<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="suspicious" value="0.825208,1.1398,999,0 0 0 0 0 0 0 0 0 0 0 1,alphfl">
        <slice>
            <filter src_ip="203.74.129.170" dst_ip="98.192.69.39"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.850769,1.21866,999,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.74.147.231" dst_ip="221.25.134.223" dst_port="3478"/>
        </slice>
        <from usec="0" sec="1549083976"/>
        <to usec="0" sec="1549084325"/>
    </anomaly>
    <anomaly type="suspicious" value="0.850769,1.21866,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="173.34.48.222" dst_ip="163.35.29.211" src_port="443" dst_port="58957"/>
        </slice>
        <from usec="0" sec="1549083710"/>
        <to usec="0" sec="1549083711"/>
    </anomaly>
    <anomaly type="suspicious" value="0.850769,1.21866,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.35.210.84" dst_ip="23.99.22.216" src_port="57604" dst_port="443"/>
        </slice>
        <from usec="0" sec="1549084061"/>
        <to usec="0" sec="1549084062"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07637,1.33639,010,1 1 1 0 0 0 0 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="34.110.249.90" dst_ip="133.138.43.80" src_port="58183" dst_port="23"/>
        </slice>
        <from usec="0" sec="1549084081"/>
        <to usec="0" sec="1549084085"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19813,1.3682,504,1 1 0 0 0 0 1 1 1 1 0 0,mptpla">
        <slice>
            <filter src_ip="206.185.20.17" dst_ip="203.74.133.155" dst_port="443"/>
            <filter src_ip="172.72.152.88" dst_ip="203.74.133.155" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.96619,1.187,504,1 1 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.35.3.109" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07637,1.33639,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="139.37.61.2"/>
        </slice>
        <from usec="0" sec="1549084007"/>
        <to usec="0" sec="1549084008"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07637,1.33639,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="23.102.110.89"/>
        </slice>
        <from usec="0" sec="1549084205"/>
        <to usec="0" sec="1549084206"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07637,1.33639,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="23.96.67.90"/>
        </slice>
        <from usec="0" sec="1549083636"/>
        <to usec="0" sec="1549083637"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07637,1.33639,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="172.88.126.185"/>
        </slice>
        <from usec="0" sec="1549083682"/>
        <to usec="0" sec="1549083683"/>
    </anomaly>
    <anomaly type="suspicious" value="0.850769,1.21866,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="51.15.21.0" src_port="5155" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1549084260"/>
        <to usec="0" sec="1549084262"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07637,1.33639,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="104.252.75.44"/>
        </slice>
        <from usec="0" sec="1549083798"/>
        <to usec="0" sec="1549083799"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07637,1.33639,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="183.11.115.252" dst_port="445"/>
        </slice>
        <from usec="0" sec="1549084408"/>
        <to usec="0" sec="1549084409"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07637,1.33639,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="1.212.35.1" dst_port="23"/>
        </slice>
        <from usec="0" sec="1549084228"/>
        <to usec="0" sec="1549084296"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07637,1.33639,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="116.146.185.252" dst_port="445"/>
        </slice>
        <from usec="0" sec="1549083689"/>
        <to usec="0" sec="1549083691"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07637,1.33639,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="115.155.146.250" dst_port="445"/>
        </slice>
        <from usec="0" sec="1549084408"/>
        <to usec="0" sec="1549084409"/>
    </anomaly>
    <anomaly type="suspicious" value="0.850769,1.21866,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="180.6.98.230" dst_port="445"/>
        </slice>
        <from usec="0" sec="1549084479"/>
        <to usec="0" sec="1549084483"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07637,1.33639,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="126.21.180.159" dst_port="23"/>
        </slice>
        <from usec="0" sec="1549083707"/>
        <to usec="0" sec="1549083758"/>
    </anomaly>
    <anomaly type="suspicious" value="0.850769,1.21866,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="222.102.173.121" dst_port="445"/>
        </slice>
        <from usec="0" sec="1549084290"/>
        <to usec="0" sec="1549084296"/>
    </anomaly>
