<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="notice" value="0.67399,1.16501,502,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.74.39.89" dst_ip="13.200.165.90" src_port="22" proto="tcp"/>
        </slice>
        <from usec="0" sec="1546318802"/>
        <to usec="0" sec="1546319652"/>
    </anomaly>
    <anomaly type="notice" value="0.67399,1.16501,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.30.228.176" dst_ip="23.253.14.220" src_port="54342" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1546319531"/>
        <to usec="0" sec="1546319660"/>
    </anomaly>
    <anomaly type="notice" value="0.67399,1.16501,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.30.86.174" dst_ip="151.22.209.146" src_port="62793" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1546319677"/>
        <to usec="0" sec="1546319678"/>
    </anomaly>
    <anomaly type="notice" value="0.67399,1.16501,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.6.209.131" dst_ip="18.193.66.129" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1546319344"/>
        <to usec="0" sec="1546319346"/>
    </anomaly>
    <anomaly type="notice" value="0.67399,1.16501,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="46.234.108.120" dst_ip="150.43.40.4" src_port="38328" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1546319639"/>
        <to usec="0" sec="1546319640"/>
    </anomaly>
    <anomaly type="notice" value="0.67399,1.16501,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="46.234.108.97" dst_ip="150.43.40.4" src_port="54114" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1546318866"/>
        <to usec="0" sec="1546318867"/>
    </anomaly>
    <anomaly type="notice" value="0.67399,1.16501,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.115.177.21" dst_ip="205.70.134.163" src_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1546319487"/>
        <to usec="0" sec="1546319491"/>
    </anomaly>
    <anomaly type="notice" value="0.67399,1.16501,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.18.127.98" dst_ip="203.74.33.228" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1546319110"/>
        <to usec="0" sec="1546319111"/>
    </anomaly>
    <anomaly type="notice" value="0.67399,1.16501,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="218.237.108.235" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1546319556"/>
        <to usec="0" sec="1546319558"/>
    </anomaly>
    <anomaly type="notice" value="0.67399,1.16501,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="198.107.81.71"/>
        </slice>
        <from usec="0" sec="1546319661"/>
        <to usec="0" sec="1546319662"/>
    </anomaly>
    <anomaly type="notice" value="0.67399,1.16501,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.74.33.228"/>
        </slice>
        <from usec="0" sec="1546319140"/>
        <to usec="0" sec="1546319142"/>
    </anomaly>
    <anomaly type="notice" value="0.67399,1.16501,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="111.227.35.157" src_port="16923" proto="tcp"/>
        </slice>
        <from usec="0" sec="1546319047"/>
        <to usec="0" sec="1546319065"/>
    </anomaly>
    <anomaly type="notice" value="0.67399,1.16501,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="115.28.250.255"/>
        </slice>
        <from usec="0" sec="1546319169"/>
        <to usec="0" sec="1546319170"/>
    </anomaly>
    <anomaly type="notice" value="0.67399,1.16501,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="183.78.76.44"/>
        </slice>
        <from usec="0" sec="1546319632"/>
        <to usec="0" sec="1546319634"/>
    </anomaly>
    <anomaly type="notice" value="0.67399,1.16501,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.30.84.218"/>
        </slice>
        <from usec="0" sec="1546319100"/>
        <to usec="0" sec="1546319576"/>
    </anomaly>
    <anomaly type="notice" value="0.67399,1.16501,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.30.84.183"/>
        </slice>
        <from usec="0" sec="1546319638"/>
        <to usec="0" sec="1546319639"/>
    </anomaly>
    <anomaly type="notice" value="0.67399,1.16501,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="51.240.6.178"/>
        </slice>
        <from usec="0" sec="1546319600"/>
        <to usec="0" sec="1546319602"/>
    </anomaly>
    <anomaly type="notice" value="0.67399,1.16501,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.170.179.9"/>
        </slice>
        <from usec="0" sec="1546319313"/>
        <to usec="0" sec="1546319336"/>
    </anomaly>
    <anomaly type="notice" value="0.67399,1.16501,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="60.28.30.52"/>
        </slice>
        <from usec="0" sec="1546319448"/>
        <to usec="0" sec="1546319450"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="176.141.4.233"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="176.141.4.234"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="176.141.4.210" dst_port="52869"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.72.207.27"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="5.95.176.246"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="176.141.4.250" src_port="47948" dst_port="33018"/>
            <filter src_ip="176.141.4.250" src_port="47948" dst_port="33017"/>
            <filter src_ip="176.141.4.250" src_port="47948" dst_port="33016"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="176.141.4.249" src_port="54907" dst_port="63731"/>
            <filter src_ip="176.141.4.249" src_port="54907" dst_port="63730"/>
            <filter src_ip="176.141.4.249" src_port="54907" dst_port="63732"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="176.141.4.213"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.72.207.36"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="176.141.4.214" src_port="55025" dst_port="32910"/>
            <filter src_ip="176.141.4.214" src_port="55025" dst_port="32908"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="176.141.4.206" src_port="49508" dst_port="35663"/>
            <filter src_ip="176.141.4.206" src_port="49508" dst_port="35664"/>
            <filter src_ip="176.141.4.206" src_port="49508" dst_port="35662"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.72.207.50"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="5.95.70.51" src_port="43631"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="5.95.70.54" src_port="43891"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="5.95.70.60" src_port="44183"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.80.44.67"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="51.96.38.192"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="51.96.38.198" src_port="56115"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="51.96.38.227"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.72.207.99"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="51.96.38.226" src_port="53937"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.72.207.103"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="51.96.38.235" src_port="53146"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="51.96.38.243" src_port="53561"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="51.96.38.244" src_port="53618"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="80.235.167.116"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="51.96.38.249" src_port="55830"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="51.96.38.111" src_port="55878"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