<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="notice" value="0.469945,1.05396,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.119.3.5" dst_ip="149.244.176.204" src_port="21178" dst_port="873" proto="tcp"/>
        </slice>
        <from usec="0" sec="1551589818"/>
        <to usec="0" sec="1551589830"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="117.32.237.34" dst_ip="163.205.131.121" src_port="443" dst_port="55493" proto="tcp"/>
        </slice>
        <from usec="0" sec="1551589839"/>
        <to usec="0" sec="1551589841"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.243.100.171" dst_ip="163.205.130.240" src_port="443" dst_port="34017" proto="tcp"/>
        </slice>
        <from usec="0" sec="1551589533"/>
        <to usec="0" sec="1551589553"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.205.128.0" dst_ip="182.128.180.117" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1551589593"/>
        <to usec="0" sec="1551589595"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="163.205.130.204" dst_ip="36.210.146.247" src_port="25" dst_port="59446" proto="tcp"/>
        </slice>
        <from usec="0" sec="1551589553"/>
        <to usec="0" sec="1551589554"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="45.142.164.8" dst_ip="163.205.131.121" src_port="443" dst_port="39599" proto="tcp"/>
        </slice>
        <from usec="0" sec="1551589524"/>
        <to usec="0" sec="1551589552"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="38.81.222.13" dst_ip="163.205.244.24" src_port="80" dst_port="53436" proto="tcp"/>
        </slice>
        <from usec="0" sec="1551589529"/>
        <to usec="0" sec="1551589542"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="139.190.235.47" dst_ip="203.243.111.28" src_port="4001" dst_port="4001" proto="tcp"/>
        </slice>
        <from usec="0" sec="1551589530"/>
        <to usec="0" sec="1551589532"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.205.203.223" dst_ip="54.168.81.241" src_port="48683" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1551589858"/>
        <to usec="0" sec="1551589869"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="157.102.27.219" dst_ip="133.4.64.79" src_port="80" dst_port="35234" proto="tcp"/>
        </slice>
        <from usec="0" sec="1551589761"/>
        <to usec="0" sec="1551589797"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="74.138.12.42" dst_ip="202.129.73.100" src_port="25" dst_port="56634" proto="tcp"/>
        </slice>
        <from usec="0" sec="1551589551"/>
        <to usec="0" sec="1551589768"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="172.70.93.26" dst_ip="163.205.131.210" src_port="443" dst_port="65430" proto="udp"/>
        </slice>
        <from usec="0" sec="1551589521"/>
        <to usec="0" sec="1551589530"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="183.86.26.193" dst_ip="163.205.60.54" src_port="443" dst_port="62028" proto="tcp"/>
        </slice>
        <from usec="0" sec="1551589521"/>
        <to usec="0" sec="1551589522"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.205.128.39"/>
        </slice>
        <from usec="0" sec="1551589659"/>
        <to usec="0" sec="1551589681"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="173.195.65.43" dst_ip="163.205.128.53" src_port="443" dst_port="59577" proto="tcp"/>
        </slice>
        <from usec="0" sec="1551589549"/>
        <to usec="0" sec="1551589687"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.205.130.240"/>
        </slice>
        <from usec="0" sec="1551589309"/>
        <to usec="0" sec="1551589311"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.205.131.5"/>
        </slice>
        <from usec="0" sec="1551589661"/>
        <to usec="0" sec="1551589700"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.172.116.189" dst_ip="163.205.195.168" src_port="443" dst_port="59935" proto="tcp"/>
        </slice>
        <from usec="0" sec="1551589521"/>
        <to usec="0" sec="1551589544"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="117.32.237.70" dst_ip="163.205.243.8" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1551589536"/>
        <to usec="0" sec="1551589557"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.243.35.91" dst_ip="163.205.131.192" src_port="443" dst_port="59129" proto="tcp"/>
        </slice>
        <from usec="0" sec="1551589521"/>
        <to usec="0" sec="1551589523"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="158.186.27.82" dst_ip="163.205.131.83" src_port="443" dst_port="53112" proto="tcp"/>
        </slice>
        <from usec="0" sec="1551589522"/>
        <to usec="0" sec="1551589542"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="104.203.69.126" dst_ip="163.205.131.5" src_port="443" dst_port="62257" proto="tcp"/>
