<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="anomalous" value="2.086910,1.625060,999,1 1 0 1 1 1 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="208.61.128.192" src_port="62066"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307337125"/>
    </anomaly>
    <anomaly type="anomalous" value="1.765910,1.403320,011,1 1 0 1 1 0 1 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="208.61.86.132"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.452190,1.426680,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="200.18.10.145" dst_ip="178.249.140.6" src_port="80" dst_port="60768"/>
        </slice>
        <from usec="0" sec="1307336641"/>
        <to usec="0" sec="1307336664"/>
    </anomaly>
    <anomaly type="anomalous" value="2.933900,2.269380,011,1 1 1 1 1 0 1 1 0 1 1 0,DDoSRSTrp">
        <slice>
            <filter src_ip="209.113.247.33"/>
            <filter src_ip="209.113.247.39"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.912270,2.416640,010,1 1 1 0 0 0 1 1 1 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="37.232.8.137" src_port="6000" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1307336491"/>
        <to usec="0" sec="1307336537"/>
    </anomaly>
    <anomaly type="anomalous" value="2.102070,1.642830,503,1 1 0 1 1 1 0 0 0 1 0 0,ntscACK">
        <slice>
            <filter src_ip="208.61.87.133" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.674800,2.213840,010,1 1 1 1 0 0 1 1 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="33.99.143.230" src_port="6000" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1307336403"/>
        <to usec="0" sec="1307336684"/>
    </anomaly>
    <anomaly type="anomalous" value="1.924200,1.505240,999,1 0 0 1 1 1 1 0 0 1 1 0,mptmp">
        <slice>
            <filter dst_ip="207.166.74.127" dst_port="993"/>
            <filter dst_ip="88.63.78.5" dst_port="993"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.497310,1.370250,503,1 1 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="208.61.89.67" src_port="80"/>
            <filter src_ip="158.108.104.171" src_port="51218"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307337123"/>
    </anomaly>
    <anomaly type="anomalous" value="2.125820,1.770320,503,0 0 0 1 1 1 0 0 0 1 1 1,ptmplaHTTP">
        <slice>
            <filter src_ip="152.117.135.55" dst_ip="87.13.169.74" src_port="80"/>
            <filter src_ip="152.117.135.55" dst_ip="87.13.169.24" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.756930,1.510720,999,0 0 0 1 1 1 0 0 0 1 1 0,heavy_hitter">
        <slice>
            <filter src_ip="158.108.141.100" dst_ip="74.136.219.10" dst_port="1379"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.756930,1.510720,504,0 0 0 1 1 1 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="141.3.18.162" src_port="80"/>
            <filter src_ip="141.3.85.176" dst_ip="87.13.174.26" src_port="80"/>
            <filter src_ip="152.117.74.145" dst_ip="87.13.174.26" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.229450,1.782290,503,1 0 0 1 1 1 0 0 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="209.126.113.57" src_port="80"/>
            <filter dst_ip="209.126.113.57" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.635400,1.437330,999,0 0 0 1 1 1 1 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.61.81.2" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.603200,1.520420,999,0 0 0 1 0 0 1 0 0 1 1 1,ntscUDP">
        <slice>
            <filter src_ip="208.61.93.114" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.164700,1.707670,010,1 1 0 1 1 0 1 1 1 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="209.113.247.33"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307337125"/>
    </anomaly>
    <anomaly type="anomalous" value="2.480050,1.893850,010,1 1 0 1 1 1 1 1 1 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="209.113.247.39"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307337125"/>
    </anomaly>
    <anomaly type="anomalous" value="2.009320,1.680300,010,1 1 0 1 0 0 1 1 1 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="208.61.86.132"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307337049"/>
    </anomaly>
    <anomaly type="anomalous" value="3.391870,2.583080,010,1 1 1 1 1 1 1 1 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="75.8.81.222" src_port="22" dst_port="20981"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.747690,1.569560,503,0 0 0 1 1 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="178.249.65.184" src_port="80"/>
            <filter src_ip="82.129.81.195" dst_ip="153.78.227.113" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.125820,1.770320,503,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="82.129.80.188" dst_ip="158.128.18.146"/>