    <anomaly type="suspicious" value="0.850769,1.21866,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.62.71.26" dst_port="23"/>
        </slice>
        <from usec="0" sec="1549083802"/>
        <to usec="0" sec="1549083824"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07637,1.33639,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="37.243.254.188"/>
        </slice>
        <from usec="0" sec="1549083783"/>
        <to usec="0" sec="1549083784"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07637,1.33639,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="125.233.242.254" dst_port="23"/>
        </slice>
        <from usec="0" sec="1549084222"/>
        <to usec="0" sec="1549084273"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07637,1.33639,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="51.15.238.92" dst_port="23"/>
        </slice>
        <from usec="0" sec="1549084190"/>
        <to usec="0" sec="1549084241"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07637,1.33639,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="49.151.169.214" dst_port="445"/>
        </slice>
        <from usec="0" sec="1549083637"/>
        <to usec="0" sec="1549083639"/>
    </anomaly>
    <anomaly type="suspicious" value="0.850769,1.21866,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="193.144.56.212" dst_port="445"/>
        </slice>
        <from usec="0" sec="1549083938"/>
        <to usec="0" sec="1549083941"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07637,1.33639,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="125.236.122.52" dst_port="23"/>
        </slice>
        <from usec="0" sec="1549084418"/>
        <to usec="0" sec="1549084469"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07637,1.33639,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="111.201.229.187" dst_port="23"/>
        </slice>
        <from usec="0" sec="1549083877"/>
        <to usec="0" sec="1549083928"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07637,1.33639,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="139.76.233.203" dst_port="23"/>
        </slice>
        <from usec="0" sec="1549084053"/>
        <to usec="0" sec="1549084092"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07637,1.33639,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="133.4.211.88" dst_port="445"/>
        </slice>
        <from usec="0" sec="1549084202"/>
        <to usec="0" sec="1549084203"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07637,1.33639,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="23.236.126.147"/>
        </slice>
        <from usec="0" sec="1549084435"/>
        <to usec="0" sec="1549084436"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07637,1.33639,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="45.178.74.82"/>
        </slice>
        <from usec="0" sec="1549083751"/>
        <to usec="0" sec="1549083752"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07637,1.33639,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="176.66.116.126"/>
        </slice>
        <from usec="0" sec="1549084086"/>
        <to usec="0" sec="1549084287"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07637,1.33639,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="111.166.211.234"/>
        </slice>
        <from usec="0" sec="1549084084"/>
        <to usec="0" sec="1549084085"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07637,1.33639,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="50.180.15.198"/>
        </slice>
        <from usec="0" sec="1549084099"/>
        <to usec="0" sec="1549084100"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07637,1.33639,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="139.37.117.41"/>
        </slice>
        <from usec="0" sec="1549083730"/>
        <to usec="0" sec="1549084314"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07637,1.33639,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="23.67.255.156"/>
        </slice>
        <from usec="0" sec="1549084012"/>
        <to usec="0" sec="1549084013"/>
    </anomaly>
    <anomaly type="suspicious" value="0.850769,1.21866,004,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="104.252.114.46" src_port="445"/>
        </slice>
        <from usec="0" sec="1549083911"/>
        <to usec="0" sec="1549083913"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07637,1.33639,504,1 1 1 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="163.35.3.238" dst_ip="40.172.123.63" dst_port="443"/>
        </slice>
        <from usec="0" sec="1549083637"/>
        <to usec="0" sec="1549084346"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07637,1.33639,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="31.120.95.200"/>
        </slice>
        <from usec="0" sec="1549084407"/>
        <to usec="0" sec="1549084409"/>
    </anomaly>
    <anomaly type="suspicious" value="0.929381,1.2634,020,1 0 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="128.241.38.145"/>
        </slice>
