<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="notice" value="0.609469,1.19521,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.27.71.126" dst_ip="98.171.87.164" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1559797738"/>
        <to usec="0" sec="1559797739"/>
    </anomaly>
    <anomaly type="notice" value="0.609469,1.19521,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="204.221.209.255" dst_ip="203.204.104.149" src_port="33436" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1559797582"/>
        <to usec="0" sec="1559797612"/>
    </anomaly>
    <anomaly type="notice" value="0.609469,1.19521,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.72.80.238" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1559797289"/>
        <to usec="0" sec="1559798089"/>
    </anomaly>
    <anomaly type="notice" value="0.609469,1.19521,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="69.114.224.205" dst_ip="203.204.108.43" src_port="52637" dst_port="6881" proto="tcp"/>
        </slice>
        <from usec="0" sec="1559797797"/>
        <to usec="0" sec="1559797798"/>
    </anomaly>
    <anomaly type="notice" value="0.609469,1.19521,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="172.94.133.78" dst_ip="163.165.65.20" src_port="443" dst_port="55659" proto="tcp"/>
        </slice>
        <from usec="0" sec="1559798070"/>
        <to usec="0" sec="1559798072"/>
    </anomaly>
    <anomaly type="notice" value="0.609469,1.19521,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="124.229.227.48" dst_ip="203.204.104.149" src_port="39800" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1559797367"/>
        <to usec="0" sec="1559797460"/>
    </anomaly>
    <anomaly type="notice" value="0.609469,1.19521,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="82.84.227.87" dst_ip="163.165.66.250" src_port="1194" dst_port="35761" proto="udp"/>
        </slice>
        <from usec="0" sec="1559797797"/>
        <to usec="0" sec="1559797814"/>
    </anomaly>
    <anomaly type="notice" value="0.609469,1.19521,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="45.174.63.151" dst_ip="202.65.51.117" src_port="443" dst_port="60331" proto="tcp"/>
        </slice>
        <from usec="0" sec="1559797641"/>
        <to usec="0" sec="1559797643"/>
    </anomaly>
    <anomaly type="notice" value="0.609469,1.19521,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.27.25.0" dst_ip="192.15.36.228" src_port="80" dst_port="45628" proto="tcp"/>
        </slice>
        <from usec="0" sec="1559797462"/>
        <to usec="0" sec="1559797767"/>
    </anomaly>
    <anomaly type="notice" value="0.609469,1.19521,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="13.47.52.195" dst_ip="163.165.158.168" src_port="80" dst_port="60256" proto="tcp"/>
        </slice>
        <from usec="0" sec="1559797382"/>
        <to usec="0" sec="1559797383"/>
    </anomaly>
    <anomaly type="notice" value="0.609469,1.19521,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="8.200.180.215" dst_ip="202.65.7.125" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1559797522"/>
        <to usec="0" sec="1559797532"/>
    </anomaly>
    <anomaly type="notice" value="0.609469,1.19521,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="0.0.0.0" dst_ip="203.204.102.240" src_port="8080" dst_port="123" proto="udp"/>
        </slice>
        <from usec="0" sec="1559797375"/>
        <to usec="0" sec="1559797376"/>
    </anomaly>
    <anomaly type="notice" value="0.609469,1.19521,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="54.82.187.183" dst_ip="163.165.160.253" src_port="9021" dst_port="3702" proto="udp"/>
        </slice>
        <from usec="0" sec="1559797211"/>
        <to usec="0" sec="1559797299"/>
    </anomaly>
    <anomaly type="notice" value="0.609469,1.19521,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="39.113.253.181" dst_ip="203.204.104.149" src_port="61206" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1559797270"/>
        <to usec="0" sec="1559797308"/>
    </anomaly>
    <anomaly type="notice" value="0.609469,1.19521,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="52.92.224.177" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1559797467"/>
        <to usec="0" sec="1559797468"/>
    </anomaly>
    <anomaly type="notice" value="0.609469,1.19521,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="203.204.102.79" dst_ip="203.204.116.19" src_port="80" dst_port="61217" proto="tcp"/>
        </slice>
        <from usec="0" sec="1559797317"/>
        <to usec="0" sec="1559797319"/>
    </anomaly>
    <anomaly type="notice" value="0.609469,1.19521,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="172.94.130.94" dst_ip="163.165.47.7" src_port="443" dst_port="63426" proto="udp"/>
        </slice>
        <from usec="0" sec="1559797211"/>
        <to usec="0" sec="1559797299"/>
    </anomaly>
    <anomaly type="notice" value="0.609469,1.19521,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.72.80.238" dst_ip="13.76.173.115" src_port="54487" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1559797211"/>
        <to usec="0" sec="1559797322"/>
    </anomaly>
    <anomaly type="notice" value="0.609469,1.19521,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="96.238.117.142" dst_ip="31.242.205.0" src_port="35244" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1559798054"/>
        <to usec="0" sec="1559798055"/>
    </anomaly>
    <anomaly type="notice" value="0.609469,1.19521,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="114.37.13.245" dst_ip="163.165.230.196" src_port="443" dst_port="56180" proto="udp"/>
        </slice>
        <from usec="0" sec="1559797285"/>
        <to usec="0" sec="1559797579"/>
    </anomaly>
    <anomaly type="notice" value="0.609469,1.19521,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="151.149.99.232" dst_ip="163.165.52.181" src_port="443" dst_port="33914" proto="tcp"/>
        </slice>
        <from usec="0" sec="1559797205"/>
        <to usec="0" sec="1559797528"/>
    </anomaly>
