<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="suspicious" value="0.848598,1.16053,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.212.170.196" dst_ip="163.194.253.134" src_port="443" dst_port="64475"/>
        </slice>
        <from usec="0" sec="1565240418"/>
        <to usec="0" sec="1565240475"/>
    </anomaly>
    <anomaly type="suspicious" value="0.848598,1.16053,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="99.132.197.205" dst_ip="133.21.36.127" src_port="443" dst_port="53617"/>
        </slice>
        <from usec="0" sec="1565240400"/>
        <to usec="0" sec="1565240513"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11482,1.26693,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.168.42.67"/>
        </slice>
        <from usec="0" sec="1565240473"/>
        <to usec="0" sec="1565241289"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11482,1.26693,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="23.156.162.45"/>
        </slice>
        <from usec="0" sec="1565240478"/>
        <to usec="0" sec="1565240881"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11482,1.26693,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="185.118.22.132"/>
        </slice>
        <from usec="0" sec="1565240683"/>
        <to usec="0" sec="1565240685"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11482,1.26693,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="81.248.177.12" dst_port="23"/>
        </slice>
        <from usec="0" sec="1565240531"/>
        <to usec="0" sec="1565240542"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11482,1.26693,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="77.200.138.232" src_port="5085" dst_port="34756"/>
        </slice>
        <from usec="0" sec="1565240581"/>
        <to usec="0" sec="1565240742"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11482,1.26693,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="51.159.40.47" src_port="5069" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1565240436"/>
        <to usec="0" sec="1565240437"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11482,1.26693,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="117.230.158.90" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1565240552"/>
        <to usec="0" sec="1565240559"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11482,1.26693,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="185.234.110.171"/>
        </slice>
        <from usec="0" sec="1565240404"/>
        <to usec="0" sec="1565240406"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11482,1.26693,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="37.142.67.138"/>
        </slice>
        <from usec="0" sec="1565241175"/>
        <to usec="0" sec="1565241176"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11482,1.26693,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="155.177.208.130"/>
        </slice>
        <from usec="0" sec="1565240805"/>
        <to usec="0" sec="1565241239"/>
    </anomaly>
    <anomaly type="suspicious" value="0.848598,1.16053,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="3.68.3.9"/>
        </slice>
        <from usec="0" sec="1565240439"/>
        <to usec="0" sec="1565240440"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11482,1.26693,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="155.177.254.248"/>
        </slice>
        <from usec="0" sec="1565240850"/>
        <to usec="0" sec="1565241077"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11482,1.26693,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="111.126.170.230" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1565240626"/>
        <to usec="0" sec="1565240630"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11482,1.26693,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="61.200.178.233" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1565240943"/>
        <to usec="0" sec="1565240944"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11482,1.26693,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="119.189.154.209" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1565241296"/>
        <to usec="0" sec="1565241298"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11482,1.26693,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="61.97.240.238" dst_port="63389"/>
        </slice>
        <from usec="0" sec="1565240925"/>
        <to usec="0" sec="1565240927"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11482,1.26693,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="124.31.231.30" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1565241292"/>
        <to usec="0" sec="1565241293"/>
    </anomaly>
    <anomaly type="suspicious" value="0.848598,1.16053,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="171.27.250.206" dst_port="445"/>
        </slice>
        <from usec="0" sec="1565241255"/>
        <to usec="0" sec="1565241257"/>
    </anomaly>
    <anomaly type="suspicious" value="0.848598,1.16053,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="60.169.111.162" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1565240959"/>
        <to usec="0" sec="1565240963"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11482,1.26693,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="42.104.119.161" dst_port="8291"/>
        </slice>
        <from usec="0" sec="1565241106"/>
        <to usec="0" sec="1565241118"/>
    </anomaly>
    <anomaly type="suspicious" value="0.848598,1.16053,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="175.160.53.95" dst_port="445"/>
        </slice>
        <from usec="0" sec="1565240633"/>
        <to usec="0" sec="1565240636"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11482,1.26693,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="2.180.159.90" dst_port="8291"/>
        </slice>
        <from usec="0" sec="1565240727"/>
        <to usec="0" sec="1565240746"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11482,1.26693,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.234.110.171" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1565240624"/>
