 1,ptmplaHTTP">
        <slice>
            <filter src_ip="137.181.122.52" dst_ip="215.5.175.164" src_port="80"/>
            <filter src_ip="137.181.122.52" dst_ip="89.88.225.180" src_port="80"/>
            <filter src_ip="137.181.122.52" dst_ip="89.88.225.94" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.287050,1.453910,503,0 0 0 0 0 0 0 0 0 1 1 1,alphflHTTP">
        <slice>
            <filter src_ip="26.64.37.137" dst_ip="137.102.225.122" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
