<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="suspicious" value="1.12639,1.30958,504,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.165.248.151" dst_ip="13.62.106.71" src_port="40551" dst_port="443"/>
        </slice>
        <from usec="0" sec="1559797232"/>
        <to usec="0" sec="1559797377"/>
    </anomaly>
    <anomaly type="suspicious" value="0.878268,1.23962,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.165.159.202" dst_ip="31.242.205.15" src_port="52927" dst_port="443"/>
        </slice>
        <from usec="0" sec="1559797448"/>
        <to usec="0" sec="1559797449"/>
    </anomaly>
    <anomaly type="suspicious" value="1.28105,1.30365,504,1 1 1 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="202.72.85.134" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.860791,1.22066,504,0 0 0 1 0 0 1 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="118.206.145.93" dst_ip="163.165.226.236" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.878268,1.23962,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="54.48.184.153" dst_ip="203.204.102.240" src_port="51003" dst_port="123"/>
            <filter src_ip="54.48.184.153" dst_ip="163.165.67.79" src_port="51003" dst_port="123"/>
        </slice>
        <from usec="0" sec="1559797699"/>
        <to usec="0" sec="1559797701"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.0.228.40"/>
        </slice>
        <from usec="0" sec="1559797381"/>
        <to usec="0" sec="1559797382"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="61.96.6.16" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1559797997"/>
        <to usec="0" sec="1559798002"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,504,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.165.229.182" dst_ip="183.121.249.51" src_port="37091" dst_port="443"/>
        </slice>
        <from usec="0" sec="1559797267"/>
        <to usec="0" sec="1559798094"/>
    </anomaly>
    <anomaly type="suspicious" value="0.878268,1.23962,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="219.129.240.67" dst_ip="203.204.102.79" src_port="57630" dst_port="80"/>
        </slice>
        <from usec="0" sec="1559797210"/>
        <to usec="0" sec="1559797211"/>
    </anomaly>
    <anomaly type="suspicious" value="1.15937,1.32333,012,1 1 1 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.12.28.62" dst_ip="201.50.183.149" dst_port="25"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559798100"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="188.101.247.104"/>
        </slice>
        <from usec="0" sec="1559797272"/>
        <to usec="0" sec="1559797631"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="107.81.63.36"/>
        </slice>
        <from usec="0" sec="1559797738"/>
        <to usec="0" sec="1559797739"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="62.4.228.241"/>
        </slice>
        <from usec="0" sec="1559797583"/>
        <to usec="0" sec="1559797671"/>
    </anomaly>
    <anomaly type="suspicious" value="1.15937,1.32333,020,1 1 1 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="23.171.158.146"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797435"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="159.52.218.167"/>
        </slice>
        <from usec="0" sec="1559797765"/>
        <to usec="0" sec="1559797767"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="185.66.170.120"/>
        </slice>
        <from usec="0" sec="1559797431"/>
        <to usec="0" sec="1559797432"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="155.96.198.124"/>
        </slice>
        <from usec="0" sec="1559797435"/>
        <to usec="0" sec="1559797436"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="176.167.141.134"/>
        </slice>
        <from usec="0" sec="1559797905"/>
        <to usec="0" sec="1559797907"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="192.178.63.75"/>
        </slice>
        <from usec="0" sec="1559797908"/>
        <to usec="0" sec="1559797909"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="104.114.79.28"/>
        </slice>
        <from usec="0" sec="1559797791"/>
        <to usec="0" sec="1559797794"/>
    </anomaly>
    <anomaly type="suspicious" value="1.18079,1.31676,010,1 1 1 1 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="58.96.237.25" dst_port="1433"/>
            <filter src_ip="58.96.237.25" dst_port="65529"/>
        </slice>
        <from usec="0" sec="1559797371"/>
        <to usec="0" sec="1559797392"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="45.172.136.156"/>
        </slice>
        <from usec="0" sec="1559797836"/>
        <to usec="0" sec="1559797837"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="139.51.20.17"/>
        </slice>
        <from usec="0" sec="1559797736"/>
        <to usec="0" sec="1559797741"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="184.230.17.108" dst_port="65530"/>
        </slice>
        <from usec="0" sec="1559797858"/>
        <to usec="0" sec="1559797948"/>
    </anomaly>
    <anomaly type="suspicious" value="0.878268,1.23962,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="202.174.127.116" dst_port="445"/>
        </slice>
        <from usec="0" sec="1559797945"/>
        <to usec="0" sec="1559797948"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="113.55.165.115" dst_port="65529"/>
            <filter src_ip="113.55.165.115" dst_port="1433"/>
            <filter src_ip="113.55.165.115" dst_port="445"/>
        </slice>
        <from usec="0" sec="1559797421"/>