        <to usec="0" sec="1565240628"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11482,1.26693,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="112.125.240.189" dst_port="445"/>
            <filter src_ip="112.125.240.189" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1565240464"/>
        <to usec="0" sec="1565240475"/>
    </anomaly>
    <anomaly type="suspicious" value="0.848598,1.16053,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="221.91.92.157" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1565240641"/>
        <to usec="0" sec="1565240655"/>
    </anomaly>
    <anomaly type="suspicious" value="0.848598,1.16053,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="114.191.160.116" dst_port="445"/>
        </slice>
        <from usec="0" sec="1565241150"/>
        <to usec="0" sec="1565241155"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11482,1.26693,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="220.135.125.209" dst_port="65529"/>
        </slice>
        <from usec="0" sec="1565240962"/>
        <to usec="0" sec="1565241078"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11482,1.26693,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="113.177.237.201" dst_port="1433"/>
            <filter src_ip="113.177.237.201" dst_port="445"/>
        </slice>
        <from usec="0" sec="1565240600"/>
        <to usec="0" sec="1565240615"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11482,1.26693,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="113.72.241.226" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1565240446"/>
        <to usec="0" sec="1565240448"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11482,1.26693,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="113.232.104.154" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1565240697"/>
        <to usec="0" sec="1565240699"/>
    </anomaly>
    <anomaly type="suspicious" value="0.848598,1.16053,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="5.134.169.19" dst_port="445"/>
        </slice>
        <from usec="0" sec="1565240873"/>
        <to usec="0" sec="1565240877"/>
    </anomaly>
    <anomaly type="suspicious" value="0.848598,1.16053,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="112.125.228.45" dst_port="445"/>
        </slice>
        <from usec="0" sec="1565241146"/>
        <to usec="0" sec="1565241147"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11482,1.26693,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="112.125.228.47" dst_port="445"/>
        </slice>
        <from usec="0" sec="1565240532"/>
        <to usec="0" sec="1565240535"/>
    </anomaly>
    <anomaly type="suspicious" value="0.848598,1.16053,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="219.129.182.50" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1565240957"/>
        <to usec="0" sec="1565240964"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11482,1.26693,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="50.179.46.72"/>
        </slice>
        <from usec="0" sec="1565241197"/>
        <to usec="0" sec="1565241200"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11482,1.26693,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="121.192.141.183" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1565241197"/>
        <to usec="0" sec="1565241201"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11482,1.26693,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="171.74.25.153" dst_port="8291"/>
        </slice>
        <from usec="0" sec="1565240749"/>
        <to usec="0" sec="1565240753"/>
    </anomaly>
    <anomaly type="suspicious" value="0.848598,1.16053,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="41.33.237.247" dst_port="445"/>
        </slice>
        <from usec="0" sec="1565241098"/>
        <to usec="0" sec="1565241101"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11482,1.26693,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="62.35.10.17" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1565240778"/>
        <to usec="0" sec="1565240779"/>
    </anomaly>
    <anomaly type="suspicious" value="0.848598,1.16053,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="58.234.53.14" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1565240873"/>
        <to usec="0" sec="1565240875"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11482,1.26693,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="107.89.47.227"/>
        </slice>
        <from usec="0" sec="1565241115"/>
        <to usec="0" sec="1565241116"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11482,1.26693,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="162.77.160.111"/>
        </slice>
        <from usec="0" sec="1565240652"/>
        <to usec="0" sec="1565240654"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11482,1.26693,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="188.216.3.152"/>
        </slice>
        <from usec="0" sec="1565241093"/>
        <to usec="0" sec="1565241094"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11482,1.26693,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="23.172.190.187"/>
        </slice>
        <from usec="0" sec="1565240809"/>
        <to usec="0" sec="1565240810"/>
    </anomaly>
    <anomaly type="suspicious" value="0.848598,1.16053,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="45.177.135.170"/>
        </slice>
        <from usec="0" sec="1565240961"/>
        <to usec="0" sec="1565240962"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11482,1.26693,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="89.68.160.54"/>
        </slice>
        <from usec="0" sec="1565240451"/>
        <to usec="0" sec="1565241051"/>
    </anomaly>
    <anomaly type="suspicious" value="0.87856,1.16275,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="202.186.143.64"/>
        </slice>
        <from usec="0" sec="1565240418"/>
