<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="suspicious" value="0.918946,1.11255,999,1 0 0 0 0 0 1 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="23.105.190.31" dst_ip="203.197.176.114" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.944697,1.17431,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.131.155.155" dst_ip="104.9.233.33" dst_port="443"/>
            <filter src_ip="163.131.155.155" dst_ip="104.9.233.143" dst_port="443"/>
        </slice>
        <from usec="0" sec="1576127103"/>
        <to usec="0" sec="1576127333"/>
    </anomaly>
    <anomaly type="suspicious" value="1.33041,1.36333,020,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="185.223.118.234"/>
        </slice>
        <from usec="0" sec="1576127331"/>
        <to usec="0" sec="1576127334"/>
    </anomaly>
    <anomaly type="suspicious" value="0.944697,1.17431,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.228.186.238" dst_ip="54.172.0.211" src_port="80" dst_port="7064"/>
        </slice>
        <from usec="0" sec="1576127671"/>
        <to usec="0" sec="1576127691"/>
    </anomaly>
    <anomaly type="suspicious" value="1.33041,1.36333,002,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="39.10.46.204" src_port="36975" dst_port="137"/>
        </slice>
        <from usec="0" sec="1576126802"/>
        <to usec="0" sec="1576126807"/>
    </anomaly>
    <anomaly type="suspicious" value="0.944697,1.17431,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.131.1.237" dst_ip="104.9.233.180" dst_port="443"/>
        </slice>
        <from usec="0" sec="1576127133"/>
        <to usec="0" sec="1576127333"/>
    </anomaly>
    <anomaly type="suspicious" value="0.944697,1.17431,503,1 1 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.197.179.136" dst_port="80"/>
        </slice>
        <from usec="0" sec="1576126876"/>
        <to usec="0" sec="1576127337"/>
    </anomaly>
    <anomaly type="suspicious" value="1.33041,1.36333,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="113.150.150.114" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1576127556"/>
        <to usec="0" sec="1576127558"/>
    </anomaly>
    <anomaly type="suspicious" value="0.944697,1.17431,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="89.198.168.246" src_port="5099" dst_port="11670"/>
        </slice>
        <from usec="0" sec="1576127533"/>
        <to usec="0" sec="1576127537"/>
    </anomaly>
    <anomaly type="suspicious" value="1.33041,1.36333,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="195.145.164.88"/>
        </slice>
        <from usec="0" sec="1576127051"/>
        <to usec="0" sec="1576127052"/>
    </anomaly>
    <anomaly type="suspicious" value="0.944697,1.17431,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="159.244.45.10" dst_port="1080"/>
        </slice>
        <from usec="0" sec="1576127200"/>
        <to usec="0" sec="1576127341"/>
    </anomaly>
    <anomaly type="suspicious" value="1.33041,1.36333,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.70.187.155" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1576126863"/>
        <to usec="0" sec="1576127631"/>
    </anomaly>
    <anomaly type="suspicious" value="1.33041,1.36333,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="218.16.186.39" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1576127319"/>
        <to usec="0" sec="1576127320"/>
    </anomaly>
    <anomaly type="suspicious" value="1.33041,1.36333,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="1.135.73.64" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1576127017"/>
        <to usec="0" sec="1576127022"/>
    </anomaly>
    <anomaly type="suspicious" value="0.944697,1.17431,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="222.7.19.135" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1576126963"/>
        <to usec="0" sec="1576126973"/>
    </anomaly>
    <anomaly type="suspicious" value="0.944697,1.17431,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="112.157.232.195" dst_port="445"/>
        </slice>
        <from usec="0" sec="1576127551"/>
        <to usec="0" sec="1576127554"/>
    </anomaly>
    <anomaly type="suspicious" value="1.33041,1.36333,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="193.171.159.158" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1576126988"/>
        <to usec="0" sec="1576127581"/>
    </anomaly>