        <to usec="0" sec="1559797621"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="61.88.59.29" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1559797602"/>
        <to usec="0" sec="1559797604"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="113.159.4.145" dst_port="445"/>
        </slice>
        <from usec="0" sec="1559797699"/>
        <to usec="0" sec="1559797701"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="185.207.2.120" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1559797705"/>
        <to usec="0" sec="1559797957"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="61.69.255.152" dst_port="65529"/>
        </slice>
        <from usec="0" sec="1559797232"/>
        <to usec="0" sec="1559797377"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="202.174.117.60" dst_port="445"/>
            <filter src_ip="202.174.117.60" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1559797582"/>
        <to usec="0" sec="1559797588"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="119.30.61.128" dst_port="445"/>
        </slice>
        <from usec="0" sec="1559797337"/>
        <to usec="0" sec="1559797339"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="117.137.224.65" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1559798044"/>
        <to usec="0" sec="1559798058"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="221.1.16.57" dst_port="65529"/>
        </slice>
        <from usec="0" sec="1559797641"/>
        <to usec="0" sec="1559797643"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="112.133.245.201" dst_port="445"/>
            <filter src_ip="112.133.245.201" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1559798089"/>
        <to usec="0" sec="1559798096"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="58.79.22.203" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1559798014"/>
        <to usec="0" sec="1559798016"/>
    </anomaly>
    <anomaly type="suspicious" value="0.878268,1.23962,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="47.81.173.90" dst_port="81"/>
            <filter src_ip="47.81.173.90" dst_port="80"/>
        </slice>
        <from usec="0" sec="1559797296"/>
        <to usec="0" sec="1559797324"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="180.219.124.177" dst_port="65530"/>
        </slice>
        <from usec="0" sec="1559797948"/>
        <to usec="0" sec="1559797958"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="58.77.70.142" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1559797247"/>
        <to usec="0" sec="1559797249"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="219.1.188.154" dst_port="65529"/>
            <filter src_ip="219.1.188.154" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1559797359"/>
        <to usec="0" sec="1559797414"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,010,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="34.40.64.199" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1559797269"/>
        <to usec="0" sec="1559797270"/>
    </anomaly>
    <anomaly type="suspicious" value="0.878268,1.23962,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="200.206.227.137" dst_port="3389"/>
        </slice>
        <from usec="0" sec="1559797577"/>
        <to usec="0" sec="1559798080"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="122.173.237.69" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1559797448"/>
        <to usec="0" sec="1559797452"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="113.147.229.162" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1559797899"/>
        <to usec="0" sec="1559797904"/>
    </anomaly>
    <anomaly type="suspicious" value="0.878268,1.23962,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="112.133.247.87" dst_port="445"/>
        </slice>
        <from usec="0" sec="1559797790"/>
        <to usec="0" sec="1559797793"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="219.1.64.173" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1559797249"/>
        <to usec="0" sec="1559797253"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="112.133.247.83" dst_port="445"/>
        </slice>
        <from usec="0" sec="1559797319"/>
        <to usec="0" sec="1559797322"/>
    </anomaly>
    <anomaly type="suspicious" value="1.18079,1.31676,010,1 1 1 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="112.133.247.81" dst_port="445"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797928"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="113.46.133.176" dst_port="445"/>
        </slice>
        <from usec="0" sec="1559798082"/>
        <to usec="0" sec="1559798085"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="58.101.204.174" dst_port="65530"/>
        </slice>
        <from usec="0" sec="1559797328"/>
        <to usec="0" sec="1559797338"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="124.68.166.69" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1559797332"/>
        <to usec="0" sec="1559797333"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="1.75.166.70" dst_port="65529"/>
        </slice>
        <from usec="0" sec="1559798051"/>
        <to usec="0" sec="1559798063"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="27.172.31.78" dst_port="65529"/>
            <filter src_ip="27.172.31.78" dst_port="1433"/>
            <filter src_ip="27.172.31.78" dst_port="445"/>
        </slice>
        <from usec="0" sec="1559797712"/>
        <to usec="0" sec="1559797780"/>
    </anomaly>
    <anomaly type="suspicious" value="0.878268,1.23962,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="54.48.184.249" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1559797314"/>