        </slice>
        <from usec="0" sec="1551589265"/>
        <to usec="0" sec="1551589270"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.173.192.148" dst_ip="163.205.128.17" src_port="80" dst_port="63287" proto="tcp"/>
        </slice>
        <from usec="0" sec="1551589525"/>
        <to usec="0" sec="1551589543"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.205.254.101" dst_ip="144.84.55.181" src_port="80" dst_port="39898" proto="tcp"/>
        </slice>
        <from usec="0" sec="1551589528"/>
        <to usec="0" sec="1551589556"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="74.138.84.0" dst_ip="24.21.56.157" src_port="443" dst_port="54042" proto="udp"/>
        </slice>
        <from usec="0" sec="1551589549"/>
        <to usec="0" sec="1551589551"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="210.108.76.249"/>
        </slice>
        <from usec="0" sec="1551589522"/>
        <to usec="0" sec="1551589523"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.243.110.170" dst_ip="126.161.184.54" src_port="993" dst_port="51039" proto="tcp"/>
        </slice>
        <from usec="0" sec="1551589536"/>
        <to usec="0" sec="1551589537"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="34.140.251.214" dst_ip="163.205.94.90" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1551589538"/>
        <to usec="0" sec="1551589541"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="23.106.183.181" dst_ip="163.205.128.49" src_port="80" dst_port="53324" proto="tcp"/>
        </slice>
        <from usec="0" sec="1551589522"/>
        <to usec="0" sec="1551589553"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="204.250.46.29" dst_ip="203.243.105.55" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1551589521"/>
        <to usec="0" sec="1551589551"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.205.215.52" dst_ip="54.200.155.184" src_port="48098" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1551589287"/>
        <to usec="0" sec="1551589298"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="173.195.66.108" dst_ip="163.205.130.206" src_port="443" dst_port="64102" proto="tcp"/>
        </slice>
        <from usec="0" sec="1551589521"/>
        <to usec="0" sec="1551589538"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.205.27.207" dst_ip="163.205.131.20" src_port="443" dst_port="63506" proto="tcp"/>
        </slice>
        <from usec="0" sec="1551589679"/>
        <to usec="0" sec="1551589681"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.205.12.221" dst_ip="52.159.21.135" src_port="63854" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1551589690"/>
        <to usec="0" sec="1551589692"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="35.193.235.227" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1551589540"/>
        <to usec="0" sec="1551589550"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="107.53.133.148" dst_ip="163.205.130.112" src_port="80" dst_port="56427" proto="tcp"/>
        </slice>
        <from usec="0" sec="1551589531"/>
        <to usec="0" sec="1551589551"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="74.138.84.106" dst_ip="163.205.155.84" src_port="443" dst_port="44583" proto="udp"/>
        </slice>
        <from usec="0" sec="1551589535"/>
        <to usec="0" sec="1551589537"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="74.138.84.118" dst_ip="163.205.128.56" src_port="443" dst_port="39988" proto="tcp"/>
        </slice>
        <from usec="0" sec="1551589521"/>
        <to usec="0" sec="1551589555"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="74.138.84.117" dst_ip="163.205.61.113" src_port="443" dst_port="51226" proto="udp"/>
        </slice>
        <from usec="0" sec="1551589527"/>
        <to usec="0" sec="1551589528"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="47.135.99.130" dst_ip="202.58.166.195" src_port="80" dst_port="19444" proto="tcp"/>
        </slice>
        <from usec="0" sec="1551589525"/>
        <to usec="0" sec="1551589536"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,502,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="61.11.0.247"/>
        </slice>
        <from usec="0" sec="1551589521"/>
        <to usec="0" sec="1551589556"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="163.205.134.242" dst_ip="163.205.134.242" src_port="443" proto="udp"/>
        </slice>
        <from usec="0" sec="1551589521"/>
        <to usec="0" sec="1551590041"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="163.205.128.56" dst_ip="163.205.128.56" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1551589527"/>
        <to usec="0" sec="1551589833"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="74.138.227.190" dst_ip="163.205.128.63" src_port="443" dst_port="60143"/>
        </slice>