="51.96.38.98" src_port="55974"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="185.16.47.111" src_port="56955"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="104.199.177.145"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.48.34.86" dst_port="52869"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.80.47.178" src_port="55742"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="68.174.29.186"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="91.173.96.139" dst_port="445"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="5.95.176.235" dst_port="5901"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="5.95.176.235" dst_port="5911"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="5.95.176.235" dst_port="5912"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="5.95.176.235" dst_port="5914"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="176.141.4.231" dst_port="13921"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="176.141.4.231" dst_port="13923"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="176.141.4.231" dst_port="14011"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="176.141.4.231" dst_port="14013"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.72.206.122" dst_port="6265"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.72.206.122" dst_port="6266"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="185.72.206.122" dst_port="6267"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="116.108.59.93" dst_port="554"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="185.72.206.86" dst_port="28990"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.72.206.86" dst_port="28991"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.72.206.86" dst_port="28992"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.8.135.220" dst_port="3128"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="176.141.4.204" dst_port="13849"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="176.141.4.204" dst_port="13850"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="176.141.4.204" dst_port="13851"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="176.141.4.201" dst_port="5503"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="176.141.4.201" dst_port="5505"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="176.141.4.201" dst_port="5511"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="176.141.4.201" dst_port="5525"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="176.141.4.201" dst_port="5541"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="176.141.4.192" dst_port="1496"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="176.141.4.192" dst_port="1501"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="176.141.4.192" dst_port="1509"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="176.141.4.192" dst_port="1512"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="176.141.4.192" dst_port="1513"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="176.141.4.192" dst_port="1515"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="176.141.4.192" dst_port="1517"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="176.141.4.192" dst_port="1518"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="176.141.4.192" dst_port="1520"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="85.97.20.58" dst_port="7058"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="85.97.20.58" dst_port="7066"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="85.97.20.58" dst_port="7068"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="85.97.20.58" dst_port="7072"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="85.97.20.58" dst_port="7074"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="85.97.20.58" dst_port="7075"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="85.97.20.58" dst_port="7085"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="85.97.20.58" dst_port="7096"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.72.207.62" src_port="43991" dst_port="6166"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.72.207.62" dst_port="6167"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.72.207.62" src_port="43991" dst_port="6168"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.72.207.82" src_port="40747" dst_port="29650"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.72.207.82" dst_port="29651"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.72.207.82" src_port="40747" dst_port="29652"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="198.214.165.20" src_port="15300"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.89.173.140" dst_port="1"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.89.173.140" dst_port="9593"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="185.18.10.101" dst_port="4004"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="185.18.10.101" dst_port="4007"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.18.10.101" dst_port="4111"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.18.10.101" dst_port="4112"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.18.10.101" dst_port="4338"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.18.10.101" dst_port="4449"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="185.18.10.101" dst_port="4478"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="185.18.10.101" dst_port="4997"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.18.10.87" dst_port="9009"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.18.10.87" src_port="51327" dst_port="9055"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.18.10.87" dst_port="9221"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="185.18.10.87" dst_port="9228"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="185.18.10.87" src_port="51327" dst_port="9666"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="185.18.10.87" dst_port="9744"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.18.10.87" dst_port="9992"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="208.144.2.215" src_port="58737" dst_port="23"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="46.29.150.224" src_port="28059" dst_port="23"/>
        </slice>
        <from usec="0" sec="1546318800"/>
        <to usec="0" sec="1546318846"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="89.56.23.252" dst_port="1080"/>
        </slice>
        <from usec="0" sec="1546318935"/>
        <to usec="0" sec="1546318981"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="142.162.27.85"/>
        </slice>
        <from usec="0" sec="1546319115"/>
        <to usec="0" sec="1546319161"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.74.33.235" dst_port="53"/>
        </slice>
        <from usec="0" sec="1546319115"/>
        <to usec="0" sec="1546319161"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.74.35.98"/>
        </slice>
        <from usec="0" sec="1546319430"/>
        <to usec="0" sec="1546319476"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="133.138.33.154"/>
        </slice>
        <from usec="0" sec="1546319430"/>
        <to usec="0" sec="1546319476"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.74.42.51"/>
        </slice>
        <from usec="0" sec="1546319430"/>
        <to usec="0" sec="1546319476"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="176.141.4.250" src_port="47948" dst_port="33017"/>
            <filter src_ip="176.141.4.250" src_port="47948" dst_port="33016"/>
            <filter src_ip="176.141.4.250" src_port="47948" dst_port="33018"/>
        </slice>