    <anomaly type="notice" value="0.609469,1.19521,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.165.159.47" dst_ip="216.204.183.219" src_port="58996" dst_port="60795" proto="udp"/>
        </slice>
        <from usec="0" sec="1559797577"/>
        <to usec="0" sec="1559797792"/>
    </anomaly>
    <anomaly type="notice" value="0.609469,1.19521,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.65.7.125" dst_ip="8.200.181.195" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1559797336"/>
        <to usec="0" sec="1559797775"/>
    </anomaly>
    <anomaly type="notice" value="0.609469,1.19521,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="172.94.132.1" dst_ip="172.94.132.1" proto="icmp"/>
        </slice>
        <from usec="0" sec="1559797284"/>
        <to usec="0" sec="1559797468"/>
    </anomaly>
    <anomaly type="notice" value="0.609469,1.19521,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="211.102.89.126" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1559797316"/>
        <to usec="0" sec="1559797324"/>
    </anomaly>
    <anomaly type="notice" value="0.609469,1.19521,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="162.243.143.71" dst_port="7001" proto="tcp"/>
        </slice>
        <from usec="0" sec="1559797676"/>
        <to usec="0" sec="1559797687"/>
    </anomaly>
    <anomaly type="notice" value="0.609469,1.19521,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="23.210.19.166" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1559798087"/>
        <to usec="0" sec="1559798091"/>
    </anomaly>
    <anomaly type="notice" value="0.609469,1.19521,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="43.121.144.152"/>
        </slice>
        <from usec="0" sec="1559798078"/>
        <to usec="0" sec="1559798080"/>
    </anomaly>
    <anomaly type="notice" value="0.609469,1.19521,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="113.136.5.255"/>
        </slice>
        <from usec="0" sec="1559798078"/>
        <to usec="0" sec="1559798080"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559798028"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.204.100.53"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797308"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.27.99.66"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797308"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="133.27.124.221"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797308"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="184.230.17.118"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797308"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="54.42.175.214"/>
        </slice>
        <from usec="0" sec="1559797224"/>
        <to usec="0" sec="1559797308"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.72.143.132"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797382"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,010,0 0 0 1 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="68.52.247.48"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797398"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="195.224.32.84"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797398"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="117.18.218.129"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797398"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="121.137.16.100"/>
        </slice>
        <from usec="0" sec="1559797202"/>
        <to usec="0" sec="1559797397"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.204.100.96"/>
        </slice>
        <from usec="0" sec="1559797211"/>
        <to usec="0" sec="1559797389"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="186.131.77.100"/>
        </slice>
        <from usec="0" sec="1559797225"/>
        <to usec="0" sec="1559797388"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.65.13.92"/>
        </slice>
        <from usec="0" sec="1559797263"/>
        <to usec="0" sec="1559797395"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="52.92.224.37"/>
        </slice>
        <from usec="0" sec="1559797315"/>
        <to usec="0" sec="1559797371"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="189.86.236.7"/>
        </slice>
        <from usec="0" sec="1559797320"/>
        <to usec="0" sec="1559797398"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="54.76.154.15"/>
        </slice>
        <from usec="0" sec="1559797326"/>
        <to usec="0" sec="1559797392"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="142.162.114.190" src_port="54738" dst_port="23"/>
            <filter src_ip="142.162.114.190" src_port="42202" dst_port="23"/>
            <filter src_ip="142.162.114.190" src_port="60138" dst_port="23"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797488"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.165.216.0"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797488"/>
    </anomaly>
    <anomaly type="notice" value="0.704957,1.20307,504,1 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.72.82.66" src_port="22"/>
            <filter src_ip="202.72.82.66" src_port="80"/>
            <filter src_ip="202.72.82.66"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797479"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="203.204.116.19"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797488"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="117.18.223.254"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797483"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.204.104.133"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797487"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="203.204.102.79"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797473"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="115.194.144.114"/>
        </slice>
        <from usec="0" sec="1559797201"/>
        <to usec="0" sec="1559797488"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.27.149.25"/>
        </slice>
        <from usec="0" sec="1559797201"/>