        <from usec="0" sec="1551589531"/>
        <to usec="0" sec="1551589557"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,503,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="139.62.246.25" dst_ip="133.4.64.78"/>
            <filter src_ip="139.62.246.25" src_port="80"/>
            <filter dst_ip="133.4.64.78" src_port="80"/>
            <filter dst_ip="133.4.64.78" dst_port="23"/>
        </slice>
        <from usec="0" sec="1551589528"/>
        <to usec="0" sec="1551589553"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="173.195.65.71" dst_ip="163.205.130.130" src_port="443" dst_port="52082" proto="tcp"/>
        </slice>
        <from usec="0" sec="1551589521"/>
        <to usec="0" sec="1551589523"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="173.195.66.87" dst_ip="163.205.128.125" src_port="443" dst_port="37812" proto="tcp"/>
        </slice>
        <from usec="0" sec="1551589527"/>
        <to usec="0" sec="1551589557"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.205.130.139" src_port="443"/>
            <filter src_ip="203.110.153.7" dst_ip="163.205.130.139" src_port="80"/>
        </slice>
        <from usec="0" sec="1551589521"/>
        <to usec="0" sec="1551589552"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="46.229.171.206"/>
        </slice>
        <from usec="0" sec="1551589521"/>
        <to usec="0" sec="1551589523"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.205.131.215" src_port="443"/>
        </slice>
        <from usec="0" sec="1551589521"/>
        <to usec="0" sec="1551589545"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.243.116.28" dst_ip="163.205.130.56" src_port="443" dst_port="62067" proto="tcp"/>
        </slice>
        <from usec="0" sec="1551589534"/>
        <to usec="0" sec="1551589537"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="74.138.233.25" dst_ip="163.205.131.244" src_port="443" dst_port="64845"/>
            <filter src_ip="74.138.233.25" dst_ip="163.205.60.52" src_port="443" dst_port="53568"/>
            <filter src_ip="74.138.12.194" dst_ip="163.205.131.244" src_port="443" dst_port="62529"/>
            <filter src_ip="172.70.154.145" dst_ip="163.205.131.244" src_port="443" dst_port="56948"/>
            <filter src_ip="172.70.153.79" dst_ip="163.205.131.244" src_port="443" dst_port="60752"/>
        </slice>
        <from usec="0" sec="1551589521"/>
        <to usec="0" sec="1551589687"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.243.97.181"/>
        </slice>
        <from usec="0" sec="1551589268"/>
        <to usec="0" sec="1551589269"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="172.70.152.54" dst_ip="163.205.128.18" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1551589523"/>
        <to usec="0" sec="1551589544"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,503,1 0 0 0 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="23.243.45.229" dst_ip="203.243.110.76" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1551589547"/>
        <to usec="0" sec="1551589557"/>
    </anomaly>
    <anomaly type="notice" value="0.52332,1.03184,504,1 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.205.155.55" src_port="443"/>
            <filter dst_ip="163.205.155.55" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.243.102.84"/>
        </slice>
        <from usec="0" sec="1551589909"/>
        <to usec="0" sec="1551589910"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.205.211.227"/>
        </slice>
        <from usec="0" sec="1551589529"/>
        <to usec="0" sec="1551589530"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,502,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="218.164.152.121"/>
        </slice>
        <from usec="0" sec="1551589522"/>
        <to usec="0" sec="1551589557"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="54.139.131.112"/>
        </slice>
        <from usec="0" sec="1551589522"/>
        <to usec="0" sec="1551589523"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="60.73.25.78"/>
        </slice>
        <from usec="0" sec="1551589286"/>
        <to usec="0" sec="1551589288"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.132.230.27" dst_port="52869"/>
        </slice>
        <from usec="0" sec="1551589200"/>
        <to usec="0" sec="1551589246"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="125.95.175.58" dst_port="1099"/>
        </slice>
        <from usec="0" sec="1551589200"/>
        <to usec="0" sec="1551589246"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.129.113.60" src_port="53"/>
        </slice>
        <from usec="0" sec="1551589200"/>
        <to usec="0" sec="1551589246"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="133.207.1.58"/>
        </slice>
        <from usec="0" sec="1551589290"/>