    <anomaly type="suspicious" value="1.33041,1.36333,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="218.14.62.176" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1576126929"/>
        <to usec="0" sec="1576126934"/>
    </anomaly>
    <anomaly type="suspicious" value="0.944697,1.17431,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="159.244.37.144" dst_port="1080"/>
        </slice>
        <from usec="0" sec="1576126949"/>
        <to usec="0" sec="1576127259"/>
    </anomaly>
    <anomaly type="suspicious" value="1.33041,1.36333,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="59.44.42.111" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1576127683"/>
        <to usec="0" sec="1576127687"/>
    </anomaly>
    <anomaly type="suspicious" value="1.33041,1.36333,999,1 1 1 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="122.162.239.164" dst_port="65535"/>
        </slice>
        <from usec="0" sec="1576127674"/>
        <to usec="0" sec="1576127675"/>
    </anomaly>
    <anomaly type="suspicious" value="1.33041,1.36333,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="112.121.138.84" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1576127445"/>
        <to usec="0" sec="1576127447"/>
    </anomaly>
    <anomaly type="suspicious" value="0.944697,1.17431,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="200.83.203.85" dst_port="3389"/>
        </slice>
        <from usec="0" sec="1576126861"/>
        <to usec="0" sec="1576126877"/>
    </anomaly>
    <anomaly type="suspicious" value="1.33041,1.36333,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="63.200.170.93" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1576127294"/>
        <to usec="0" sec="1576127296"/>
    </anomaly>
    <anomaly type="suspicious" value="0.944697,1.17431,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="119.149.137.244" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1576127642"/>
        <to usec="0" sec="1576127643"/>
    </anomaly>
    <anomaly type="suspicious" value="0.944697,1.17431,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="159.244.37.10" dst_port="445"/>
        </slice>
        <from usec="0" sec="1576127579"/>
        <to usec="0" sec="1576127581"/>
    </anomaly>
    <anomaly type="suspicious" value="0.944697,1.17431,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="60.250.193.39" dst_port="445"/>
        </slice>
        <from usec="0" sec="1576127368"/>
        <to usec="0" sec="1576127371"/>
    </anomaly>
    <anomaly type="suspicious" value="1.33041,1.36333,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="188.146.61.234" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1576127481"/>
        <to usec="0" sec="1576127673"/>
    </anomaly>
    <anomaly type="suspicious" value="1.33041,1.36333,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="119.97.127.238" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1576127637"/>
        <to usec="0" sec="1576127639"/>
    </anomaly>
    <anomaly type="suspicious" value="0.966665,1.17489,999,1 1 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.252.64.68" dst_ip="185.19.182.4"/>
            <filter src_ip="133.252.64.68" src_port="23"/>
            <filter src_ip="150.197.160.138" dst_ip="185.19.182.4"/>
            <filter src_ip="150.197.160.138" src_port="23"/>
            <filter dst_ip="159.244.37.144" src_port="1080"/>
        </slice>
        <from usec="0" sec="1576126802"/>
        <to usec="0" sec="1576127267"/>
    </anomaly>
    <anomaly type="suspicious" value="1.33041,1.36333,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPDNS">
        <slice>
            <filter src_ip="178.133.99.130" src_port="49323" dst_port="53"/>
        </slice>
        <from usec="0" sec="1576127184"/>
        <to usec="0" sec="1576127229"/>
    </anomaly>
    <anomaly type="suspicious" value="1.33041,1.36333,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="51.142.68.10" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1576127611"/>
        <to usec="0" sec="1576127620"/>
    </anomaly>
    <anomaly type="suspicious" value="1.33041,1.36333,504,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.197.172.147" dst_ip="207.46.226.21" src_port="443" dst_port="4541"/>
        </slice>
        <from usec="0" sec="1576127465"/>
        <to usec="0" sec="1576127486"/>
    </anomaly>
    <anomaly type="suspicious" value="1.33041,1.36333,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="176.55.208.196" src_port="5100" dst_port="5090"/>
        </slice>
