<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="notice" value="0.655553,1.26425,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="182.105.212.193"/>
        </slice>
        <from usec="0" sec="1562476023"/>
        <to usec="0" sec="1562476024"/>
    </anomaly>
    <anomaly type="notice" value="0.655553,1.26425,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.17.116.6" dst_ip="52.196.54.247" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1562476229"/>
        <to usec="0" sec="1562476231"/>
    </anomaly>
    <anomaly type="notice" value="0.655553,1.26425,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.56.121.85" dst_ip="202.196.40.137" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1562476472"/>
        <to usec="0" sec="1562476475"/>
    </anomaly>
    <anomaly type="notice" value="0.655553,1.26425,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.17.150.106" dst_ip="3.150.108.57" src_port="80" dst_port="25062" proto="tcp"/>
        </slice>
        <from usec="0" sec="1562475927"/>
        <to usec="0" sec="1562475928"/>
    </anomaly>
    <anomaly type="notice" value="0.655553,1.26425,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.76.147.44" dst_ip="95.47.235.181" src_port="51276" dst_port="8080" proto="tcp"/>
        </slice>
        <from usec="0" sec="1562475674"/>
        <to usec="0" sec="1562475993"/>
    </anomaly>
    <anomaly type="notice" value="0.655553,1.26425,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.76.131.210" dst_ip="89.48.179.116" src_port="6004" dst_port="36923" proto="udp"/>
        </slice>
        <from usec="0" sec="1562476488"/>
        <to usec="0" sec="1562476489"/>
    </anomaly>
    <anomaly type="notice" value="0.655553,1.26425,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.76.129.232" dst_ip="185.166.250.226" src_port="33748" dst_port="9012" proto="udp"/>
        </slice>
        <from usec="0" sec="1562475602"/>
        <to usec="0" sec="1562475726"/>
    </anomaly>
    <anomaly type="notice" value="0.655553,1.26425,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="172.213.229.226" dst_ip="163.85.143.51" src_port="443" dst_port="53078" proto="udp"/>
        </slice>
        <from usec="0" sec="1562475606"/>
        <to usec="0" sec="1562475697"/>
    </anomaly>
    <anomaly type="notice" value="0.655553,1.26425,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="172.213.229.230" dst_ip="163.85.208.112" src_port="443" dst_port="49515" proto="udp"/>
        </slice>
        <from usec="0" sec="1562475606"/>
        <to usec="0" sec="1562475718"/>
    </anomaly>
    <anomaly type="notice" value="0.655553,1.26425,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="17.111.102.8" dst_ip="202.196.47.61" src_port="443" dst_port="58530" proto="tcp"/>
        </slice>
        <from usec="0" sec="1562475606"/>
        <to usec="0" sec="1562475607"/>
    </anomaly>
    <anomaly type="notice" value="0.655553,1.26425,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="203.76.147.45" dst_port="8291" proto="tcp"/>
        </slice>
        <from usec="0" sec="1562475784"/>
        <to usec="0" sec="1562475785"/>
    </anomaly>
    <anomaly type="notice" value="0.655553,1.26425,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="46.194.212.89" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1562476235"/>
        <to usec="0" sec="1562476264"/>
    </anomaly>
    <anomaly type="notice" value="0.655553,1.26425,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="31.124.113.158" proto="icmp"/>
        </slice>
        <from usec="0" sec="1562476087"/>
        <to usec="0" sec="1562476429"/>
    </anomaly>
    <anomaly type="notice" value="0.655553,1.26425,011,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="117.36.83.152" src_port="65530" proto="tcp"/>
        </slice>
        <from usec="0" sec="1562475984"/>
        <to usec="0" sec="1562475986"/>
    </anomaly>
    <anomaly type="notice" value="0.655553,1.26425,010,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="46.154.10.16" src_port="139"/>
        </slice>
        <from usec="0" sec="1562475918"/>
        <to usec="0" sec="1562475919"/>
    </anomaly>
    <anomaly type="notice" value="0.85426,1.33354,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="181.84.129.136" dst_ip="203.76.147.44" src_port="54143" dst_port="80"/>
        </slice>
        <from usec="0" sec="1562475607"/>
        <to usec="0" sec="1562475665"/>
    </anomaly>
    <anomaly type="notice" value="0.85426,1.33354,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.17.213.161" dst_ip="50.6.55.17" src_port="64960" dst_port="443"/>
        </slice>
        <from usec="0" sec="1562475995"/>
        <to usec="0" sec="1562475996"/>
    </anomaly>
    <anomaly type="notice" value="0.85426,1.33354,503,1 1 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="133.17.245.109" dst_ip="3.150.108.57" src_port="80" dst_port="44386"/>