        <to usec="0" sec="1565240424"/>
    </anomaly>
    <anomaly type="suspicious" value="0.87856,1.16275,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1565240400"/>
        <to usec="0" sec="1565241228"/>
    </anomaly>
    <anomaly type="suspicious" value="0.87856,1.16275,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1565240400"/>
        <to usec="0" sec="1565241048"/>
    </anomaly>
    <anomaly type="suspicious" value="0.87856,1.16275,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="110.133.217.90"/>
        </slice>
        <from usec="0" sec="1565240400"/>
        <to usec="0" sec="1565240778"/>
    </anomaly>
    <anomaly type="suspicious" value="0.87856,1.16275,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="163.194.255.59"/>
        </slice>
        <from usec="0" sec="1565240400"/>
        <to usec="0" sec="1565240778"/>
    </anomaly>
    <anomaly type="suspicious" value="0.87856,1.16275,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.25.6.108"/>
        </slice>
        <from usec="0" sec="1565240401"/>
        <to usec="0" sec="1565240778"/>
    </anomaly>
    <anomaly type="suspicious" value="0.87856,1.16275,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="5.21.245.233"/>
        </slice>
        <from usec="0" sec="1565240410"/>
        <to usec="0" sec="1565240778"/>
    </anomaly>
    <anomaly type="suspicious" value="0.87856,1.16275,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="31.242.172.229"/>
        </slice>
        <from usec="0" sec="1565240487"/>
        <to usec="0" sec="1565240778"/>
    </anomaly>
    <anomaly type="suspicious" value="0.87856,1.16275,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="54.111.33.122"/>
        </slice>
        <from usec="0" sec="1565240640"/>
        <to usec="0" sec="1565240778"/>
    </anomaly>
    <anomaly type="suspicious" value="0.87856,1.16275,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="169.197.171.174"/>
        </slice>
        <from usec="0" sec="1565240643"/>
        <to usec="0" sec="1565240714"/>
    </anomaly>
    <anomaly type="suspicious" value="0.87856,1.16275,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="5.21.245.233" dst_ip="203.179.134.203" dst_port="22"/>
        </slice>
        <from usec="0" sec="1565240400"/>
        <to usec="0" sec="1565241135"/>
    </anomaly>
    <anomaly type="suspicious" value="0.87856,1.16275,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.194.254.226" src_port="443"/>
        </slice>
        <from usec="0" sec="1565240402"/>
        <to usec="0" sec="1565241137"/>
    </anomaly>
    <anomaly type="suspicious" value="0.87856,1.16275,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="107.231.236.174"/>
        </slice>
        <from usec="0" sec="1565240412"/>
        <to usec="0" sec="1565241137"/>
    </anomaly>
    <anomaly type="suspicious" value="0.87856,1.16275,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="208.155.17.193"/>
        </slice>
        <from usec="0" sec="1565240730"/>
        <to usec="0" sec="1565241125"/>
    </anomaly>
    <anomaly type="suspicious" value="0.87856,1.16275,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="35.173.3.13"/>
        </slice>
        <from usec="0" sec="1565240852"/>
        <to usec="0" sec="1565241053"/>
    </anomaly>
    <anomaly type="suspicious" value="0.9623,1.16507,504,1 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.194.215.198" dst_ip="164.4.104.45" dst_port="443"/>
        </slice>
        <from usec="0" sec="1565240955"/>
        <to usec="0" sec="1565241134"/>
    </anomaly>
    <anomaly type="suspicious" value="0.87856,1.16275,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="222.174.2.3"/>
        </slice>
        <from usec="0" sec="1565241061"/>
        <to usec="0" sec="1565241107"/>
    </anomaly>
    <anomaly type="suspicious" value="0.87856,1.16275,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="149.231.32.165"/>
        </slice>
        <from usec="0" sec="1565240401"/>
        <to usec="0" sec="1565241228"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23766,1.32912,901,0 0 0 0 1 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1565240400"/>
        <to usec="0" sec="1565241228"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23766,1.32912,901,0 0 0 0 1 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1565240400"/>
        <to usec="0" sec="1565241048"/>
    </anomaly>
    <anomaly type="suspicious" value="1.3462,1.43812,901,0 0 0 0 0 1 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1565240400"/>
        <to usec="0" sec="1565241228"/>
    </anomaly>
    <anomaly type="suspicious" value="1.3462,1.43812,901,0 0 0 0 0 1 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1565240400"/>
        <to usec="0" sec="1565241048"/>
    </anomaly>
    <anomaly type="suspicious" value="1.14174,1.19841,999,1 0 0 0 0 0 1 1 1 0 0 0,alphfl">
        <slice>
            <filter src_ip="142.103.149.7" dst_ip="203.179.142.183" dst_port="123"/>
        </slice>
        <from usec="0" sec="1565240400"/>
        <to usec="0" sec="1565241301"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0721,1.19615,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.179.132.177" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="1565240400"/>
        <to usec="0" sec="1565240986"/>
    </anomaly>
    <anomaly type="suspicious" value="0.872172,1.14348,010,0 0 0 0 0 0 1 1 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="163.194.169.147" src_port="32766"/>
        </slice>
        <from usec="0" sec="1565240400"/>
        <to usec="0" sec="1565240986"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0721,1.19615,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="133.21.8.252" src_port="53"/>
        </slice>
        <from usec="0" sec="1565240760"/>
        <to usec="0" sec="1565240806"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0721,1.19615,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="133.136.96.223" src_port="53"/>
        </slice>