        <to usec="0" sec="1559797487"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.165.64.225"/>
        </slice>
        <from usec="0" sec="1559797202"/>
        <to usec="0" sec="1559797486"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.165.242.209"/>
        </slice>
        <from usec="0" sec="1559797222"/>
        <to usec="0" sec="1559797484"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.27.126.4"/>
        </slice>
        <from usec="0" sec="1559797241"/>
        <to usec="0" sec="1559797439"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="113.153.160.192"/>
        </slice>
        <from usec="0" sec="1559797311"/>
        <to usec="0" sec="1559797452"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.27.34.236"/>
        </slice>
        <from usec="0" sec="1559797334"/>
        <to usec="0" sec="1559797478"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.27.121.97"/>
        </slice>
        <from usec="0" sec="1559797341"/>
        <to usec="0" sec="1559797440"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="198.44.239.133"/>
        </slice>
        <from usec="0" sec="1559797414"/>
        <to usec="0" sec="1559797878"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="210.71.101.11"/>
        </slice>
        <from usec="0" sec="1559797201"/>
        <to usec="0" sec="1559797578"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="14.49.12.195" dst_port="22"/>
        </slice>
        <from usec="0" sec="1559797201"/>
        <to usec="0" sec="1559797938"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="119.186.129.13"/>
        </slice>
        <from usec="0" sec="1559797201"/>
        <to usec="0" sec="1559797578"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.165.159.6"/>
        </slice>
        <from usec="0" sec="1559797201"/>
        <to usec="0" sec="1559797578"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.165.235.130"/>
        </slice>
        <from usec="0" sec="1559797202"/>
        <to usec="0" sec="1559797575"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="114.37.13.245"/>
        </slice>
        <from usec="0" sec="1559797204"/>
        <to usec="0" sec="1559797578"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="114.37.13.245"/>
        </slice>
        <from usec="0" sec="1559797207"/>
        <to usec="0" sec="1559797566"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter src_ip="213.82.194.70"/>
        </slice>
        <from usec="0" sec="1559797210"/>
        <to usec="0" sec="1559797578"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="68.148.153.46"/>
        </slice>
        <from usec="0" sec="1559797217"/>
        <to usec="0" sec="1559797560"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,011,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.27.104.90"/>
        </slice>
        <from usec="0" sec="1559797225"/>
        <to usec="0" sec="1559797488"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.27.122.15"/>
        </slice>
        <from usec="0" sec="1559797235"/>
        <to usec="0" sec="1559797571"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="172.94.130.78"/>
        </slice>
        <from usec="0" sec="1559797317"/>
        <to usec="0" sec="1559797403"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="66.232.74.74"/>
        </slice>
        <from usec="0" sec="1559797404"/>
        <to usec="0" sec="1559797568"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="23.207.12.218"/>
        </slice>
        <from usec="0" sec="1559797488"/>
        <to usec="0" sec="1559797509"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797758"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.165.209.134"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797668"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.27.34.78"/>
        </slice>
        <from usec="0" sec="1559797203"/>
        <to usec="0" sec="1559797660"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.165.65.125"/>
        </slice>
        <from usec="0" sec="1559797208"/>
        <to usec="0" sec="1559797668"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.27.24.30"/>
        </slice>
        <from usec="0" sec="1559797228"/>
        <to usec="0" sec="1559797659"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.27.15.76"/>
        </slice>
        <from usec="0" sec="1559797247"/>
        <to usec="0" sec="1559797584"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="99.84.103.27"/>
        </slice>
        <from usec="0" sec="1559797283"/>
        <to usec="0" sec="1559797666"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter src_ip="195.206.114.117"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797750"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.27.109.238"/>
        </slice>
        <from usec="0" sec="1559797204"/>
        <to usec="0" sec="1559797625"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="41.186.168.77"/>
        </slice>
        <from usec="0" sec="1559797207"/>
        <to usec="0" sec="1559797758"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="103.12.3.12"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797848"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.204.107.145" src_port="25"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797848"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,020,0 0 0 1 0 0 0 0 0 0 0 0,hostout">
        <slice>
            <filter src_ip="203.204.103.118"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797824"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.72.80.238"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797845"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="219.129.240.67" dst_port="554"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797847"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="183.158.84.126"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797846"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="114.33.112.36"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797845"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="78.80.223.87"/>