            <filter src_ip="82.129.80.188" src_port="80"/>
            <filter dst_ip="158.128.18.146" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.747690,1.569560,503,0 0 0 1 1 0 0 0 0 1 1 1,point_to_point">
        <slice>
            <filter src_ip="218.213.255.139" dst_ip="209.113.18.37" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.690310,1.553480,503,1 0 0 1 0 0 0 0 0 1 1 1,ntscACK">
        <slice>
            <filter src_ip="209.126.113.57" dst_port="80"/>
            <filter src_ip="209.126.113.57" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.050020,1.539890,503,1 0 0 1 1 1 1 1 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="208.61.87.133" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.551080,1.539730,503,0 0 0 1 0 0 0 0 0 1 1 1,ntscACK">
        <slice>
            <filter src_ip="208.61.87.179" src_port="80"/>
            <filter src_ip="208.61.87.187" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.277720,1.520940,010,0 0 0 0 0 0 0 0 0 0 0 1,mptp">
        <slice>
            <filter dst_ip="75.8.81.222" src_port="22" dst_port="20981"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.885801,1.160270,503,1 0 0 1 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="158.117.151.167" src_port="80"/>
            <filter dst_ip="158.117.151.167" src_port="443"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336508"/>
    </anomaly>
    <anomaly type="suspicious" value="1.126410,1.223950,999,1 0 0 1 1 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="201.166.75.10" dst_port="12350"/>
            <filter dst_ip="201.166.75.10" dst_port="443"/>
        </slice>
        <from usec="0" sec="1307336404"/>
        <to usec="0" sec="1307336869"/>
    </anomaly>
    <anomaly type="suspicious" value="0.904153,1.206450,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="158.108.136.144" dst_ip="84.47.61.106" src_port="80"/>
        </slice>
        <from usec="0" sec="1307336403"/>
        <to usec="0" sec="1307336867"/>
    </anomaly>
    <anomaly type="suspicious" value="0.904153,1.206450,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="158.108.86.243" dst_ip="169.215.101.184" dst_port="80"/>
        </slice>
        <from usec="0" sec="1307336406"/>
        <to usec="0" sec="1307336497"/>
    </anomaly>
    <anomaly type="suspicious" value="0.904153,1.206450,504,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="158.108.174.201" dst_ip="205.219.30.137" dst_port="443"/>
        </slice>
        <from usec="0" sec="1307336427"/>
        <to usec="0" sec="1307336506"/>
    </anomaly>
    <anomaly type="suspicious" value="0.904153,1.206450,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="153.78.111.130" dst_ip="111.94.167.201" src_port="60440" dst_port="80"/>
            <filter src_ip="153.78.111.130" dst_ip="111.94.167.201" src_port="47964" dst_port="80"/>
            <filter src_ip="153.78.111.130" dst_ip="111.94.167.201" src_port="47021" dst_port="80"/>
        </slice>
        <from usec="0" sec="1307336724"/>
        <to usec="0" sec="1307336759"/>
    </anomaly>
    <anomaly type="suspicious" value="0.904153,1.206450,999,0 0 0 1 1 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="158.128.72.134" dst_ip="117.95.107.40" src_port="10000" dst_port="1058"/>
        </slice>
        <from usec="0" sec="1307336403"/>
        <to usec="0" sec="1307336959"/>
    </anomaly>
    <anomaly type="suspicious" value="0.904153,1.206450,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="208.61.87.184" dst_ip="102.178.36.200" src_port="80" dst_port="39874"/>
        </slice>
        <from usec="0" sec="1307336765"/>
        <to usec="0" sec="1307336784"/>
    </anomaly>
    <anomaly type="suspicious" value="1.081340,1.248490,999,0 0 0 0 0 0 1 0 0 1 1 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="219.96.74.78" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.929905,1.227990,999,0 0 0 0 0 0 1 1 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="208.61.87.180" dst_port="53"/>
            <filter src_port="53" dst_port="53"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336762"/>
    </anomaly>
    <anomaly type="suspicious" value="1.099920,1.181270,999,0 0 0 1 1 0 1 0 0 1 0 0,ipv46tun">
        <slice>
            <filter src_ip="219.156.56.145"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.912893,1.187100,999,0 0 0 1 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="158.108.1.159" src_port="123"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336779"/>
    </anomaly>