        <from usec="0" sec="1565240760"/>
        <to usec="0" sec="1565240986"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0721,1.19615,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.194.223.13" dst_port="53"/>
        </slice>
        <from usec="0" sec="1565240760"/>
        <to usec="0" sec="1565240986"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0721,1.19615,999,0 0 0 0 0 0 1 1 1 0 0 0,alphfl">
        <slice>
            <filter src_ip="142.103.149.7" dst_ip="203.179.143.14" dst_port="123"/>
        </slice>
        <from usec="0" sec="1565240400"/>
        <to usec="0" sec="1565241301"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0721,1.19615,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="133.21.71.209" src_port="53"/>
        </slice>
        <from usec="0" sec="1565240760"/>
        <to usec="0" sec="1565240806"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0721,1.19615,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="133.21.71.208" src_port="53"/>
        </slice>
        <from usec="0" sec="1565240760"/>
        <to usec="0" sec="1565240806"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0721,1.19615,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="133.21.71.210" src_port="53"/>
        </slice>
        <from usec="0" sec="1565240760"/>
        <to usec="0" sec="1565240806"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0721,1.19615,504,0 0 0 0 0 0 1 1 1 0 0 0,salphfl">
        <slice>
            <filter src_ip="204.235.13.112" dst_ip="163.194.215.196" src_port="443"/>
        </slice>
        <from usec="0" sec="1565240760"/>
        <to usec="0" sec="1565240806"/>
    </anomaly>
    <anomaly type="suspicious" value="0.872172,1.14348,999,0 0 0 0 0 0 1 1 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.179.132.132" dst_ip="5.50.100.56" src_port="42143"/>
        </slice>
        <from usec="0" sec="1565240760"/>
        <to usec="0" sec="1565240806"/>
    </anomaly>
    <anomaly type="suspicious" value="0.872172,1.14348,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.134.172.238" src_port="53"/>
            <filter dst_ip="202.134.172.238" dst_port="53"/>
        </slice>
        <from usec="0" sec="1565240760"/>
        <to usec="0" sec="1565240806"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0721,1.19615,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.179.143.32" dst_port="53"/>
        </slice>
        <from usec="0" sec="1565240760"/>
        <to usec="0" sec="1565240986"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0721,1.19615,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="133.21.193.40" dst_port="53"/>
        </slice>
        <from usec="0" sec="1565240760"/>
        <to usec="0" sec="1565240806"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0721,1.19615,504,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.194.15.2" src_port="443"/>
        </slice>
        <from usec="0" sec="1565240760"/>
        <to usec="0" sec="1565240806"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0721,1.19615,010,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.4.144.11" dst_port="50348"/>
        </slice>
        <from usec="0" sec="1565240760"/>
        <to usec="0" sec="1565240806"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0721,1.19615,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.194.221.55" dst_port="26721"/>
        </slice>
        <from usec="0" sec="1565240760"/>
        <to usec="0" sec="1565240986"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0721,1.19615,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.194.152.168" dst_port="53"/>
        </slice>
        <from usec="0" sec="1565240760"/>
        <to usec="0" sec="1565240806"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0721,1.19615,010,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.4.144.90" dst_port="50356"/>
        </slice>
        <from usec="0" sec="1565240760"/>
        <to usec="0" sec="1565240986"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0721,1.19615,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.140.224.80" src_port="53"/>
            <filter dst_ip="202.140.224.80" dst_port="53"/>
        </slice>
        <from usec="0" sec="1565240760"/>
        <to usec="0" sec="1565240806"/>
    </anomaly>
    <anomaly type="suspicious" value="0.872172,1.14348,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.194.128.157" src_port="53"/>
        </slice>
        <from usec="0" sec="1565240760"/>
        <to usec="0" sec="1565240986"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0721,1.19615,504,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.194.255.147" src_port="443"/>
        </slice>
        <from usec="0" sec="1565240760"/>
        <to usec="0" sec="1565240806"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0721,1.19615,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.179.132.132" dst_port="42143"/>
        </slice>
        <from usec="0" sec="1565240760"/>
        <to usec="0" sec="1565240986"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0721,1.19615,010,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.196.201.117" dst_port="54756"/>
        </slice>
        <from usec="0" sec="1565240760"/>
        <to usec="0" sec="1565240806"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0721,1.19615,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.194.21.43" dst_port="53"/>
        </slice>
        <from usec="0" sec="1565240760"/>
        <to usec="0" sec="1565240806"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0721,1.19615,999,0 0 0 0 0 0 1 1 1 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.179.137.202" dst_port="53"/>
        </slice>
        <from usec="0" sec="1565240760"/>
        <to usec="0" sec="1565240986"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0721,1.19615,999,0 0 0 0 0 0 1 1 1 0 0 0,salphfl">
        <slice>
            <filter src_ip="69.251.136.21" dst_ip="203.179.133.176" dst_port="53"/>
        </slice>
        <from usec="0" sec="1565240760"/>