        </slice>
        <from usec="0" sec="1559797201"/>
        <to usec="0" sec="1559797843"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.165.66.17"/>
        </slice>
        <from usec="0" sec="1559797201"/>
        <to usec="0" sec="1559797840"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="122.89.17.117"/>
        </slice>
        <from usec="0" sec="1559797202"/>
        <to usec="0" sec="1559797838"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.165.32.45" dst_port="53"/>
        </slice>
        <from usec="0" sec="1559797202"/>
        <to usec="0" sec="1559797848"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.165.247.61"/>
        </slice>
        <from usec="0" sec="1559797203"/>
        <to usec="0" sec="1559797848"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="192.178.90.156" dst_port="25"/>
        </slice>
        <from usec="0" sec="1559797203"/>
        <to usec="0" sec="1559797837"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="36.72.60.235"/>
        </slice>
        <from usec="0" sec="1559797204"/>
        <to usec="0" sec="1559797846"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="23.204.24.86"/>
        </slice>
        <from usec="0" sec="1559797207"/>
        <to usec="0" sec="1559797845"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.165.158.45"/>
        </slice>
        <from usec="0" sec="1559797212"/>
        <to usec="0" sec="1559797838"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.165.5.19"/>
        </slice>
        <from usec="0" sec="1559797213"/>
        <to usec="0" sec="1559797844"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.196.211.137"/>
        </slice>
        <from usec="0" sec="1559797750"/>
        <to usec="0" sec="1559797844"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="139.219.93.219"/>
        </slice>
        <from usec="0" sec="1559797800"/>
        <to usec="0" sec="1559797806"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.165.36.216"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797938"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.165.189.3"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559798028"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.12.28.62"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797935"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="86.87.32.7"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797937"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="220.254.213.140"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797932"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="203.204.116.19"/>
        </slice>
        <from usec="0" sec="1559797201"/>
        <to usec="0" sec="1559797933"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="111.134.122.254"/>
        </slice>
        <from usec="0" sec="1559797201"/>
        <to usec="0" sec="1559797938"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="34.157.38.248"/>
        </slice>
        <from usec="0" sec="1559797201"/>
        <to usec="0" sec="1559798028"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.165.158.205"/>
        </slice>
        <from usec="0" sec="1559797202"/>
        <to usec="0" sec="1559797938"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="185.98.189.169"/>
        </slice>
        <from usec="0" sec="1559797203"/>
        <to usec="0" sec="1559797938"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.165.228.145"/>
        </slice>
        <from usec="0" sec="1559797203"/>
        <to usec="0" sec="1559797932"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="134.237.187.72"/>
        </slice>
        <from usec="0" sec="1559797204"/>
        <to usec="0" sec="1559797932"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,010,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="120.183.72.138"/>
        </slice>
        <from usec="0" sec="1559797225"/>
        <to usec="0" sec="1559797934"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="54.86.106.126"/>
        </slice>
        <from usec="0" sec="1559797232"/>
        <to usec="0" sec="1559797820"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="159.224.118.81"/>
        </slice>
        <from usec="0" sec="1559797779"/>
        <to usec="0" sec="1559797807"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.165.66.176"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559798028"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="139.51.148.144"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559798027"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.27.11.177"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559798007"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="203.204.116.19"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559798010"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.165.210.190"/>
        </slice>
        <from usec="0" sec="1559797201"/>
        <to usec="0" sec="1559798026"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.72.80.79"/>
        </slice>
        <from usec="0" sec="1559797206"/>
        <to usec="0" sec="1559798026"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.165.104.222"/>
        </slice>
        <from usec="0" sec="1559797207"/>
        <to usec="0" sec="1559798022"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="54.29.170.193"/>
        </slice>
        <from usec="0" sec="1559797211"/>
        <to usec="0" sec="1559798024"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.85.146.250"/>
        </slice>
        <from usec="0" sec="1559797225"/>
        <to usec="0" sec="1559798019"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="5.223.55.89"/>
        </slice>
        <from usec="0" sec="1559797458"/>
        <to usec="0" sec="1559798009"/>
    </anomaly>
    <anomaly type="notice" value="0.541546,1.21215,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="45.62.131.4"/>
        </slice>
        <from usec="0" sec="1559797853"/>