            <filter src_ip="133.17.245.82" dst_ip="3.150.108.57" src_port="443" dst_port="44488"/>
            <filter src_ip="133.17.245.39" dst_ip="3.150.108.57" src_port="80" dst_port="47014"/>
        </slice>
        <from usec="0" sec="1562476178"/>
        <to usec="0" sec="1562476179"/>
    </anomaly>
    <anomaly type="notice" value="0.85426,1.33354,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.76.142.54" dst_ip="110.212.116.96" src_port="53"/>
        </slice>
        <from usec="0" sec="1562475985"/>
        <to usec="0" sec="1562476179"/>
    </anomaly>
    <anomaly type="notice" value="0.85426,1.33354,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="176.209.212.250" dst_port="23"/>
        </slice>
        <from usec="0" sec="1562476350"/>
        <to usec="0" sec="1562476360"/>
    </anomaly>
    <anomaly type="notice" value="0.85426,1.33354,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="107.41.4.30" dst_port="8945"/>
        </slice>
        <from usec="0" sec="1562475990"/>
        <to usec="0" sec="1562475994"/>
    </anomaly>
    <anomaly type="notice" value="0.85426,1.33354,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="162.31.115.155" dst_port="8945"/>
        </slice>
        <from usec="0" sec="1562475990"/>
        <to usec="0" sec="1562476198"/>
    </anomaly>
    <anomaly type="notice" value="0.747923,1.32242,010,0 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="46.194.212.89" dst_port="445" proto="tcp"/>
        </slice>
        <from usec="0" sec="1562476235"/>
        <to usec="0" sec="1562476236"/>
    </anomaly>
    <anomaly type="notice" value="0.85426,1.33354,999,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="222.169.65.72" src_port="3389"/>
        </slice>
        <from usec="0" sec="1562476214"/>
        <to usec="0" sec="1562476217"/>
    </anomaly>
    <anomaly type="notice" value="0.85426,1.33354,012,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="162.31.115.155" src_port="8945"/>
        </slice>
        <from usec="0" sec="1562476197"/>
        <to usec="0" sec="1562476198"/>
    </anomaly>
    <anomaly type="notice" value="0.85426,1.33354,901,1 1 0 0 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="111.185.227.16" dst_ip="111.185.255.179" src_port="65130" dst_port="1433"/>
            <filter src_ip="111.185.227.16" dst_ip="202.202.244.35" src_port="65088" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1562475995"/>
        <to usec="0" sec="1562475996"/>
    </anomaly>
    <anomaly type="notice" value="0.85426,1.33354,901,1 1 0 0 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="49.149.249.71" dst_ip="202.202.244.27" src_port="65049" dst_port="1433"/>
            <filter src_ip="49.149.249.71" dst_ip="202.202.244.19" src_port="65044" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1562475995"/>
        <to usec="0" sec="1562475996"/>
    </anomaly>
    <anomaly type="notice" value="0.85426,1.33354,901,1 1 0 0 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="49.149.255.182" dst_ip="202.202.244.56" src_port="65065" dst_port="1433"/>
            <filter src_ip="49.149.255.182" dst_ip="202.202.244.240" src_port="64943" dst_port="1433"/>
            <filter src_ip="49.149.255.182" dst_ip="202.202.244.228" src_port="64937" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1562475995"/>
        <to usec="0" sec="1562475996"/>
    </anomaly>
    <anomaly type="notice" value="0.85426,1.33354,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.85.243.85" dst_ip="195.240.233.253" dst_port="443"/>
            <filter src_ip="163.85.243.85"/>
        </slice>
        <from usec="0" sec="1562476058"/>
        <to usec="0" sec="1562476410"/>
    </anomaly>
    <anomaly type="notice" value="0.784544,1.30369,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="80.109.193.131" dst_port="1101"/>
        </slice>
        <from usec="0" sec="1562475600"/>
        <to usec="0" sec="1562475646"/>
    </anomaly>
    <anomaly type="notice" value="0.784544,1.30369,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="80.109.193.131" dst_port="1102"/>
        </slice>
        <from usec="0" sec="1562475600"/>
        <to usec="0" sec="1562475646"/>
    </anomaly>
    <anomaly type="notice" value="0.784544,1.30369,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="80.109.193.131" dst_port="1104"/>
        </slice>
        <from usec="0" sec="1562475600"/>
        <to usec="0" sec="1562475646"/>
    </anomaly>
    <anomaly type="notice" value="0.784544,1.30369,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="80.109.193.131" src_port="53366" dst_port="1105"/>
        </slice>
        <from usec="0" sec="1562475600"/>
        <to usec="0" sec="1562475646"/>
    </anomaly>
    <anomaly type="notice" value="0.784544,1.30369,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="80.109.193.131" dst_port="1108"/>
        </slice>
        <from usec="0" sec="1562475600"/>
        <to usec="0" sec="1562475646"/>