        <to usec="0" sec="1565240986"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0721,1.19615,503,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.21.50.61" src_port="80"/>
            <filter dst_ip="133.21.50.61" src_port="443"/>
        </slice>
        <from usec="0" sec="1565240760"/>
        <to usec="0" sec="1565240806"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0721,1.19615,010,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.4.146.11" dst_port="50348"/>
        </slice>
        <from usec="0" sec="1565240760"/>
        <to usec="0" sec="1565240986"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0721,1.19615,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="133.21.80.199" dst_port="6881"/>
        </slice>
        <from usec="0" sec="1565240760"/>
        <to usec="0" sec="1565240806"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0721,1.19615,504,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.140.224.194" src_port="443"/>
        </slice>
        <from usec="0" sec="1565240760"/>
        <to usec="0" sec="1565240806"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0721,1.19615,010,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.4.146.91" dst_port="50356"/>
        </slice>
        <from usec="0" sec="1565240760"/>
        <to usec="0" sec="1565240986"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0721,1.19615,999,0 0 0 0 0 0 1 1 1 0 0 0,mptpla">
        <slice>
            <filter src_ip="198.192.233.4" dst_ip="133.136.254.36" dst_port="53"/>
            <filter src_ip="198.192.233.5" dst_ip="133.136.254.36" dst_port="53"/>
            <filter src_ip="185.234.110.171" dst_ip="133.136.254.36" dst_port="53"/>
        </slice>
        <from usec="0" sec="1565240760"/>
        <to usec="0" sec="1565240806"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07386,1.16141,504,0 0 0 0 0 0 1 1 1 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.194.254.237" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0721,1.19615,010,0 0 0 0 0 0 1 1 1 0 0 0,mptpla">
        <slice>
            <filter src_ip="17.129.25.137" dst_ip="203.179.152.51" src_port="443"/>
            <filter src_ip="172.106.148.169" dst_ip="203.179.152.51" src_port="443"/>
        </slice>
        <from usec="0" sec="1565240760"/>
        <to usec="0" sec="1565240806"/>
    </anomaly>
    <anomaly type="suspicious" value="0.872172,1.14348,504,0 0 0 0 0 0 1 1 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.179.136.126" src_port="443"/>
            <filter dst_ip="203.179.136.126" dst_port="53"/>
        </slice>
        <from usec="0" sec="1565240760"/>
        <to usec="0" sec="1565240806"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0721,1.19615,010,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.21.117.145" dst_port="54756"/>
        </slice>
        <from usec="0" sec="1565240760"/>
        <to usec="0" sec="1565240986"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0721,1.19615,010,0 0 0 0 0 0 1 1 1 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="64.33.124.80" dst_ip="133.136.245.35"/>
        </slice>
        <from usec="0" sec="1565240760"/>
        <to usec="0" sec="1565240851"/>
    </anomaly>
    <anomaly type="suspicious" value="0.880698,1.12698,999,0 0 0 1 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="203.179.133.176" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0721,1.19615,504,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.179.129.152" src_port="443"/>
        </slice>
        <from usec="0" sec="1565240760"/>
        <to usec="0" sec="1565240806"/>
    </anomaly>
    <anomaly type="suspicious" value="0.872172,1.14348,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.194.129.70" src_port="53"/>
        </slice>
        <from usec="0" sec="1565240760"/>
        <to usec="0" sec="1565240806"/>
    </anomaly>
    <anomaly type="suspicious" value="0.840006,1.04171,999,0 0 0 0 0 0 1 0 0 1 1 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="133.21.88.200" src_port="53"/>
            <filter dst_ip="133.21.88.200" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.848598,1.16053,010,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="212.204.185.23"/>
        </slice>
        <from usec="0" sec="1565240419"/>
        <to usec="0" sec="1565241192"/>
    </anomaly>
    <anomaly type="suspicious" value="0.707014,1.04342,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.194.26.57" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0721,1.19615,504,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.194.27.69" src_port="443"/>
        </slice>
        <from usec="0" sec="1565240760"/>
        <to usec="0" sec="1565240806"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07386,1.16141,999,0 0 0 0 0 0 1 1 1 1 0 0,alphfl">
        <slice>
            <filter src_ip="142.103.149.7" dst_ip="202.140.229.104" dst_port="123"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.707014,1.04342,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="100.20.75.223" dst_ip="133.21.69.55" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.02661,1.10092,503,0 0 0 0 0 0 0 0 0 1 1 1,ptmplaHTTP">
        <slice>
            <filter src_ip="104.73.6.210" dst_ip="133.21.68.227" src_port="80"/>
            <filter src_ip="104.73.6.210" dst_ip="133.21.176.177" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.761185,1.06392,504,1 0 0 0 0 0 1 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.194.215.198" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.707014,1.04342,002,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="124.167.254.193" dst_ip="133.136.219.55"/>
            <filter dst_ip="133.136.219.55" dst_port="138"/>
            <filter dst_ip="133.136.219.55" dst_port="137"/>
            <filter src_ip="124.167.254.193" dst_ip="133.136.210.143" dst_port="138"/>