        <to usec="0" sec="1559797987"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="120.212.152.112" src_port="42573"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="120.212.152.98"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="185.188.194.233" src_port="52388"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="77.54.157.30"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="35.213.66.197"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="54.48.184.153"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="185.207.2.49" src_port="41778"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="71.11.132.157"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="45.209.46.212"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="202.147.253.146"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="31.242.205.60"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="54.9.156.39"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="80.108.239.16" src_port="41464"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.607163,1.22699,010,0 0 0 1 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="52.200.243.201" dst_port="8889"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797398"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="74.69.163.139"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="80.108.229.136"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="178.0.40.154"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="173.131.22.56" src_port="43232"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="164.135.59.78" src_port="40269"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="81.233.45.187" src_port="58403"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="185.230.27.191"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="81.233.45.241"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="81.233.45.240" src_port="55813"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="54.68.133.215"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="81.233.45.231" src_port="41014"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="185.207.3.230" src_port="43220"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="74.69.109.213" dst_port="111"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="185.207.3.1" dst_port="1244"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="185.207.3.1" dst_port="1254"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="185.207.3.1" dst_port="1295"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="89.248.160.153" dst_port="8830"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="185.207.3.14" dst_port="9195"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.207.3.14" dst_port="9196"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="185.207.3.14" dst_port="9197"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="114.37.13.245" dst_port="6387"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="61.69.255.152" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="94.134.64.16" dst_port="9287"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="94.134.64.16" dst_port="9288"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.207.3.58" dst_port="9289"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.207.3.58" dst_port="9291"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="94.132.236.190" dst_port="623"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="204.221.209.255" dst_port="9283"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="204.221.209.255" dst_port="9284"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="204.221.209.255" dst_port="9285"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="178.237.26.201" dst_port="8545"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="220.140.209.84" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="220.140.209.84" dst_port="6380"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="220.140.209.84" dst_port="6381"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="69.212.233.66" dst_port="19"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="172.94.132.14" src_port="48991" dst_port="6388"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.165.223.214" dst_port="53"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.207.3.46" dst_port="6390"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.207.3.122" src_port="50309" dst_port="6389"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="217.221.35.67" dst_port="81"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.207.3.126" dst_port="6393"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.143.8.117" dst_port="3128"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="54.46.32.210" dst_port="5038"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.207.2.82" dst_port="6391"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.72.80.102" dst_port="53"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="185.207.3.105" dst_port="2000"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.207.3.102" src_port="40892" dst_port="19520"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.207.3.65" dst_port="9193"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.207.3.65" dst_port="9194"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="88.212.124.33" dst_port="20043"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.207.3.70" dst_port="9189"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="185.207.3.70" dst_port="9191"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="217.221.35.131" dst_port="81"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="14.199.251.118" dst_port="2773"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="14.199.251.118" dst_port="2786"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="103.51.54.188" dst_port="3390"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="199.168.123.86" src_port="45663" dst_port="6107"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="185.207.3.177" src_port="45482" dst_port="1537"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.207.3.177" dst_port="1538"