        <from usec="0" sec="1549084385"/>
        <to usec="0" sec="1549084386"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07637,1.33639,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="192.218.133.81"/>
        </slice>
        <from usec="0" sec="1549083622"/>
        <to usec="0" sec="1549083624"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07945,1.31193,502,1 1 1 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="58.181.143.11" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07637,1.33639,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="118.167.141.23" dst_port="23"/>
        </slice>
        <from usec="0" sec="1549084316"/>
        <to usec="0" sec="1549084367"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07637,1.33639,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="222.58.12.222" dst_port="11211"/>
        </slice>
        <from usec="0" sec="1549084426"/>
        <to usec="0" sec="1549084427"/>
    </anomaly>
    <anomaly type="suspicious" value="1.22176,1.32776,010,1 1 1 0 0 0 1 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="122.162.23.96"/>
            <filter src_ip="193.39.34.35" src_port="46590"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.26324,1.29407,504,0 0 0 0 0 0 1 1 1 1 1 1,mptmp">
        <slice>
            <filter dst_ip="202.249.205.204" src_port="443"/>
            <filter dst_ip="202.249.205.204" src_port="53"/>
            <filter dst_ip="203.74.147.231" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08788,1.16264,010,1 0 0 0 0 0 1 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="185.62.70.12" src_port="50616"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.36516,1.49584,999,1 1 1 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.74.135.117" dst_port="123"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549084468"/>
    </anomaly>
    <anomaly type="suspicious" value="0.982685,1.29283,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.249.233.238" src_port="53"/>
            <filter dst_ip="202.249.233.238" dst_port="53"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.982685,1.29283,999,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.244.44.137" src_port="53"/>
            <filter dst_ip="202.244.44.137" dst_port="53"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.812514,1.20928,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.35.214.185" src_port="53"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.982685,1.29283,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.35.214.189" src_port="53"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.982685,1.29283,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.35.214.191" src_port="53"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.982685,1.29283,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.35.214.156" src_port="53"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.982685,1.29283,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.35.214.157" src_port="53"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.982685,1.29283,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.35.214.158" src_port="53"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.986055,1.26753,010,0 0 0 0 0 0 1 1 1 1 0 0,mptp">
        <slice>
            <filter dst_ip="150.49.15.90" dst_port="54748"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.986055,1.26753,010,0 0 0 0 0 0 1 1 1 1 0 0,mptp">
        <slice>
            <filter dst_ip="150.49.15.69" dst_port="54756"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.982685,1.29283,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.35.46.72" dst_port="6881"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="suspicious" value="1.26324,1.29407,504,0 0 0 0 0 0 1 1 1 1 1 1,mptmp">
        <slice>
            <filter src_ip="182.17.255.140" src_port="443"/>
            <filter dst_ip="163.35.129.170" src_port="443"/>
            <filter dst_ip="163.35.129.170" src_port="80"/>
            <filter dst_ip="163.35.130.109" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.812514,1.20928,999,0 0 0 0 0 0 1 1 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.74.129.190" dst_port="6000"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.982685,1.29283,010,0 0 0 0 0 0 1 1 1 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="125.80.94.151" dst_port="5901"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.982685,1.29283,999,0 0 0 0 0 0 1 1 1 0 0 0,salphfl">
        <slice>
            <filter src_ip="216.185.13.231" dst_ip="163.35.180.13" dst_port="53"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.982685,1.29283,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.74.130.33" dst_port="53"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.982685,1.29283,999,0 0 0 0 0 0 1 1 1 0 0 0,mptpla">
        <slice>
            <filter src_ip="72.207.174.68" dst_ip="203.74.130.32" dst_port="53"/>