            <filter src_ip="124.167.254.193" dst_ip="133.136.210.143" dst_port="137"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.707014,1.04342,999,0 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="125.209.131.61" dst_ip="203.179.131.206" src_port="38728" dst_port="6000"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.707014,1.04342,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="133.21.68.123" dst_ip="54.221.73.74" src_port="587"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.02661,1.10092,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.194.56.62" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.02661,1.10092,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.194.255.109" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.707014,1.04342,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="163.194.218.198" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.707014,1.04342,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="173.190.196.127" dst_ip="163.194.178.158" src_port="19302"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07386,1.16141,504,0 0 0 0 0 0 1 1 1 1 0 0,mptp">
        <slice>
            <filter dst_ip="202.134.156.46" src_port="443"/>
            <filter src_ip="208.163.220.38" dst_ip="202.134.156.46" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.02661,1.10092,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.194.253.8" src_port="443"/>
            <filter src_ip="103.232.240.200" dst_ip="163.194.253.8" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.707014,1.04342,020,0 0 0 0 0 0 0 0 0 1 1 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="35.190.159.31"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.02661,1.10092,999,0 0 0 0 0 0 0 0 0 1 1 1,ptmpla">
        <slice>
            <filter src_ip="203.179.131.229" src_port="3010"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.707014,1.04342,010,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="223.232.162.148" src_port="46847" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.707014,1.04342,010,0 0 0 0 0 0 0 0 0 1 1 0,sntscSYN">
        <slice>
            <filter src_ip="54.222.177.67" src_port="56072" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.02216,1.08824,020,0 0 0 0 0 0 1 1 0 1 1 0,mptmp">
        <slice>
            <filter dst_ip="203.179.138.35" src_port="53"/>
            <filter dst_ip="203.179.138.35" dst_port="53"/>
            <filter src_ip="54.161.110.5"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.707014,1.04342,010,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="71.248.162.9" src_port="29011"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.707014,1.04342,011,0 0 0 0 0 0 0 0 0 1 1 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="107.85.49.89" src_port="7001"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.02661,1.10092,504,0 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="202.140.224.241" dst_ip="111.119.4.96" src_port="54847" dst_port="443"/>
            <filter src_ip="202.140.224.241" dst_ip="111.119.4.96" src_port="54844" dst_port="443"/>
            <filter src_ip="202.140.224.241" dst_ip="111.119.4.96" src_port="54843" dst_port="443"/>
            <filter src_ip="202.140.224.241" dst_ip="111.119.4.96" src_port="54835" dst_port="443"/>
            <filter src_ip="202.140.224.241" dst_ip="111.119.4.96" src_port="54834" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.707014,1.04342,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="133.21.69.55" dst_ip="125.223.85.42" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.707014,1.04342,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="133.21.48.220" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.707014,1.04342,999,0 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="185.118.20.46" dst_ip="133.4.144.22" dst_port="23390"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.707014,1.04342,503,0 0 0 0 0 0 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.194.178.247" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.707014,1.04342,999,0 0 0 0 0 0 0 0 0 1 1 0,ptpposcaUDP">
        <slice>
            <filter src_ip="8.244.183.20" dst_ip="163.194.253.225" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0721,1.19615,504,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.179.129.146" src_port="443"/>
            <filter dst_ip="203.179.129.146" src_port="993"/>
            <filter src_ip="1.254.129.35" dst_ip="203.179.129.146" src_port="53"/>
        </slice>
        <from usec="0" sec="1565240760"/>
        <to usec="0" sec="1565240806"/>
    </anomaly>
    <anomaly type="suspicious" value="0.707014,1.04342,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.194.255.231" src_port="443"/>
            <filter dst_ip="163.194.255.231" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.02661,1.10092,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.194.65.210" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.02661,1.10092,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.194.65.254" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.02661,1.10092,504,0 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="14.1.56.184" dst_ip="163.194.65.78" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.02661,1.10092,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.194.108.104" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.02661,1.10092,504,0 0 0 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="172.106.65.66" src_port="443"/>
            <filter dst_ip="163.194.252.255" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.02661,1.10092,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.194.119.84" src_port="443"/>
            <filter src_ip="8.244.183.20" dst_ip="163.194.119.84" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.02661,1.10092,503,0 0 0 0 0 0 0 0 0 1 1 1,ptmpHTTP">
        <slice>
            <filter src_ip="38.106.2.217" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11482,1.26693,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="111.161.93.237"/>
        </slice>
        <from usec="0" sec="1565240479"/>
        <to usec="0" sec="1565240883"/>
    </anomaly>