    </anomaly>
    <anomaly type="notice" value="0.784544,1.30369,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="80.109.193.131" dst_port="1109"/>
        </slice>
        <from usec="0" sec="1562475600"/>
        <to usec="0" sec="1562475646"/>
    </anomaly>
    <anomaly type="notice" value="0.784544,1.30369,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="80.109.193.131" src_port="53366" dst_port="1110"/>
        </slice>
        <from usec="0" sec="1562475600"/>
        <to usec="0" sec="1562475646"/>
    </anomaly>
    <anomaly type="notice" value="0.784544,1.30369,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="80.109.193.131" src_port="53366" dst_port="1113"/>
        </slice>
        <from usec="0" sec="1562475600"/>
        <to usec="0" sec="1562475646"/>
    </anomaly>
    <anomaly type="notice" value="0.784544,1.30369,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="80.109.193.131" dst_port="1116"/>
        </slice>
        <from usec="0" sec="1562475600"/>
        <to usec="0" sec="1562475646"/>
    </anomaly>
    <anomaly type="notice" value="0.784544,1.30369,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="80.109.193.131" dst_port="1119"/>
        </slice>
        <from usec="0" sec="1562475600"/>
        <to usec="0" sec="1562475646"/>
    </anomaly>
    <anomaly type="notice" value="0.784544,1.30369,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="125.188.96.47" dst_port="3478"/>
        </slice>
        <from usec="0" sec="1562475600"/>
        <to usec="0" sec="1562475646"/>
    </anomaly>
    <anomaly type="notice" value="0.784544,1.30369,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="107.41.3.187" dst_port="8945"/>
        </slice>
        <from usec="0" sec="1562476005"/>
        <to usec="0" sec="1562476051"/>
    </anomaly>
    <anomaly type="notice" value="0.784544,1.30369,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="5.61.188.40"/>
        </slice>
        <from usec="0" sec="1562476185"/>
        <to usec="0" sec="1562476231"/>
    </anomaly>
    <anomaly type="notice" value="0.784544,1.30369,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.76.139.255" dst_port="53"/>
        </slice>
        <from usec="0" sec="1562476185"/>
        <to usec="0" sec="1562476231"/>
    </anomaly>
    <anomaly type="notice" value="0.784544,1.30369,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1562476185"/>
        <to usec="0" sec="1562476231"/>
    </anomaly>
    <anomaly type="notice" value="0.784544,1.30369,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.76.139.228" dst_port="53"/>
        </slice>
        <from usec="0" sec="1562476185"/>
        <to usec="0" sec="1562476231"/>
    </anomaly>
    <anomaly type="notice" value="0.784544,1.30369,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.4.191.78" dst_port="23"/>
        </slice>
        <from usec="0" sec="1562476185"/>
        <to usec="0" sec="1562476231"/>
    </anomaly>
    <anomaly type="notice" value="0.784544,1.30369,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="54.225.62.113"/>
        </slice>
        <from usec="0" sec="1562476185"/>
        <to usec="0" sec="1562476231"/>
    </anomaly>
    <anomaly type="notice" value="0.784544,1.30369,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.196.241.123"/>
        </slice>
        <from usec="0" sec="1562476185"/>
        <to usec="0" sec="1562476231"/>
    </anomaly>
    <anomaly type="notice" value="0.784544,1.30369,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.196.241.107"/>
        </slice>
        <from usec="0" sec="1562476185"/>
        <to usec="0" sec="1562476231"/>
    </anomaly>
    <anomaly type="notice" value="0.784544,1.30369,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.4.189.234"/>
        </slice>
        <from usec="0" sec="1562476185"/>
        <to usec="0" sec="1562476231"/>
    </anomaly>
    <anomaly type="notice" value="0.784544,1.30369,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.4.189.181"/>
        </slice>
        <from usec="0" sec="1562476185"/>
        <to usec="0" sec="1562476231"/>
    </anomaly>
    <anomaly type="notice" value="0.784544,1.30369,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.85.67.184"/>
        </slice>
        <from usec="0" sec="1562476185"/>
        <to usec="0" sec="1562476231"/>
    </anomaly>
    <anomaly type="notice" value="0.784544,1.30369,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="54.198.2.35"/>
        </slice>
        <from usec="0" sec="1562476185"/>
        <to usec="0" sec="1562476231"/>
    </anomaly>
    <anomaly type="notice" value="0.784544,1.30369,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.76.174.61"/>
        </slice>
        <from usec="0" sec="1562476185"/>
        <to usec="0" sec="1562476231"/>
    </anomaly>
    <anomaly type="notice" value="0.784544,1.30369,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="17.108.55.175"/>