        <to usec="0" sec="1559797325"/>
    </anomaly>
    <anomaly type="suspicious" value="1.15937,1.32333,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="219.10.91.202" dst_port="65529"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="suspicious" value="1.15937,1.32333,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="101.89.105.223" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="suspicious" value="0.878268,1.23962,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="61.99.236.233" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1559797320"/>
        <to usec="0" sec="1559797336"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="220.214.2.229" dst_port="65530"/>
        </slice>
        <from usec="0" sec="1559797521"/>
        <to usec="0" sec="1559797528"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="125.92.22.5" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1559797539"/>
        <to usec="0" sec="1559797543"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="111.69.106.3" dst_port="445"/>
        </slice>
        <from usec="0" sec="1559797349"/>
        <to usec="0" sec="1559797352"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="23.174.203.198"/>
        </slice>
        <from usec="0" sec="1559797463"/>
        <to usec="0" sec="1559797464"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="128.1.39.105"/>
        </slice>
        <from usec="0" sec="1559797797"/>
        <to usec="0" sec="1559797814"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="37.142.114.77"/>
        </slice>
        <from usec="0" sec="1559797774"/>
        <to usec="0" sec="1559797833"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="203.204.116.19"/>
        </slice>
        <from usec="0" sec="1559797375"/>
        <to usec="0" sec="1559797827"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="50.87.238.64"/>
        </slice>
        <from usec="0" sec="1559797495"/>
        <to usec="0" sec="1559797496"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12639,1.30958,010,1 1 1 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="117.137.188.113" src_port="445"/>
        </slice>
        <from usec="0" sec="1559797575"/>
        <to usec="0" sec="1559797649"/>
    </anomaly>
    <anomaly type="suspicious" value="0.947031,1.24721,999,1 1 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.4.64.62"/>
            <filter dst_ip="200.206.227.137" src_port="3389"/>
        </slice>
        <from usec="0" sec="1559797202"/>
        <to usec="0" sec="1559798072"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20696,1.37698,901,0 0 0 0 1 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559798028"/>
    </anomaly>
    <anomaly type="suspicious" value="1.25788,1.38381,503,0 0 0 1 1 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="54.128.170.9" dst_ip="203.204.102.79" dst_port="80"/>
            <filter src_ip="54.128.170.9" dst_ip="203.204.104.149" dst_port="80"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797209"/>
    </anomaly>
    <anomaly type="suspicious" value="1.2875,1.39683,010,0 0 0 1 1 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="88.212.124.99" src_port="50237"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797488"/>
    </anomaly>
    <anomaly type="suspicious" value="1.25788,1.38381,999,0 0 0 1 1 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.27.27.107" dst_port="53"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797488"/>
    </anomaly>
    <anomaly type="suspicious" value="1.25788,1.38381,012,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.27.124.34" dst_ip="120.228.145.164" dst_port="80"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797476"/>
    </anomaly>
    <anomaly type="suspicious" value="1.25788,1.38381,504,0 0 0 1 1 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="23.196.211.183" dst_ip="203.204.101.190" src_port="443"/>
        </slice>
        <from usec="0" sec="1559797382"/>
        <to usec="0" sec="1559797473"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20696,1.37698,901,0 0 0 0 1 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797668"/>
    </anomaly>
    <anomaly type="suspicious" value="1.48424,1.53705,901,0 0 0 0 0 1 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559798028"/>
    </anomaly>
    <anomaly type="suspicious" value="0.878268,1.23962,504,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.165.207.62" src_port="443"/>
        </slice>
        <from usec="0" sec="1559797291"/>
        <to usec="0" sec="1559797301"/>
    </anomaly>
    <anomaly type="suspicious" value="0.905064,1.20384,504,1 0 0 0 0 0 1 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.165.65.116" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.25607,1.46784,504,0 0 0 1 0 0 1 1 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="134.46.72.4" dst_ip="203.204.97.46" dst_port="443"/>
        </slice>
        <from usec="0" sec="1559797515"/>