    <anomaly type="suspicious" value="0.707014,1.04342,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.194.26.24" src_port="443"/>
            <filter dst_ip="163.194.26.24" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.02661,1.10092,504,0 0 0 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.194.240.253" src_port="443"/>
            <filter dst_ip="163.194.253.237" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.02661,1.10092,999,0 0 0 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="176.201.128.152" dst_port="20001"/>
            <filter src_ip="133.21.18.229" src_port="123" dst_port="123"/>
            <filter src_ip="133.21.18.229" src_port="34397" dst_port="20001"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.707014,1.04342,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="203.179.152.51" dst_ip="36.170.166.65" src_port="3389"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.707014,1.04342,010,0 0 0 0 0 0 0 0 0 1 1 0,sntscSYN">
        <slice>
            <filter src_ip="206.61.145.196" src_port="32767" dst_port="8545"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.02661,1.10092,504,0 0 0 0 0 0 0 0 0 1 1 1,mptpla">
        <slice>
            <filter dst_ip="3.124.122.44" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.707014,1.04342,504,0 0 0 0 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="133.21.40.28" dst_ip="61.247.225.36"/>
            <filter src_ip="133.21.40.28" dst_port="443"/>
            <filter dst_ip="61.247.225.36" dst_port="443"/>
            <filter src_ip="133.21.40.28" dst_ip="193.72.213.119" src_port="3389"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.02661,1.10092,503,0 0 0 0 0 0 0 0 0 1 1 1,mptplaHTTP">
        <slice>
            <filter src_ip="163.194.110.255" dst_ip="65.8.226.113" src_port="80"/>
            <filter src_ip="163.194.47.1" dst_ip="65.8.226.113" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.707014,1.04342,011,0 0 0 0 0 0 0 0 0 1 1 0,mptpla">
        <slice>
            <filter dst_ip="98.107.230.132" dst_port="25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.84367,1.47527,999,1 1 1 1 1 0 0 0 0 1 1 0,ipv4gretun">
        <slice>
            <filter src_ip="203.179.142.234" dst_ip="206.76.251.121"/>
            <filter src_ip="203.179.142.234" dst_ip="204.50.33.158"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.39904,1.7755,901,1 1 1 1 1 1 1 0 0 1 1 1,empty">
        <slice/>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.56863,1.30409,012,1 1 1 0 0 0 1 1 1 1 1 0,alphfl">
        <slice>
            <filter src_ip="133.11.221.102" dst_ip="201.217.168.190" dst_port="25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.12664,1.66217,999,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="203.179.131.204"/>
            <filter dst_ip="203.179.131.193" dst_port="3010"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.51288,1.27212,999,1 1 1 1 0 0 1 0 0 1 1 0,ntscUDPOther">
        <slice>
            <filter src_ip="77.200.137.41" src_port="5150"/>
            <filter src_ip="77.200.137.43" src_port="5158" dst_port="65476"/>
            <filter src_ip="77.200.137.43" src_port="5158" dst_port="64476"/>
            <filter src_ip="77.200.137.43" src_port="5158" dst_port="65376"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.46347,1.19843,010,1 0 0 0 0 0 1 1 1 1 1 1,mptp">
        <slice>
            <filter dst_ip="133.136.68.164" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.12664,1.66217,504,0 0 0 1 1 1 0 0 0 1 1 1,mptpla">
        <slice>
            <filter dst_ip="133.21.87.180" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.21833,1.75227,999,1 1 1 1 1 1 1 0 0 1 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="77.200.137.16" src_port="5127" dst_port="5060"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.1973,1.14346,999,0 0 0 0 0 0 1 1 1 1 1 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.194.128.169" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.21062,1.58699,504,1 1 1 1 1 0 1 1 1 1 1 1,mptp">
        <slice>
            <filter dst_ip="202.140.224.241" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.28065,1.74042,010,1 1 1 1 1 1 1 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="89.68.168.72" src_port="43033"/>
            <filter src_ip="82.160.182.179" src_port="40694"/>
            <filter src_ip="74.114.50.76" src_port="40483" dst_port="445"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.12235,1.09931,504,0 0 0 0 0 0 1 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="203.179.152.51" dst_port="443"/>
            <filter dst_ip="203.179.152.51" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.21062,1.58699,503,1 1 1 1 1 0 1 1 1 1 1 1,mptmp">
        <slice>
            <filter dst_ip="203.179.152.51" dst_port="80"/>
            <filter dst_ip="203.179.135.176" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.24209,1.70225,999,1 1 0 1 1 1 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="163.194.14.66" src_port="3001"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.1973,1.14346,020,0 0 0 0 0 0 1 1 1 1 1 0,icmp_error">
        <slice>
            <filter src_ip="133.21.67.61"/>
            <filter src_ip="133.21.80.2"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.56863,1.30409,504,1 1 1 0 0 0 1 1 1 1 1 0,mptmp">
        <slice>
            <filter src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.5786,1.25127,504,1 1 0 0 0 0 1 1 1 1 1 1,mptp">
        <slice>
            <filter dst_ip="202.5.93.225" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.33586,1.72673,504,0 0 0 1 1 1 1 1 1 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.194.55.49" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.41055,1.20312,999,0 0 0 1 0 0 1 1 1 1 1 0,mptmp">
        <slice>
            <filter src_ip="133.21.71.209" dst_port="53"/>
            <filter src_ip="163.194.128.172" dst_port="53"/>
            <filter src_ip="163.194.129.74" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.1973,1.14346,010,0 0 0 0 0 0 1 1 1 1 1 0,sntscSYN">
        <slice>