            <filter src_ip="61.229.126.41" dst_ip="203.74.130.32" dst_port="53"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.812514,1.20928,010,0 0 0 0 0 0 1 1 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="211.235.10.119" src_port="32767" dst_port="8545"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.812514,1.20928,010,0 0 0 0 0 0 1 1 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="126.100.59.161" dst_port="2051"/>
        </slice>
        <from usec="0" sec="1549083870"/>
        <to usec="0" sec="1549083916"/>
    </anomaly>
    <anomaly type="suspicious" value="0.812514,1.20928,010,0 0 0 0 0 0 1 1 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="193.64.43.11" src_port="43976" dst_port="139"/>
        </slice>
        <from usec="0" sec="1549083960"/>
        <to usec="0" sec="1549084006"/>
    </anomaly>
    <anomaly type="suspicious" value="0.982685,1.29283,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="68.75.64.192" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.982685,1.29283,011,0 0 0 0 0 0 1 1 1 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="185.62.70.12" dst_port="50616"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.982685,1.29283,999,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.74.143.32" src_port="4001" dst_port="4001"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.982685,1.29283,504,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.35.128.219" src_port="443"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="suspicious" value="1.26324,1.29407,504,0 0 0 0 0 0 1 1 1 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.35.2.42"/>
            <filter src_ip="117.10.231.160" src_port="443"/>
            <filter dst_ip="163.35.128.240" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.982685,1.29283,010,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.16.190.202" dst_port="50348"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.982685,1.29283,504,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.35.2.62" src_port="443"/>
            <filter src_ip="8.233.231.20" dst_ip="163.35.2.62" src_port="53"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.982685,1.29283,503,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.35.3.252" src_port="80"/>
            <filter dst_ip="163.35.3.252" src_port="443"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.982685,1.29283,504,0 0 0 0 0 0 1 1 1 0 0 0,alphfl">
        <slice>
            <filter src_ip="61.177.112.212" dst_ip="52.81.150.96" dst_port="443"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.982685,1.29283,504,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.35.88.94" src_port="443"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.982685,1.29283,010,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="79.36.233.204" dst_port="50348"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.986055,1.26753,504,0 0 0 0 0 0 1 1 1 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.35.3.192" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.982685,1.29283,504,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="52.81.146.9" dst_port="443"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.982685,1.29283,010,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.49.14.98" dst_port="54748"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.982685,1.29283,010,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.49.14.117" dst_port="54756"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.982685,1.29283,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.74.139.33" dst_port="53"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.982685,1.29283,999,0 0 0 0 0 0 1 1 1 0 0 0,mptpla">
        <slice>
            <filter src_ip="103.188.227.47" dst_ip="163.35.85.72" dst_port="53"/>
            <filter src_ip="203.74.142.53" dst_ip="163.35.85.72" dst_port="53"/>
            <filter src_ip="203.74.142.52" dst_ip="163.35.85.72" dst_port="53"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.982685,1.29283,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.74.139.62" dst_port="53"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.982685,1.29283,503,0 0 0 0 0 0 1 1 1 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.35.86.42" dst_port="80"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.982685,1.29283,999,0 0 0 0 0 0 1 1 1 0 0 0,malphfl">
        <slice>
            <filter src_ip="17.140.241.13" dst_ip="203.74.135.227" dst_port="53"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="suspicious" value="1.06803,1.297,503,1 0 0 0 0 0 1 1 1 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.35.87.212" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.982685,1.29283,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.74.140.95" dst_port="53"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.982685,1.29283,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="68.75.64.192" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1549083960"/>
        <to usec="0" sec="1549084006"/>
    </anomaly>
    <anomaly type="suspicious" value="1.26324,1.29407,502,0 0 0 0 0 0 1 1 1 1 1 1,mptmp">