        <from usec="0" sec="1546319565"/>
        <to usec="0" sec="1546319611"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="68.174.78.196"/>
        </slice>
        <from usec="0" sec="1546319565"/>
        <to usec="0" sec="1546319611"/>
    </anomaly>
    <anomaly type="notice" value="0.4855,1.16213,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="125.207.174.54" dst_port="102"/>
        </slice>
        <from usec="0" sec="1546319565"/>
        <to usec="0" sec="1546319611"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="139.187.111.11"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="139.187.122.157" dst_port="8000"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,010,0 0 0 0 0 0 0 0 0 1 0 0,ntscSYN">
        <slice>
            <filter src_ip="142.162.201.98"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.730449,1.12955,504,1 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="163.30.85.45" dst_ip="212.187.133.207"/>
            <filter src_ip="163.30.85.45" dst_port="443"/>
            <filter src_ip="163.30.85.45" dst_port="80"/>
            <filter dst_ip="212.187.133.207" dst_port="443"/>
            <filter dst_ip="212.187.133.207" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.30.26.228"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="163.30.224.175"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="163.30.225.17"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="171.216.159.249"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="173.10.76.222"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="179.228.165.196"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="188.168.126.152" dst_port="137"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="196.40.47.78" src_port="63728" dst_port="8088"/>
            <filter src_ip="196.40.47.78" src_port="60866" dst_port="5800"/>
            <filter src_ip="196.40.47.78" src_port="49394" dst_port="5909"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="196.40.47.144"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,020,0 0 0 0 0 0 0 0 0 1 0 0,ttl_error">
        <slice>
            <filter src_ip="202.6.200.195"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,502,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="203.74.39.37" dst_ip="122.252.101.48" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="206.189.111.57" dst_port="50070"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="52.193.222.138"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="77.29.185.119" dst_port="8008"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="80.20.168.86"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="91.4.96.22" src_port="44167"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="94.132.157.211"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="111.66.169.140"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,502,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="112.170.239.56"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="121.73.69.102"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="203.74.44.197" dst_ip="4.227.21.233" src_port="53"/>
            <filter src_ip="203.74.44.197" dst_ip="213.239.33.121" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="121.242.63.44"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,502,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="122.252.101.13"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="123.61.71.32"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,502,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="149.144.207.183"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,504,0 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="172.25.52.131" dst_ip="163.30.214.208"/>
            <filter src_ip="172.25.52.131" src_port="443"/>
            <filter src_ip="172.25.52.131" src_port="80"/>
            <filter src_ip="172.25.54.33" dst_ip="163.30.214.208" src_port="443"/>
            <filter src_ip="172.25.54.33" dst_ip="163.30.214.208" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,010,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.30.195.18" src_port="80"/>
            <filter dst_ip="163.30.195.18" dst_port="3128"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.30.224.175" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="198.212.132.214" dst_ip="163.30.212.232" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="173.10.76.222"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,011,0 0 0 0 0 0 0 0 0 1 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="176.141.4.250" src_port="33016" dst_port="47948"/>
            <filter dst_ip="176.141.4.250" src_port="33017" dst_port="47948"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,011,0 0 0 0 0 0 0 0 0 1 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="176.141.4.231" src_port="13923" dst_port="48561"/>
            <filter dst_ip="176.141.4.231" src_port="14012" dst_port="48650"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,502,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="179.228.38.208"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,011,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="104.23.6.53" dst_ip="203.74.46.51"/>
            <filter src_ip="104.23.6.53" dst_port="80"/>
            <filter dst_ip="203.74.46.51" dst_port="80"/>
            <filter dst_ip="203.74.46.51"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,011,0 0 0 0 0 0 0 0 0 1 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="185.72.207.50" src_port="41763" dst_port="44048"/>
            <filter dst_ip="185.72.207.50" src_port="41761" dst_port="44048"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,011,0 0 0 0 0 0 0 0 0 1 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="185.8.135.220" src_port="3128"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="194.24.151.62"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,020,0 0 0 0 0 0 0 0 0 1 0 0,icmp_error">
        <slice>
            <filter dst_ip="195.13.41.137"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="202.37.109.129"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,020,0 0 0 0 0 0 0 0 0 1 0 0,ntscICecrqICecrqdurmterp">
        <slice>
            <filter dst_ip="203.74.35.106"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="209.152.140.55"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="27.25.96.111"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.730449,1.12955,504,1 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="163.30.86.226" dst_port="443"/>
            <filter dst_ip="40.215.184.64" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="42.116.255.127"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,020,0 0 0 0 0 0 0 0 0 1 0 0,icmp_error">
        <slice>
            <filter dst_ip="45.71.157.32"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,011,0 0 0 0 0 0 0 0 0 1 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="51.96.38.253" dst_port="53796"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,011,0 0 0 0 0 0 0 0 0 1 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="51.96.38.110" dst_port="55920"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,011,0 0 0 0 0 0 0 0 0 1 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="5.95.70.51" dst_port="43631"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="52.174.226.16"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531283,1.09849,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="69.199.79.114"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