        <to usec="0" sec="1551589336"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.243.97.190" dst_port="53"/>
        </slice>
        <from usec="0" sec="1551589290"/>
        <to usec="0" sec="1551589336"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="61.97.93.123" dst_port="139"/>
        </slice>
        <from usec="0" sec="1551589560"/>
        <to usec="0" sec="1551589606"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.196.141.37"/>
        </slice>
        <from usec="0" sec="1551589650"/>
        <to usec="0" sec="1551589696"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.243.104.207"/>
        </slice>
        <from usec="0" sec="1551589650"/>
        <to usec="0" sec="1551589696"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,502,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="222.184.30.64"/>
        </slice>
        <from usec="0" sec="1551589650"/>
        <to usec="0" sec="1551589696"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="202.129.93.72"/>
        </slice>
        <from usec="0" sec="1551589650"/>
        <to usec="0" sec="1551589696"/>
    </anomaly>
    <anomaly type="notice" value="0.697088,1.1106,999,1 0 0 0 0 0 1 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="103.230.6.239" dst_ip="202.139.223.145" dst_port="123"/>
            <filter src_ip="103.230.6.239" dst_ip="203.243.105.78" dst_port="123"/>
            <filter src_ip="103.230.6.239" dst_ip="203.243.104.240" dst_port="123"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="193.37.222.162" src_port="53"/>
            <filter dst_ip="193.37.222.162" dst_port="53"/>
        </slice>
        <from usec="0" sec="1551589650"/>
        <to usec="0" sec="1551589696"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.205.91.163"/>
        </slice>
        <from usec="0" sec="1551589650"/>
        <to usec="0" sec="1551589696"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.205.12.204" src_port="53"/>
            <filter dst_ip="163.205.12.204"/>
        </slice>
        <from usec="0" sec="1551589650"/>
        <to usec="0" sec="1551589696"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.205.91.156" src_port="53"/>
            <filter dst_ip="163.205.91.156"/>
        </slice>
        <from usec="0" sec="1551589650"/>
        <to usec="0" sec="1551589696"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.205.90.130"/>
        </slice>
        <from usec="0" sec="1551589650"/>
        <to usec="0" sec="1551589696"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.243.110.170"/>
        </slice>
        <from usec="0" sec="1551589650"/>
        <to usec="0" sec="1551589696"/>
    </anomaly>
    <anomaly type="notice" value="0.657964,1.13119,999,1 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.243.102.181" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="1551589200"/>
        <to usec="0" sec="1551589966"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="162.72.246.251"/>
        </slice>
        <from usec="0" sec="1551589920"/>
        <to usec="0" sec="1551589966"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="163.205.62.51"/>
        </slice>
        <from usec="0" sec="1551589920"/>
        <to usec="0" sec="1551589966"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.129.89.38"/>
        </slice>
        <from usec="0" sec="1551589920"/>
        <to usec="0" sec="1551589966"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.205.235.2"/>
        </slice>
        <from usec="0" sec="1551589920"/>
        <to usec="0" sec="1551589966"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.243.111.28"/>
        </slice>
        <from usec="0" sec="1551589920"/>
        <to usec="0" sec="1551589966"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="84.180.255.43"/>
        </slice>
        <from usec="0" sec="1551589920"/>
        <to usec="0" sec="1551589966"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.4.64.58" dst_port="50348"/>
        </slice>
        <from usec="0" sec="1551589650"/>
        <to usec="0" sec="1551589966"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="192.31.210.199"/>
        </slice>
        <from usec="0" sec="1551589920"/>
        <to usec="0" sec="1551589966"/>
    </anomaly>
    <anomaly type="notice" value="0.657964,1.13119,504,1 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="52.24.231.39" dst_port="443"/>
        </slice>
        <from usec="0" sec="1551589690"/>
        <to usec="0" sec="1551589966"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.243.104.203" src_port="53"/>
            <filter dst_ip="203.243.104.203" dst_port="53"/>
        </slice>
        <from usec="0" sec="1551589650"/>
        <to usec="0" sec="1551589966"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.243.104.207"/>
        </slice>