        <slice>
            <filter src_ip="133.4.12.200" src_port="6881"/>
            <filter dst_ip="58.181.143.31" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.982685,1.29283,011,0 0 0 0 0 0 1 1 1 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="193.39.34.35" dst_port="46590"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.986055,1.26753,502,0 0 0 0 0 0 1 1 1 1 0 0,mptp">
        <slice>
            <filter dst_ip="58.181.143.6" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08415,1.26304,999,0 0 0 0 0 0 1 1 1 1 1 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="103.188.227.47" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.986055,1.26753,504,0 0 0 0 0 0 1 1 1 1 0 0,mptp">
        <slice>
            <filter dst_ip="162.190.34.254" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08415,1.26304,504,0 0 0 0 0 0 1 1 1 1 1 0,alphfl">
        <slice>
            <filter src_ip="61.177.112.212" dst_ip="40.154.193.193" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.982685,1.29283,504,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.74.136.217" src_port="443"/>
            <filter dst_ip="203.74.136.217" src_port="80"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549084366"/>
    </anomaly>
    <anomaly type="suspicious" value="0.982685,1.29283,504,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.74.136.68" src_port="443"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.943761,1.1059,999,0 0 0 0 0 0 0 0 0 1 1 1,ptmpla">
        <slice>
            <filter src_ip="203.74.129.154" src_port="3010"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.43992,1.47017,999,1 1 1 0 0 0 1 1 1 1 1 0,mptmp">
        <slice>
            <filter src_ip="78.111.143.209" src_port="42317"/>
            <filter src_ip="178.108.203.250" src_port="5153" dst_port="5060"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08415,1.26304,010,0 0 0 0 0 0 1 1 1 1 1 0,mptp">
        <slice>
            <filter dst_ip="133.16.188.122" dst_port="50356"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.02856,1.20918,010,1 1 0 0 0 0 1 0 0 1 1 0,ntscSYN139445">
        <slice>
            <filter src_ip="104.252.114.46" dst_port="445"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.850769,1.21866,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="144.38.251.55" dst_ip="163.35.242.2" dst_port="25"/>
        </slice>
        <from usec="0" sec="1549083821"/>
        <to usec="0" sec="1549083824"/>
    </anomaly>
    <anomaly type="suspicious" value="0.943761,1.1059,504,0 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="210.118.25.14" dst_ip="163.35.128.191" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.943761,1.1059,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.35.1.11" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.00752,1.12967,504,0 0 0 0 0 0 1 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="202.244.44.96" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.13561,1.33203,010,1 1 1 0 0 0 1 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="185.72.7.51" src_port="44290"/>
            <filter src_ip="182.125.242.221" dst_port="445"/>
            <filter src_ip="163.95.167.141" src_port="5101" dst_port="5060"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.943761,1.1059,999,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="203.74.129.183"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.943761,1.1059,503,0 0 0 0 0 0 0 0 0 1 1 1,ptmpHTTP">
        <slice>
            <filter src_ip="203.74.133.147" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.943761,1.1059,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.35.128.61" src_port="443"/>
            <filter dst_ip="163.35.128.61" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.943761,1.1059,999,0 0 0 0 0 0 0 0 0 1 1 1,mptpla">
        <slice>
            <filter dst_ip="203.74.129.154" dst_port="3010"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.943761,1.1059,504,0 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="144.143.94.218" dst_ip="163.35.3.251" src_port="443" dst_port="64212"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.943761,1.1059,504,0 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="17.250.119.40" dst_ip="163.35.3.117" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.33741,1.33759,504,1 1 1 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="61.177.112.212" dst_port="443"/>
            <filter src_ip="202.249.205.204" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.943761,1.1059,999,0 0 0 0 0 0 0 0 0 1 1 1,ptmpla">
        <slice>
            <filter src_ip="210.99.229.34" dst_ip="163.35.79.138" src_port="995"/>
            <filter src_ip="210.99.229.34" dst_ip="163.35.3.251" src_port="995"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.943761,1.1059,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="104.78.186.204" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.943761,1.1059,010,0 0 0 0 0 0 0 0 0 1 1 1,sntscSYN">