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="185.207.3.177" dst_port="1539"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="185.207.3.169" dst_port="5900"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="185.207.3.169" dst_port="5904"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="185.207.3.169" dst_port="5906"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.207.3.169" src_port="57010" dst_port="5907"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.207.3.169" dst_port="5908"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="185.207.3.169" dst_port="5909"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="185.207.3.169" dst_port="5911"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="185.207.3.169" dst_port="5913"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.207.3.169" dst_port="5914"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="203.204.116.19" dst_port="23"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="89.248.167.131" dst_port="2002"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="178.0.208.147" dst_port="6888"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="178.0.208.147" src_port="51065" dst_port="6889"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="113.2.128.202" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="17.25.74.14" dst_port="5917"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="17.25.74.14" dst_port="5919"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="17.25.74.14" dst_port="5920"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="17.25.74.14" dst_port="5921"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.72.80.102" dst_port="53"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797246"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,503,0 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="112.168.54.248"/>
        </slice>
        <from usec="0" sec="1559797425"/>
        <to usec="0" sec="1559797471"/>
    </anomaly>
    <anomaly type="notice" value="0.668452,1.21025,504,1 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.165.66.152" src_port="443"/>
            <filter dst_ip="163.165.66.152" src_port="80"/>
        </slice>
        <from usec="0" sec="1559797208"/>
        <to usec="0" sec="1559797579"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.204.103.59" dst_port="53"/>
        </slice>
        <from usec="0" sec="1559797425"/>
        <to usec="0" sec="1559797471"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,503,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.72.80.238"/>
        </slice>
        <from usec="0" sec="1559797425"/>
        <to usec="0" sec="1559797471"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.4.64.61" dst_port="50348"/>
        </slice>
        <from usec="0" sec="1559797425"/>
        <to usec="0" sec="1559797471"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="202.72.80.116"/>
        </slice>
        <from usec="0" sec="1559797425"/>
        <to usec="0" sec="1559797471"/>
    </anomaly>
    <anomaly type="notice" value="0.607163,1.22699,020,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="172.94.132.1"/>
        </slice>
        <from usec="0" sec="1559797201"/>
        <to usec="0" sec="1559797936"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,504,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="172.94.81.59" dst_ip="163.165.67.78" src_port="443"/>
        </slice>
        <from usec="0" sec="1559797425"/>
        <to usec="0" sec="1559797471"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.204.110.7"/>
        </slice>
        <from usec="0" sec="1559797425"/>
        <to usec="0" sec="1559797471"/>
    </anomaly>
    <anomaly type="notice" value="0.607163,1.22699,020,0 0 0 1 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="160.107.89.204"/>
            <filter dst_ip="18.138.206.9"/>
            <filter dst_ip="35.213.66.197"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559798101"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="185.96.118.168"/>
        </slice>
        <from usec="0" sec="1559797470"/>
        <to usec="0" sec="1559797516"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,011,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="88.83.91.18" src_port="8000"/>
        </slice>
        <from usec="0" sec="1559797470"/>
        <to usec="0" sec="1559797516"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="107.91.29.62" dst_port="7001"/>
        </slice>
        <from usec="0" sec="1559797470"/>
        <to usec="0" sec="1559797516"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="197.216.199.77" dst_port="8088"/>
        </slice>
        <from usec="0" sec="1559797470"/>
        <to usec="0" sec="1559797516"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="20.36.168.168" dst_port="7001"/>
        </slice>
        <from usec="0" sec="1559797470"/>
        <to usec="0" sec="1559797516"/>
    </anomaly>
    <anomaly type="notice" value="0.668452,1.21025,010,1 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="80.108.230.169" src_port="55154" dst_port="10580"/>
            <filter src_ip="80.108.230.169" src_port="55154" dst_port="10578"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559798085"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="107.91.29.62" dst_port="7001"/>
        </slice>
        <from usec="0" sec="1559797695"/>
        <to usec="0" sec="1559797741"/>
    </anomaly>
    <anomaly type="notice" value="0.607163,1.22699,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.204.107.54" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="1559797200"/>
        <to usec="0" sec="1559797741"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="124.231.179.252" dst_ip="133.253.243.135"/>
        </slice>
        <from usec="0" sec="1559797695"/>
        <to usec="0" sec="1559797786"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="204.221.209.255" dst_port="7001"/>
        </slice>
        <from usec="0" sec="1559797695"/>
        <to usec="0" sec="1559797786"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="107.91.1.41" dst_port="7001"/>