        </slice>
        <from usec="0" sec="1562476185"/>
        <to usec="0" sec="1562476231"/>
    </anomaly>
    <anomaly type="notice" value="0.784544,1.30369,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="18.90.42.17"/>
        </slice>
        <from usec="0" sec="1562476185"/>
        <to usec="0" sec="1562476231"/>
    </anomaly>
    <anomaly type="notice" value="0.784544,1.30369,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.196.240.11"/>
        </slice>
        <from usec="0" sec="1562476185"/>
        <to usec="0" sec="1562476231"/>
    </anomaly>
    <anomaly type="notice" value="0.784544,1.30369,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="193.223.226.143" src_port="56282" dst_port="445"/>
        </slice>
        <from usec="0" sec="1562476230"/>
        <to usec="0" sec="1562476276"/>
    </anomaly>
    <anomaly type="notice" value="0.784544,1.30369,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.76.129.200" dst_port="53"/>
        </slice>
        <from usec="0" sec="1562476455"/>
        <to usec="0" sec="1562476501"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,504,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="104.229.240.203"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="113.174.209.110"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,010,0 0 0 0 0 0 0 0 0 1 0 0,poscaSYN">
        <slice>
            <filter src_ip="114.100.116.154"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="115.159.57.149"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="122.101.239.193"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="1.131.28.111"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="124.6.184.166"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="126.221.175.224"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="128.199.220.17" src_port="55958" dst_port="541"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,020,0 0 0 0 0 0 0 0 0 1 0 0,ttl_error">
        <slice>
            <filter src_ip="133.17.232.13"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,020,0 0 0 0 0 0 0 0 0 1 0 0,hostout">
        <slice>
            <filter src_ip="133.17.232.32"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="133.17.69.2"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="133.17.244.134"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="134.173.177.114"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="137.134.157.170"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="139.92.102.221" dst_port="8000"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="139.223.167.41"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="139.223.205.181"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="139.223.215.241" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="157.144.98.196"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,010,0 0 0 0 0 0 0 0 0 1 0 0,ntscSYN">
        <slice>
            <filter src_ip="159.130.200.47"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="163.85.65.189"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="163.85.176.170"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="163.85.49.93"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="172.87.197.251"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="115.135.250.152"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="185.241.176.233"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="185.180.25.106"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="186.1.69.117"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="188.234.24.244" src_port="17524" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="197.91.125.92"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="202.196.47.173" src_port="53"/>
            <filter src_ip="202.196.47.173" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.717421,1.20461,504,1 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="203.76.132.83" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,502,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="203.76.135.148" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="203.76.134.216"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,020,0 0 0 0 0 0 0 0 0 1 0 0,hostout">
        <slice>
            <filter src_ip="203.76.139.46"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="203.76.139.222" dst_ip="66.100.57.122" src_port="25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,020,0 0 0 0 0 0 0 0 0 1 0 0,hostout">
        <slice>
            <filter src_ip="203.76.141.113"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="217.58.64.229"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="219.85.8.174"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="144.207.27.107"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="46.124.219.151"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="52.33.213.47"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="52.251.41.3" dst_port="53"/>