        <to usec="0" sec="1559797577"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20507,1.4614,999,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.204.107.114" dst_port="25"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20507,1.4614,010,0 0 0 0 0 0 1 1 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="99.87.212.187" src_port="80"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20507,1.4614,010,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="185.207.3.22" src_port="43240"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20507,1.4614,011,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="88.83.91.18" src_port="8000"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797291"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20507,1.4614,010,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="45.34.7.238" src_port="56345"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20507,1.4614,010,0 0 0 0 0 0 1 1 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="159.52.244.62" dst_port="52869"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20507,1.4614,010,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="92.169.160.200" src_port="46805"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20507,1.4614,010,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="185.207.2.82" src_port="58079"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20507,1.4614,010,0 0 0 0 0 0 1 1 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.207.3.117" src_port="53973" dst_port="6392"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20507,1.4614,011,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="136.173.68.156" src_port="8000"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20507,1.4614,010,0 0 0 0 0 0 1 1 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="85.151.166.150" src_port="44199" dst_port="8080"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20507,1.4614,010,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="89.248.160.153" src_port="49449"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20507,1.4614,010,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="81.233.45.148" src_port="58418"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20507,1.4614,010,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="93.167.61.195" src_port="50077"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20507,1.4614,010,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="114.37.13.245" src_port="50125"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20507,1.4614,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.204.103.39" dst_port="53"/>
            <filter dst_ip="203.204.103.59" dst_port="53"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="suspicious" value="0.862419,1.18871,503,1 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="160.107.89.204" dst_ip="203.204.102.79" src_port="61423" dst_port="80"/>
            <filter src_ip="160.107.89.204" dst_ip="203.204.102.79" src_port="61422" dst_port="80"/>
            <filter src_ip="160.107.89.204" dst_ip="203.204.104.149" src_port="61678" dst_port="80"/>
            <filter src_ip="160.107.89.204" dst_ip="203.204.104.149" src_port="61677" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.815835,1.20574,504,0 0 0 1 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter src_ip="54.134.216.139" dst_ip="163.165.20.144"/>
            <filter src_ip="54.134.216.139" dst_port="80"/>
            <filter dst_ip="163.165.20.144" dst_port="80"/>
            <filter dst_ip="163.165.20.144" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.815835,1.20574,504,0 0 0 1 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.165.64.123" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.932351,1.19661,504,1 0 0 1 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.165.159.177" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11584,1.25059,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.165.158.46" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.17073,1.25811,504,0 0 0 1 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.165.170.11" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.815835,1.20574,504,0 0 0 1 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.165.224.189" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.39643,1.46255,010,0 0 0 1 0 0 1 1 0 1 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="202.72.80.238" src_port="32766"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.862419,1.18871,999,1 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter src_ip="163.165.19.116" dst_ip="133.253.132.182" src_port="993" dst_port="59070"/>
            <filter src_ip="163.165.19.116" dst_ip="133.253.132.182" src_port="993" dst_port="59058"/>
            <filter src_ip="163.165.19.116" dst_ip="133.253.132.182" src_port="993" dst_port="48847"/>
            <filter src_ip="163.165.19.116" dst_ip="133.253.132.182" src_port="993" dst_port="48845"/>
            <filter src_ip="180.205.100.190" dst_ip="133.253.132.182" src_port="25394" dst_port="17164"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11584,1.25059,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="133.27.104.37" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11584,1.25059,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="13.46.111.109" dst_ip="163.165.65.233" src_port="443" dst_port="49617"/>
            <filter src_ip="13.46.111.109" dst_ip="163.165.159.100" src_port="443" dst_port="54036"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11584,1.25059,504,0 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="23.210.17.100" dst_ip="163.165.67.119" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11584,1.25059,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="203.204.116.19" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11584,1.25059,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.165.64.248" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11584,1.25059,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.165.158.107" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.35075,1.45609,010,0 0 0 0 0 0 1 1 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="185.144.240.193" src_port="51696"/>