        <from usec="0" sec="1551589920"/>
        <to usec="0" sec="1551589966"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.4.64.69" dst_port="50356"/>
        </slice>
        <from usec="0" sec="1551589650"/>
        <to usec="0" sec="1551589966"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="193.37.222.162" src_port="53"/>
            <filter dst_ip="193.37.222.162" dst_port="53"/>
        </slice>
        <from usec="0" sec="1551589920"/>
        <to usec="0" sec="1551589966"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="203.243.110.254" dst_ip="123.201.226.169" dst_port="53"/>
            <filter src_ip="203.243.110.255" dst_ip="123.201.226.169" dst_port="53"/>
        </slice>
        <from usec="0" sec="1551589650"/>
        <to usec="0" sec="1551589966"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.205.91.161"/>
        </slice>
        <from usec="0" sec="1551589920"/>
        <to usec="0" sec="1551589966"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.205.91.160" src_port="53"/>
        </slice>
        <from usec="0" sec="1551589650"/>
        <to usec="0" sec="1551589966"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.205.91.156" src_port="53"/>
        </slice>
        <from usec="0" sec="1551589920"/>
        <to usec="0" sec="1551589966"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.196.241.122" dst_port="54748"/>
        </slice>
        <from usec="0" sec="1551589920"/>
        <to usec="0" sec="1551589966"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="115.19.185.220" dst_port="80"/>
        </slice>
        <from usec="0" sec="1551589650"/>
        <to usec="0" sec="1551589966"/>
    </anomaly>
    <anomaly type="notice" value="0.657964,1.13119,010,1 0 0 0 0 0 1 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="178.62.237.197" dst_ip="163.205.191.109" src_port="49948"/>
        </slice>
        <from usec="0" sec="1551589540"/>
        <to usec="0" sec="1551589966"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.196.241.101"/>
        </slice>
        <from usec="0" sec="1551589920"/>
        <to usec="0" sec="1551589966"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.205.174.119" dst_port="6881"/>
        </slice>
        <from usec="0" sec="1551589650"/>
        <to usec="0" sec="1551589966"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,504,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.129.113.60" src_port="443"/>
            <filter dst_ip="202.129.113.60" src_port="53"/>
        </slice>
        <from usec="0" sec="1551589650"/>
        <to usec="0" sec="1551589966"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.243.110.177"/>
        </slice>
        <from usec="0" sec="1551589920"/>
        <to usec="0" sec="1551589966"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.205.108.29"/>
        </slice>
        <from usec="0" sec="1551589920"/>
        <to usec="0" sec="1551589966"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.196.140.130"/>
        </slice>
        <from usec="0" sec="1551589920"/>
        <to usec="0" sec="1551589966"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.196.140.149"/>
        </slice>
        <from usec="0" sec="1551589920"/>
        <to usec="0" sec="1551589966"/>
    </anomaly>
    <anomaly type="notice" value="0.693097,1.13473,010,0 0 0 0 0 0 1 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="133.4.66.82" dst_port="50348"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,502,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="218.164.152.121"/>
        </slice>
        <from usec="0" sec="1551589920"/>
        <to usec="0" sec="1551589966"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,020,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.243.109.185"/>
        </slice>
        <from usec="0" sec="1551589920"/>
        <to usec="0" sec="1551589966"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.4.66.58" dst_port="50356"/>
        </slice>
        <from usec="0" sec="1551589290"/>
        <to usec="0" sec="1551589966"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.243.97.190" dst_port="53"/>
        </slice>
        <from usec="0" sec="1551589650"/>
        <to usec="0" sec="1551589966"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="209.191.153.218"/>
        </slice>
        <from usec="0" sec="1551589920"/>
        <to usec="0" sec="1551589966"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="81.16.47.168"/>
        </slice>
        <from usec="0" sec="1551589920"/>
        <to usec="0" sec="1551589966"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.196.240.29" dst_port="54748"/>
        </slice>
        <from usec="0" sec="1551589650"/>
        <to usec="0" sec="1551589966"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.196.240.13" dst_port="54756"/>