        <slice>
            <filter src_ip="99.140.137.221" dst_port="445"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.943761,1.1059,504,0 0 0 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="31.237.137.52" src_port="443"/>
            <filter dst_ip="203.74.143.14" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.943761,1.1059,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.35.28.152" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.943761,1.1059,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.35.1.78" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.943761,1.1059,999,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="203.74.129.170"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.26324,1.29407,504,0 0 0 0 0 0 1 1 1 1 1 1,mptp">
        <slice>
            <filter dst_ip="202.244.44.73" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.943761,1.1059,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.35.3.206" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.943761,1.1059,504,0 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="17.250.118.173" dst_ip="163.35.3.117" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.943761,1.1059,504,0 0 0 0 0 0 0 0 0 1 1 1,ptmpla">
        <slice>
            <filter src_ip="173.34.51.137" dst_ip="163.35.3.5" src_port="443"/>
            <filter src_ip="173.34.51.137" dst_ip="163.35.3.45" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.943761,1.1059,503,0 0 0 0 0 0 0 0 0 1 1 1,alphflHTTP">
        <slice>
            <filter src_ip="202.47.3.95" dst_ip="163.35.2.77" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.829218,1.11102,504,0 0 0 0 0 0 0 0 0 1 0 1,mptp">
        <slice>
            <filter dst_ip="163.35.28.245" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.943761,1.1059,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.35.28.152" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.921607,1.17249,504,1 0 0 0 0 0 0 0 0 0 0 1,mptp">
        <slice>
            <filter dst_ip="163.35.2.190" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.943761,1.1059,999,0 0 0 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="74.124.204.147" src_port="993"/>
            <filter dst_ip="163.35.62.251" src_port="443"/>
            <filter src_ip="126.122.95.69" dst_ip="163.35.62.251" src_port="52443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.9707,1.63303,999,1 1 1 1 0 0 0 0 0 1 1 1,ipv4gretun">
        <slice>
            <filter src_ip="203.74.138.235" dst_ip="163.35.2.145"/>
            <filter src_ip="203.74.138.235" dst_ip="204.192.104.93"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.76442,2.0505,504,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.35.2.190" src_port="443"/>
            <filter dst_ip="163.35.2.18" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.43492,1.39282,503,1 1 0 0 0 0 1 1 1 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="203.74.133.147" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.78683,2.06342,010,0 0 0 1 1 1 1 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="185.62.70.12" src_port="50616"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.8081,2.17452,999,1 0 0 1 1 1 1 1 1 0 0 0,mptmp">
        <slice>
            <filter src_ip="42.179.196.62" dst_ip="203.74.139.15"/>
            <filter src_ip="42.179.196.62" dst_ip="203.74.138.142"/>
            <filter src_ip="42.179.196.62" dst_port="123"/>
            <filter src_ip="103.188.210.120" dst_ip="203.74.139.15" dst_port="123"/>
            <filter src_ip="103.188.210.120" dst_ip="203.74.138.142" dst_port="123"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549084428"/>
    </anomaly>
    <anomaly type="anomalous" value="2.76442,2.0505,504,0 0 0 1 1 1 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="117.10.227.102" dst_ip="163.35.26.93" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.76442,2.0505,504,0 0 0 1 1 1 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.35.72.73" src_port="80"/>
            <filter dst_ip="163.35.72.73" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.79471,2.06885,999,1 0 0 1 1 1 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="203.74.129.170"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.38314,1.35731,010,1 1 1 0 0 0 1 0 0 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="120.140.244.120" dst_port="7001"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.76442,2.0505,999,0 0 0 1 1 1 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="203.74.129.183"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.76442,2.0505,504,0 0 0 1 1 1 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="31.237.137.1" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.94354,2.19632,010,1 1 1 1 1 1 1 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="193.39.34.35" src_port="46590"/>
            <filter src_ip="206.65.178.159" src_port="46485" dst_port="5900"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