            <filter src_ip="77.54.156.114" src_port="56782" dst_port="5038"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11584,1.25059,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.165.180.227" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11584,1.25059,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.165.233.63" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11584,1.25059,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.165.226.178" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20366,1.24179,504,1 0 0 0 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter dst_ip="163.165.180.240" src_port="443"/>
            <filter dst_ip="163.165.242.131" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.14912,1.26498,999,0 0 0 0 0 0 1 0 0 1 1 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.165.33.86" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11584,1.25059,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="203.204.96.153" dst_ip="198.148.195.76" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11584,1.25059,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="203.204.116.19" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11584,1.25059,504,0 0 0 0 0 0 0 0 0 1 1 0,mptpla">
        <slice>
            <filter dst_ip="45.209.29.175" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.17073,1.25811,011,0 0 0 1 0 0 0 0 0 1 1 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="46.2.159.57" src_port="61778" dst_port="56442"/>
            <filter dst_ip="46.2.159.57" src_port="57444" dst_port="56442"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11584,1.25059,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="163.165.243.190" dst_ip="52.76.187.41" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.17073,1.25811,504,0 0 0 1 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="182.232.31.60" dst_port="443"/>
            <filter dst_ip="52.183.76.33" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.40745,1.79027,999,1 1 1 1 1 1 0 0 0 1 1 0,ipv4gretun">
        <slice>
            <filter src_ip="163.165.223.214" dst_ip="206.103.27.30"/>
            <filter src_ip="163.165.223.214" dst_ip="66.207.222.193"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.54137,2.66728,010,1 1 1 1 1 1 1 1 1 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="219.14.26.92" dst_port="3306"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.5317,1.35222,999,1 1 1 0 0 0 0 0 0 1 1 0,ipv4gretun">
        <slice>
            <filter dst_ip="163.165.223.214"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.58773,1.87971,999,1 1 0 1 1 1 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="133.253.251.92" src_port="3001"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.90197,1.68137,010,0 0 0 1 1 1 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="172.187.95.197" src_port="57239" dst_port="11211"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797398"/>
    </anomaly>
    <anomaly type="anomalous" value="2.69613,1.93593,504,1 1 1 1 1 1 1 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="203.204.102.137" src_port="53"/>
            <filter dst_ip="203.204.102.137" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.50927,1.85072,504,1 0 0 1 1 1 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.165.96.230" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.90197,1.68137,010,0 0 0 1 1 1 0 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="171.131.117.142" dst_ip="202.230.211.119"/>
            <filter src_ip="171.131.117.140" dst_ip="202.230.211.119"/>
            <filter src_ip="171.131.117.141" dst_ip="202.230.211.119"/>
        </slice>
        <from usec="0" sec="1559797209"/>
        <to usec="0" sec="1559797936"/>
    </anomaly>
    <anomaly type="anomalous" value="1.99745,1.67675,999,0 0 0 1 1 1 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="203.204.108.40" dst_ip="37.224.138.122" dst_port="5667"/>
            <filter src_ip="203.204.108.40" dst_ip="101.147.149.177" src_port="6500"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.64361,2.25881,010,1 1 1 0 0 0 1 1 1 1 0 0,mptmp">
        <slice>
            <filter src_ip="85.226.220.53" dst_port="445"/>
            <filter src_ip="93.167.61.195" src_port="50077"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.48357,1.86636,999,0 0 0 1 1 1 1 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="203.204.108.5"/>
            <filter dst_ip="46.26.85.59" src_port="443" dst_port="57433"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.50374,1.42735,504,1 1 0 1 1 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="203.204.102.137" dst_port="443"/>
            <filter dst_ip="162.97.45.125" dst_port="443"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797937"/>
    </anomaly>
    <anomaly type="anomalous" value="2.34847,2.20299,010,0 0 0 0 0 0 1 1 1 0 0 0,ptmp">
        <slice>
            <filter src_ip="185.96.118.168"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="anomalous" value="2.64361,2.25881,999,1 1 1 0 0 0 1 1 1 1 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="80.108.229.222" src_port="5061" dst_port="5060"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.34847,2.20299,010,0 0 0 0 0 0 1 1 1 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="43.121.144.188" dst_port="23"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797291"/>
    </anomaly>
    <anomaly type="anomalous" value="2.34847,2.20299,010,0 0 0 0 0 0 1 1 1 0 0 0,ptmp">
        <slice>