            <filter src_ip="185.235.71.12" dst_port="8545"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.91948,1.66216,504,0 0 0 1 1 1 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.194.26.195" src_port="443"/>
        </slice>
        <from usec="0" sec="1565240401"/>
        <to usec="0" sec="1565241228"/>
    </anomaly>
    <anomaly type="anomalous" value="1.44257,1.26695,504,1 1 1 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="203.179.152.51" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.73687,1.3567,503,1 1 1 1 0 0 1 1 1 1 1 0,mptmp">
        <slice>
            <filter src_ip="216.57.57.233" src_port="443"/>
            <filter src_ip="192.157.241.96" dst_ip="94.161.248.71" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.12235,1.09931,999,0 0 0 0 0 0 1 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="203.179.143.32" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.74588,1.30601,504,1 1 0 1 0 0 1 1 1 1 1 1,mptp">
        <slice>
            <filter dst_ip="202.140.224.36" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.12664,1.66217,504,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="152.253.12.198" src_port="80"/>
            <filter dst_ip="133.21.176.152" src_port="80"/>
            <filter dst_ip="133.21.176.152" src_port="443"/>
            <filter dst_ip="202.140.230.165" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.18904,1.10177,504,1 0 0 0 0 0 1 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.194.81.32" src_port="443"/>
            <filter dst_ip="163.194.81.32" src_port="80"/>
            <filter dst_ip="163.194.70.178" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.17447,1.6611,504,0 0 0 1 1 1 1 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="133.21.14.143"/>
            <filter src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.88965,1.40141,010,1 1 1 1 0 0 1 1 1 1 1 1,mptmp">
        <slice>
            <filter src_ip="104.199.210.94" dst_port="55555"/>
            <filter src_ip="64.169.128.135" src_port="25"/>
            <filter src_ip="98.107.230.132" src_port="25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.35577,1.7765,999,1 1 1 1 1 1 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.194.14.66" dst_port="3001"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.46347,1.19843,504,1 0 0 0 0 0 1 1 1 1 1 1,mptp">
        <slice>
            <filter dst_ip="133.21.140.106" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.24832,1.16055,010,1 1 0 0 0 0 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="43.121.201.11"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.36863,1.7283,504,1 0 0 1 1 1 1 1 1 1 1 1,mptmp">
        <slice>
            <filter dst_ip="146.151.16.37"/>
            <filter dst_ip="133.21.81.73" src_port="443"/>
            <filter src_ip="18.86.2.129" dst_ip="163.194.132.178" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.5949,1.25333,504,0 0 0 1 0 0 1 1 1 1 1 1,mptmp">
        <slice>
            <filter src_port="443"/>
            <filter src_ip="117.227.9.4" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.21062,1.58699,999,1 1 1 1 1 0 1 1 1 1 1 1,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.134.156.3" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.40982,1.19617,010,0 0 0 0 0 0 1 1 1 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="185.72.37.165" src_port="53107"/>
            <filter src_ip="178.4.36.212" src_port="52905" dst_port="3389"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.56863,1.30409,504,1 1 1 0 0 0 1 1 1 1 1 0,mptmp">
        <slice>
            <filter src_ip="14.147.38.236" dst_port="8291"/>
            <filter dst_ip="203.179.132.208" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.16258,1.6638,503,1 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_port="80"/>
            <filter dst_ip="163.194.252.151" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.33586,1.72673,504,0 0 0 1 1 1 1 1 1 1 1 1,mptp">
        <slice>
            <filter dst_ip="202.134.183.61" src_port="443"/>
            <filter dst_ip="202.134.183.61" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.46347,1.19843,504,1 0 0 0 0 0 1 1 1 1 1 1,mptmp">
        <slice>
            <filter dst_ip="133.21.8.246" src_port="443"/>
            <filter dst_ip="133.21.76.61" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.46347,1.19843,010,1 0 0 0 0 0 1 1 1 1 1 1,ptmp">
        <slice>
            <filter src_ip="81.248.177.141" src_port="42127"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.46347,1.19843,504,1 0 0 0 0 0 1 1 1 1 1 1,ptmp">
        <slice>
            <filter src_ip="172.106.147.132" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.33586,1.72673,504,0 0 0 1 1 1 1 1 1 1 1 1,mptmp">
        <slice>
            <filter dst_ip="133.21.87.224" src_port="443"/>
            <filter dst_ip="163.194.64.35" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.26888,1.16277,503,0 0 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="203.179.152.51" src_port="80"/>
            <filter src_ip="203.179.135.176" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.12664,1.66217,011,0 0 0 1 1 1 0 0 0 1 1 1,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="185.72.147.34" dst_port="59622"/>
            <filter dst_ip="185.118.22.87" dst_port="59089"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.46417,1.20537,504,1 0 0 1 0 0 1 1 1 1 1 0,ptmp">
        <slice>
            <filter src_ip="202.134.156.3" dst_port="443"/>
            <filter src_ip="202.134.156.3" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.32823,1.16509,011,1 0 0 1 0 0 0 0 0 1 1 1,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="185.234.110.171" dst_port="42147"/>
            <filter dst_ip="185.72.147.134" dst_port="59675"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.1973,1.14346,502,0 0 0 0 0 0 1 1 1 1 1 0,mptmp">
        <slice>
            <filter dst_ip="218.140.128.174" src_port="22"/>
            <filter dst_ip="92.128.95.132" dst_port="41334"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