        </slice>
        <from usec="0" sec="1551589920"/>
        <to usec="0" sec="1551589966"/>
    </anomaly>
    <anomaly type="notice" value="0.693097,1.13473,504,0 0 0 0 0 0 1 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="202.129.73.60" src_port="53"/>
            <filter dst_ip="202.129.73.60" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,020,0 0 0 0 0 0 0 0 0 1 0 0,ptpDoSIC">
        <slice>
            <filter src_ip="116.252.92.75"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="120.203.139.236" src_port="58914"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="13.223.51.17"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="134.205.20.248" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="151.252.54.180"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.693097,1.13473,504,0 0 0 0 0 0 1 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="34.168.126.55" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.52332,1.03184,504,1 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="54.188.145.121" dst_ip="163.205.130.56" src_port="443"/>
            <filter src_ip="192.154.23.30" dst_ip="163.205.130.58" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="173.195.65.246"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="176.108.216.46"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="176.114.29.135"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="185.243.7.198" src_port="59627"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,010,0 0 0 0 0 0 0 0 0 1 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.190.248.222" src_port="47234" dst_port="512"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.52332,1.03184,504,1 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="198.25.11.65" dst_ip="163.205.134.239" src_port="443"/>
            <filter src_ip="198.25.11.65" dst_ip="163.205.128.39" src_port="443"/>
            <filter src_ip="52.225.160.103" dst_ip="163.205.134.239" src_port="443"/>
            <filter src_ip="204.250.46.29" dst_ip="163.205.134.239" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="203.243.104.207" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.693097,1.13473,999,0 0 0 0 0 0 1 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="203.243.98.209" dst_port="6000"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.52332,1.03184,999,1 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="46.5.166.255" dst_ip="133.4.64.79"/>
            <filter src_ip="46.5.166.255" dst_ip="133.4.64.78"/>
            <filter src_ip="46.5.166.255" src_port="80"/>
            <filter src_ip="46.5.166.255" dst_port="23"/>
            <filter dst_ip="133.4.64.79" src_port="80"/>
            <filter dst_ip="133.4.64.79" dst_port="23"/>
            <filter dst_ip="133.4.64.78" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="54.153.210.187"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="64.146.67.60"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="64.146.66.141"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="139.159.81.147"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.52332,1.03184,504,1 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter dst_ip="163.205.128.104" src_port="443"/>
            <filter src_ip="74.138.84.11" dst_ip="163.205.131.54" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.52332,1.03184,504,1 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="74.138.227.255" dst_ip="163.205.131.200" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="84.147.17.1"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="95.112.100.243"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="104.23.63.159"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="107.72.207.166"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="13.168.13.251"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.52332,1.03184,504,1 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.205.131.18" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="173.195.65.70" dst_ip="163.205.131.199" src_port="443" dst_port="57986"/>
        </slice>
        <from usec="0" sec="1551589535"/>
        <to usec="0" sec="1551589537"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="173.195.65.74" dst_ip="163.205.63.223" src_port="443" dst_port="58153"/>
        </slice>
        <from usec="0" sec="1551589521"/>
        <to usec="0" sec="1551589550"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="74.138.84.107" dst_ip="163.205.130.69" src_port="443" dst_port="53963"/>
        </slice>
        <from usec="0" sec="1551589553"/>
        <to usec="0" sec="1551589910"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="173.195.111.140" dst_ip="163.205.130.138" src_port="443" dst_port="49504"/>
        </slice>
        <from usec="0" sec="1551589522"/>