            <filter src_ip="89.248.160.153" src_port="49449"/>
        </slice>
        <from usec="0" sec="1559797560"/>
        <to usec="0" sec="1559797606"/>
    </anomaly>
    <anomaly type="anomalous" value="2.34847,2.20299,999,0 0 0 0 0 0 1 1 1 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.27.24.164" dst_ip="208.77.183.207" src_port="53"/>
            <filter src_ip="133.27.24.164" dst_ip="173.134.206.241" src_port="53"/>
        </slice>
        <from usec="0" sec="1559797695"/>
        <to usec="0" sec="1559797786"/>
    </anomaly>
    <anomaly type="anomalous" value="1.68722,1.4313,999,1 0 0 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="123.137.175.149" dst_ip="203.204.108.39"/>
            <filter dst_ip="203.204.108.39" dst_port="3010"/>
            <filter src_ip="123.137.175.149" dst_ip="203.204.108.5" dst_port="3010"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.46835,1.85664,504,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="133.27.99.45" dst_port="443"/>
            <filter src_ip="133.27.111.158" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.46835,1.85664,504,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="163.165.96.230" dst_port="443"/>
            <filter src_ip="163.165.159.118" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.52424,1.86047,504,1 0 0 1 1 1 1 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="133.253.2.232" src_port="443"/>
            <filter src_ip="208.77.196.222" dst_ip="133.253.2.232" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.46835,1.85664,504,0 0 0 1 1 1 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.165.159.73" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.28777,1.68398,504,1 1 1 1 1 0 1 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="202.72.80.238" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.71426,1.42923,504,1 0 0 1 1 0 1 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="202.72.80.79" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.62574,1.43894,503,0 0 0 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.165.104.222" src_port="443"/>
            <filter dst_ip="163.165.104.222" src_port="80"/>
            <filter dst_ip="163.165.210.111" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.91173,2.09688,504,1 1 1 1 1 1 1 1 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="202.72.80.238" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.06427,1.58528,503,1 0 0 1 1 0 0 0 0 1 1 1,ptmpHTTP">
        <slice>
            <filter src_ip="203.204.104.149" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.62574,1.43894,504,0 0 0 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.165.65.223" src_port="443"/>
            <filter dst_ip="163.165.65.223" dst_port="30399"/>
            <filter dst_ip="163.165.65.223" dst_port="30303"/>
            <filter dst_ip="203.204.116.19" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.54137,2.66728,010,1 1 1 1 1 1 1 1 1 1 1 1,mptmp">
        <slice>
            <filter src_ip="185.96.118.168"/>
            <filter src_ip="185.183.249.243" src_port="59020" dst_port="389"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.66389,1.44548,504,0 0 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.165.66.176" src_port="443"/>
            <filter dst_ip="163.165.66.244" src_port="443"/>
            <filter dst_ip="163.165.66.244" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.62574,1.43894,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="203.204.116.19" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.54137,2.66728,010,1 1 1 1 1 1 1 1 1 1 1 1,mptmp">
        <slice>
            <filter src_ip="77.54.158.63" src_port="5174"/>
            <filter src_ip="114.37.13.245" src_port="50125"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.74574,1.45041,504,1 0 0 1 0 0 1 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.165.215.182" src_port="443"/>
            <filter dst_ip="202.65.7.125" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.68639,1.45795,504,0 0 0 1 0 0 1 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.165.224.80" src_port="443"/>
            <filter dst_ip="163.165.233.244" src_port="443"/>
            <filter dst_ip="163.165.233.244" src_port="80"/>
            <filter dst_ip="203.204.116.19" src_port="443"/>
            <filter dst_ip="203.204.116.19" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.66389,1.44548,504,0 0 0 1 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.165.38.235" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.62574,1.43894,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="203.204.116.19" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.21326,1.70838,504,1 0 0 1 1 1 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="202.72.80.37" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.72401,1.43787,999,1 0 0 1 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="133.253.251.92" dst_port="3001"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.62574,1.43894,503,0 0 0 0 0 0 0 0 0 1 1 1,mptplaHTTP">
        <slice>
            <filter src_ip="203.204.108.12" dst_ip="76.85.46.240" src_port="80" dst_port="54351"/>
            <filter src_ip="203.204.108.12" dst_ip="76.85.46.240" src_port="80" dst_port="54346"/>
            <filter src_ip="203.204.108.6" dst_ip="76.85.46.240"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.74574,1.45041,504,1 0 0 1 0 0 1 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="202.230.211.254" src_port="443"/>
            <filter dst_ip="202.72.80.198" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