            <filter src_ip="52.251.41.3" dst_ip="203.76.143.141" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="54.147.230.199"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="60.121.119.223"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="77.39.8.161"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="82.45.201.7"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="118.235.172.238"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="163.52.25.113"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,502,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter src_ip="112.170.75.187" dst_ip="163.85.10.242" dst_port="22"/>
            <filter dst_ip="163.85.10.242"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.85.67.110" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="163.85.176.170" src_port="443"/>
            <filter src_ip="8.12.7.1" dst_ip="163.85.176.170" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.586789,1.19229,010,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="89.48.191.98" src_port="41051"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.85.234.74" src_port="443"/>
            <filter dst_ip="163.85.234.74" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,010,0 0 0 0 0 0 0 0 0 1 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="163.85.24.51" dst_port="2222"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="18.87.231.109"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="202.76.80.186"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="203.76.129.196" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,010,0 0 0 0 0 0 0 0 0 1 0 0,ntscSYN">
        <slice>
            <filter src_ip="139.223.138.77" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,502,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="203.76.142.225" dst_port="22"/>
            <filter src_ip="103.157.160.220" dst_ip="203.76.142.225" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,504,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="208.150.200.215"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="213.12.62.77"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="218.135.105.118"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="3.247.14.243"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="34.190.138.0"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="36.160.127.116"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.586789,1.19229,999,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="203.76.139.255" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="45.179.150.150"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="203.76.147.44"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="68.72.215.97"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.436573,1.1866,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter src_ip="133.17.200.47" dst_ip="85.149.147.118" src_port="5900"/>
            <filter src_ip="133.17.200.43" dst_ip="85.149.147.118" src_port="5900"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.586789,1.19229,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="133.17.69.112" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.586789,1.19229,999,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="133.17.247.240" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.586789,1.19229,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="13.194.4.76" dst_ip="203.76.129.230" src_port="443" dst_port="61814"/>
            <filter src_ip="13.194.4.76" dst_ip="203.76.129.230" src_port="443" dst_port="20135"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.586789,1.19229,010,0 0 0 0 0 0 0 0 0 1 1 0,sntscSYN">
        <slice>
            <filter src_ip="139.92.110.43" dst_port="25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.586789,1.19229,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="151.69.45.199" dst_ip="202.196.42.191" src_port="443" dst_port="50389"/>
            <filter src_ip="151.69.45.199" dst_ip="202.196.42.191" src_port="443" dst_port="50388"/>
            <filter src_ip="151.69.45.199" dst_ip="202.196.42.191" src_port="443" dst_port="50297"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.586789,1.19229,010,0 0 0 0 0 0 0 0 0 1 1 0,sntscSYN">
        <slice>
            <filter src_ip="154.186.152.222" src_port="15812" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.586789,1.19229,010,0 0 0 0 0 0 0 0 0 1 1 0,sntscSYN">
        <slice>
            <filter src_ip="157.71.166.140" src_port="50817" dst_port="2631"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.586789,1.19229,999,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="163.85.48.96" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.586789,1.19229,010,0 0 0 0 0 0 0 0 0 1 1 0,sntscSYN">
        <slice>