    <anomaly type="suspicious" value="1.099920,1.181270,503,0 0 0 1 1 0 1 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="209.126.64.224" dst_port="80"/>
            <filter dst_ip="209.127.42.83" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.929905,1.227990,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="209.113.240.146" src_port="27745"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336447"/>
    </anomaly>
    <anomaly type="suspicious" value="0.929905,1.227990,503,0 0 0 0 0 0 1 1 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="205.250.199.33" dst_ip="209.113.17.19" src_port="80"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336447"/>
    </anomaly>
    <anomaly type="suspicious" value="1.469730,1.532410,999,0 0 0 0 0 0 1 1 1 0 0 0,mptpla">
        <slice>
            <filter src_ip="213.12.79.122" dst_ip="176.61.201.59" src_port="53"/>
            <filter src_ip="213.12.79.100" dst_ip="176.61.201.59" src_port="53"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336447"/>
    </anomaly>
    <anomaly type="suspicious" value="0.929905,1.227990,503,0 0 0 0 0 0 1 1 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="103.50.24.57" dst_ip="153.78.180.83" src_port="80"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336447"/>
    </anomaly>
    <anomaly type="suspicious" value="0.929905,1.227990,020,0 0 0 0 0 0 1 1 0 0 0 0,ntscICecrqICecrqdurmterp">
        <slice>
            <filter dst_ip="82.83.110.226"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336447"/>
    </anomaly>
    <anomaly type="suspicious" value="0.929905,1.227990,999,0 0 0 0 0 0 1 1 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="158.108.1.159" dst_ip="75.69.132.96" src_port="123"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336447"/>
    </anomaly>
    <anomaly type="suspicious" value="1.469730,1.532410,999,0 0 0 0 0 0 1 1 1 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="158.108.1.159" dst_ip="166.66.64.137" src_port="123"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336447"/>
    </anomaly>
    <anomaly type="suspicious" value="0.929905,1.227990,999,0 0 0 0 0 0 1 1 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="158.108.1.159" dst_ip="211.227.96.75" src_port="123"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336447"/>
    </anomaly>
    <anomaly type="suspicious" value="1.469730,1.532410,503,0 0 0 0 0 0 1 1 1 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="208.61.86.133" dst_port="80"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336447"/>
    </anomaly>
    <anomaly type="suspicious" value="0.912893,1.187100,999,0 0 0 1 0 0 1 1 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="176.61.201.58" src_port="53"/>
            <filter dst_ip="176.61.201.58" dst_port="53"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336509"/>
    </anomaly>
    <anomaly type="suspicious" value="1.469730,1.532410,503,0 0 0 0 0 0 1 1 1 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="153.78.5.4" dst_ip="209.101.139.55" dst_port="80"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336447"/>
    </anomaly>
    <anomaly type="suspicious" value="0.929905,1.227990,503,0 0 0 0 0 0 1 1 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="153.78.29.2" dst_ip="9.144.120.152" dst_port="80"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336447"/>
    </anomaly>
    <anomaly type="suspicious" value="0.929905,1.227990,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="176.61.155.58" dst_port="29905"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336447"/>
    </anomaly>
    <anomaly type="suspicious" value="0.929905,1.227990,503,0 0 0 0 0 0 1 1 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="221.241.189.111" dst_port="80"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336447"/>
    </anomaly>
    <anomaly type="suspicious" value="0.929905,1.227990,504,0 0 0 0 0 0 1 1 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="221.241.189.111" dst_port="443"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336447"/>
    </anomaly>
    <anomaly type="suspicious" value="0.929905,1.227990,503,0 0 0 0 0 0 1 1 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="158.108.137.99" dst_ip="221.241.188.142" dst_port="80"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336447"/>
    </anomaly>
    <anomaly type="suspicious" value="1.469730,1.532410,999,0 0 0 0 0 0 1 1 1 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="206.109.234.254" dst_ip="208.61.92.49" dst_port="110"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336447"/>
    </anomaly>