        <to usec="0" sec="1551589552"/>
    </anomaly>
    <anomaly type="notice" value="0.52332,1.03184,504,1 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.205.130.108" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="216.150.166.218" dst_ip="163.205.187.128" src_port="80"/>
            <filter src_ip="216.150.164.213" dst_ip="163.205.187.128" src_port="80"/>
            <filter src_ip="0.0.0.0" dst_ip="163.205.187.128" src_port="80"/>
            <filter src_ip="216.150.163.18" dst_ip="163.205.187.128" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.205.90.128" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.52332,1.03184,504,1 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="203.243.100.166" dst_ip="206.138.226.49" src_port="443"/>
            <filter src_ip="203.243.100.166" dst_ip="172.128.22.1" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="178.191.229.254"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="188.68.119.189"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="192.97.104.233"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="198.25.11.65"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="198.25.10.14"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,502,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="202.139.219.54" dst_port="22"/>
            <filter src_ip="72.134.191.10" dst_ip="202.139.219.54" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,502,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="218.164.152.120" dst_ip="203.243.98.197" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="203.243.98.210" dst_port="1102"/>
            <filter dst_ip="203.243.98.210"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.693097,1.13473,999,0 0 0 0 0 0 1 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.243.100.151" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.52332,1.03184,999,1 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="203.243.107.54" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,502,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="203.243.106.199" dst_port="53"/>
            <filter src_ip="218.164.152.121" dst_ip="203.243.106.199" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,020,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="203.243.109.200"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,502,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter src_ip="218.164.152.121" dst_ip="203.243.116.28" dst_port="22"/>
            <filter src_ip="218.196.123.72" dst_ip="203.243.116.28" dst_port="3306"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="203.243.100.171"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="220.198.219.2"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="51.39.197.216"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="52.235.181.220"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="54.24.176.190"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.469945,1.05396,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.243.111.48" dst_ip="204.250.46.29" src_port="8333" dst_port="10709"/>
        </slice>
        <from usec="0" sec="1551589660"/>
        <to usec="0" sec="1551589683"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="74.138.84.107" dst_ip="163.205.60.52" src_port="443" dst_port="49689"/>
            <filter src_ip="74.138.84.107" dst_ip="163.205.60.52" src_port="443" dst_port="38190"/>
            <filter src_ip="74.138.84.107" dst_ip="163.205.130.69" src_port="443" dst_port="53963"/>
            <filter src_ip="74.138.84.107" dst_ip="163.205.131.194" src_port="443" dst_port="58470"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.653735,1.15489,504,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.205.155.98" src_port="443"/>
            <filter src_ip="1.222.230.249" dst_ip="163.205.155.98" src_port="53"/>
        </slice>
        <from usec="0" sec="1551589920"/>
        <to usec="0" sec="1551589966"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="111.191.20.121" dst_ip="163.205.223.13" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.52332,1.03184,504,1 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="203.243.102.208" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="74.138.84.10" dst_ip="202.139.219.4" src_port="443"/>
            <filter src_ip="74.138.84.10" dst_ip="163.205.128.24" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517993,1.05776,010,0 0 0 0 0 0 0 0 0 1 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.58.182.203" src_port="43794" dst_port="82"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.693097,1.13473,504,0 0 0 0 0 0 1 0 0 1 0 0,mptmp">
        <slice>
            <filter dst_ip="163.205.131.194" src_port="443"/>
            <filter dst_ip="163.205.155.173" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