            <filter src_ip="190.149.175.191" dst_port="445"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.586789,1.19229,010,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="192.140.179.185" src_port="52936" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.586789,1.19229,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="193.55.245.67" dst_ip="203.76.147.44" src_port="443"/>
            <filter src_ip="193.55.245.67" dst_ip="163.85.64.219" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.586789,1.19229,010,0 0 0 0 0 0 0 0 0 1 1 0,ntscSYN139445">
        <slice>
            <filter src_ip="193.223.226.148" src_port="56509" dst_port="445"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.586789,1.19229,020,0 0 0 0 0 0 0 0 0 1 1 0,hostout">
        <slice>
            <filter src_ip="203.76.139.142"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.586789,1.19229,504,0 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="203.76.143.35" dst_ip="31.242.81.247" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.586789,1.19229,010,0 0 0 0 0 0 0 0 0 1 1 0,sntscSYN">
        <slice>
            <filter src_ip="206.58.137.243" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.586789,1.19229,010,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="45.214.34.12" src_port="27778" dst_port="23"/>
            <filter src_ip="45.214.34.12" src_port="25730" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.586789,1.19229,010,0 0 0 0 0 0 0 0 0 1 1 0,sntscSYN">
        <slice>
            <filter src_ip="46.122.176.133" dst_port="5050"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.586789,1.19229,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="52.62.198.205" dst_ip="163.85.67.225" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.586789,1.19229,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="54.92.6.217" dst_ip="163.85.142.98" src_port="443" dst_port="50145"/>
            <filter src_ip="54.92.6.217" dst_ip="163.85.142.98" src_port="443" dst_port="50144"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.586789,1.19229,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="66.100.57.122" dst_ip="203.76.139.222" dst_port="25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.586789,1.19229,010,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="67.50.71.224" src_port="62227" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.586789,1.19229,011,0 0 0 0 0 0 0 0 0 1 1 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="144.207.27.107" src_port="8046" dst_port="48888"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.586789,1.19229,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="163.85.24.50" dst_ip="13.128.109.196" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.586789,1.19229,010,0 0 0 0 0 0 0 0 0 1 1 0,sptpDoSSYN">
        <slice>
            <filter src_ip="46.154.10.16" dst_ip="163.85.11.110" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.586789,1.19229,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="203.76.147.44" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.586789,1.19229,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.85.243.175" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.586789,1.19229,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="202.196.47.203" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.586789,1.19229,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="202.196.45.86" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.586789,1.19229,999,0 0 0 0 0 0 0 0 0 1 1 0,mptpla">
        <slice>
            <filter dst_ip="203.76.133.174" src_port="53"/>
            <filter dst_ip="203.76.133.174" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.586789,1.19229,010,0 0 0 0 0 0 0 0 0 1 1 0,ptpDoSSYN">
        <slice>
            <filter src_ip="103.146.207.56" dst_ip="203.76.141.96" dst_port="23"/>
            <filter src_ip="114.229.2.63" dst_ip="203.76.141.96" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.586789,1.19229,010,0 0 0 0 0 0 0 0 0 1 1 0,ptpDoSSYN">
        <slice>
            <filter src_ip="103.146.207.56" dst_ip="203.76.141.161" dst_port="993"/>
            <filter src_ip="114.229.2.63" dst_ip="203.76.141.161" dst_port="993"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.586789,1.19229,012,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="163.85.66.45" dst_ip="212.90.70.15" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.586789,1.19229,504,0 0 0 0 0 0 0 0 0 1 1 0,mptpla">
        <slice>
            <filter src_ip="133.17.148.210" dst_ip="52.35.91.67" src_port="50390" dst_port="443"/>
            <filter src_ip="133.17.235.119" dst_ip="52.35.91.67" src_port="62106" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.586789,1.19229,020,0 0 0 0 0 0 0 0 0 1 1 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="77.38.15.93"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.729595,1.22341,010,0 0 0 0 0 0 0 0 0 1 0 1,ptmp">
        <slice>
            <filter src_ip="89.48.191.98" src_port="41051"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