    <anomaly type="suspicious" value="1.469730,1.532410,999,0 0 0 0 0 0 1 1 1 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="206.109.234.254" dst_ip="208.61.93.109" dst_port="110"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336447"/>
    </anomaly>
    <anomaly type="suspicious" value="1.469730,1.532410,999,0 0 0 0 0 0 1 1 1 0 0 0,alphfl">
        <slice>
            <filter src_ip="206.109.234.254" dst_ip="208.61.93.35" dst_port="110"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336447"/>
    </anomaly>
    <anomaly type="suspicious" value="1.469730,1.532410,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.61.86.137" dst_port="52287"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336447"/>
    </anomaly>
    <anomaly type="suspicious" value="1.469730,1.532410,999,0 0 0 0 0 0 1 1 1 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="206.109.234.254" dst_ip="208.61.92.92" dst_port="110"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336447"/>
    </anomaly>
    <anomaly type="suspicious" value="0.986679,1.232490,503,0 0 0 1 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="158.128.18.146" dst_ip="82.129.80.188"/>
            <filter src_ip="158.128.18.146" dst_port="80"/>
            <filter dst_ip="82.129.80.188" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.193670,1.249630,999,1 0 0 1 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="88.63.200.199" src_port="993"/>
            <filter src_ip="88.63.200.199" src_port="995"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.937816,1.226000,503,1 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="118.226.176.69" dst_ip="178.249.84.155" src_port="80" dst_port="57367"/>
            <filter src_ip="94.55.94.54" dst_ip="178.249.84.155" src_port="80" dst_port="57337"/>
            <filter src_ip="221.193.28.183" dst_ip="178.249.84.155" src_port="80" dst_port="57442"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.002440,1.271930,503,0 0 0 0 0 0 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="208.61.87.179" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.561150,1.571480,503,0 0 0 0 0 0 0 0 0 1 1 1,alphflHTTP">
        <slice>
            <filter src_ip="99.248.121.251" dst_ip="158.117.151.160" src_port="80" dst_port="58897"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.002440,1.271930,503,0 0 0 0 0 0 0 0 0 1 1 0,ptmplaHTTP">
        <slice>
            <filter src_ip="141.3.18.215" dst_ip="87.13.174.186" src_port="80" dst_port="64809"/>
            <filter src_ip="141.3.18.215" dst_ip="87.13.174.186" src_port="80" dst_port="41622"/>
            <filter src_ip="141.3.18.215" dst_ip="207.166.69.219" src_port="80" dst_port="36752"/>
            <filter src_ip="141.3.18.215" dst_ip="207.166.69.219" src_port="80" dst_port="34138"/>
            <filter src_ip="141.3.18.215" dst_ip="67.232.98.236" src_port="80" dst_port="57078"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.002440,1.271930,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="184.31.89.180" dst_ip="209.113.16.77" src_port="80" dst_port="56953"/>
            <filter src_ip="184.31.89.180" dst_ip="209.113.16.77" src_port="80" dst_port="55572"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.561150,1.571480,503,0 0 0 0 0 0 0 0 0 1 1 1,alphflHTTP">
        <slice>
            <filter src_ip="50.178.84.112" dst_ip="209.126.113.57" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.002440,1.271930,503,0 0 0 0 0 0 0 0 0 1 1 0,ptmplaHTTP">
        <slice>
            <filter src_ip="82.129.80.9" dst_ip="153.78.252.74" src_port="80"/>
            <filter src_ip="82.129.80.9" dst_ip="178.249.106.209" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.002440,1.271930,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="153.78.180.140" dst_ip="116.152.68.65" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.002440,1.271930,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="178.249.174.208" dst_ip="105.40.167.157" src_port="15000" dst_port="12866"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.002440,1.271930,503,0 0 0 0 0 0 0 0 0 1 1 0,mptplaHTTP">
        <slice>
            <filter src_ip="158.112.118.10" dst_ip="207.166.69.187" src_port="80"/>
            <filter src_ip="158.112.170.5" dst_ip="207.166.69.187" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.002440,1.271930,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="209.126.113.57" dst_ip="50.178.90.146" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.002440,1.271930,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="141.3.18.169" dst_ip="87.13.168.31" src_port="80" dst_port="61429"/>
            <filter src_ip="141.3.18.169" dst_ip="87.13.168.31" src_port="80" dst_port="51701"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