        </slice>
        <from usec="0" sec="1559797695"/>
        <to usec="0" sec="1559797786"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="218.55.153.125" dst_ip="203.204.103.59" dst_port="53"/>
            <filter src_ip="204.221.209.255" dst_ip="203.204.103.59" dst_port="53"/>
        </slice>
        <from usec="0" sec="1559797740"/>
        <to usec="0" sec="1559797786"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="218.55.153.125" dst_ip="203.204.103.39" dst_port="53"/>
        </slice>
        <from usec="0" sec="1559797740"/>
        <to usec="0" sec="1559797786"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.204.104.157" dst_port="53"/>
        </slice>
        <from usec="0" sec="1559797740"/>
        <to usec="0" sec="1559797786"/>
    </anomaly>
    <anomaly type="notice" value="0.668452,1.21025,999,1 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="203.204.97.138" src_port="53"/>
            <filter src_ip="203.204.97.138" dst_port="53"/>
            <filter src_port="53" dst_port="53"/>
        </slice>
        <from usec="0" sec="1559797375"/>
        <to usec="0" sec="1559797786"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.65.33.110"/>
        </slice>
        <from usec="0" sec="1559798055"/>
        <to usec="0" sec="1559798101"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.65.33.106"/>
        </slice>
        <from usec="0" sec="1559798055"/>
        <to usec="0" sec="1559798101"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,504,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.165.180.241"/>
        </slice>
        <from usec="0" sec="1559798055"/>
        <to usec="0" sec="1559798101"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="198.135.58.246" dst_ip="203.204.103.59" dst_port="53"/>
        </slice>
        <from usec="0" sec="1559798055"/>
        <to usec="0" sec="1559798101"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,011,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="54.46.32.210"/>
        </slice>
        <from usec="0" sec="1559798055"/>
        <to usec="0" sec="1559798101"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,504,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.165.251.152" src_port="443"/>
        </slice>
        <from usec="0" sec="1559798055"/>
        <to usec="0" sec="1559798101"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.4.66.58"/>
        </slice>
        <from usec="0" sec="1559798055"/>
        <to usec="0" sec="1559798101"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.204.110.7"/>
        </slice>
        <from usec="0" sec="1559798055"/>
        <to usec="0" sec="1559798101"/>
    </anomaly>
    <anomaly type="notice" value="0.784506,1.21291,010,0 0 0 0 0 0 1 0 0 1 0 0,ntscSYN">
        <slice>
            <filter src_ip="108.178.111.102" dst_port="9443"/>
            <filter src_ip="108.178.111.102" dst_port="443"/>
            <filter src_ip="108.178.111.102" dst_port="8443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.734898,1.1979,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="133.27.120.189"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.734898,1.1979,502,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="202.72.86.107"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.734898,1.1979,020,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="203.204.98.118"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.734898,1.1979,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="54.153.74.253"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.734898,1.1979,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="69.137.59.230"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.734898,1.1979,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="74.69.255.118"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.734898,1.1979,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="104.97.42.125"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.734898,1.1979,504,0 0 0 0 0 0 0 0 0 1 0 0,heavy_hitter">
        <slice>
            <filter dst_ip="23.207.12.249"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.734898,1.1979,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="191.35.152.96" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.784506,1.21291,504,0 0 0 0 0 0 1 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.165.216.37" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.734898,1.1979,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="192.13.74.0"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.734898,1.1979,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="198.178.3.100"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.734898,1.1979,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="202.72.82.250" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.734898,1.1979,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="202.72.86.229" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.734898,1.1979,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="203.204.98.150" src_port="53"/>
            <filter dst_ip="203.204.98.150" dst_port="25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.734898,1.1979,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="23.192.210.215"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.734898,1.1979,010,0 0 0 0 0 0 0 0 0 1 0 0,heavy_hitter">
        <slice>
            <filter dst_ip="202.230.211.254"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.734898,1.1979,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="31.242.205.60"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.734898,1.1979,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="69.114.224.205"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.493088,1.21928,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.72.80.102" src_port="53"/>
        </slice>
        <from usec="0" sec="1559797425"/>
        <to usec="0" sec="1559797471"/>
    </anomaly>
</admd:annotation>