        <from usec="0" sec="1576127256"/>
        <to usec="0" sec="1576127257"/>
    </anomaly>
    <anomaly type="suspicious" value="1.33041,1.36333,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="112.88.36.232"/>
        </slice>
        <from usec="0" sec="1576127198"/>
        <to usec="0" sec="1576127199"/>
    </anomaly>
    <anomaly type="suspicious" value="1.33041,1.36333,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="213.217.246.234" dst_port="65353"/>
        </slice>
        <from usec="0" sec="1576127407"/>
        <to usec="0" sec="1576127411"/>
    </anomaly>
    <anomaly type="suspicious" value="1.33041,1.36333,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="27.52.81.229" dst_port="8291"/>
            <filter src_ip="27.52.81.229" dst_port="22"/>
        </slice>
        <from usec="0" sec="1576127526"/>
        <to usec="0" sec="1576127535"/>
    </anomaly>
    <anomaly type="suspicious" value="1.33041,1.36333,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="188.146.59.248" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1576127116"/>
        <to usec="0" sec="1576127583"/>
    </anomaly>
    <anomaly type="suspicious" value="1.33041,1.36333,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="188.121.111.65"/>
        </slice>
        <from usec="0" sec="1576127290"/>
        <to usec="0" sec="1576127292"/>
    </anomaly>
    <anomaly type="suspicious" value="0.802499,1.06256,504,1 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="202.186.229.150" dst_ip="13.168.234.239"/>
            <filter src_ip="202.186.229.150" dst_port="443"/>
            <filter dst_ip="13.168.234.239" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.24432,1.33465,504,0 0 0 1 1 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.197.172.147" dst_ip="84.99.203.141" src_port="443"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127538"/>
    </anomaly>
    <anomaly type="suspicious" value="1.24432,1.33465,504,0 0 0 1 1 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.197.172.147" src_port="25"/>
            <filter src_ip="203.197.172.147" dst_port="443"/>
        </slice>
        <from usec="0" sec="1576126803"/>
        <to usec="0" sec="1576127079"/>
    </anomaly>
    <anomaly type="suspicious" value="1.22733,1.33414,901,0 0 0 0 1 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127178"/>
    </anomaly>
    <anomaly type="suspicious" value="1.24432,1.33465,504,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.228.202.142" dst_ip="162.189.97.136" dst_port="443"/>
        </slice>
        <from usec="0" sec="1576126804"/>
        <to usec="0" sec="1576127262"/>
    </anomaly>
    <anomaly type="suspicious" value="1.24432,1.33465,010,0 0 0 1 1 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="42.61.174.9" dst_port="23"/>
        </slice>
        <from usec="0" sec="1576126802"/>
        <to usec="0" sec="1576127448"/>
    </anomaly>
    <anomaly type="suspicious" value="1.24432,1.33465,010,0 0 0 1 1 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="172.148.188.168" src_port="61000" dst_port="57946"/>
        </slice>
        <from usec="0" sec="1576126804"/>
        <to usec="0" sec="1576127538"/>
    </anomaly>
    <anomaly type="suspicious" value="1.24432,1.33465,504,0 0 0 1 1 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.131.239.182" dst_port="443"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127624"/>
    </anomaly>
    <anomaly type="suspicious" value="1.24432,1.33465,504,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="34.21.115.66" dst_ip="203.197.190.243" src_port="443"/>
        </slice>
        <from usec="0" sec="1576126802"/>
        <to usec="0" sec="1576127625"/>
    </anomaly>
    <anomaly type="suspicious" value="1.24432,1.33465,504,0 0 0 1 1 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.131.181.81" dst_ip="52.104.6.49" src_port="53042" dst_port="443"/>
            <filter src_ip="163.131.181.81" dst_ip="163.131.181.56" src_port="53640" dst_port="443"/>
            <filter src_ip="163.131.181.81" dst_ip="31.18.178.39" src_port="53674" dst_port="443"/>
            <filter src_ip="163.131.181.81" dst_ip="45.55.221.27" src_port="53092" dst_port="443"/>
        </slice>
        <from usec="0" sec="1576126803"/>
        <to usec="0" sec="1576127625"/>
    </anomaly>
    <anomaly type="suspicious" value="0.825772,1.12869,010,0 0 0 0 0 0 1 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="133.252.64.70" dst_port="50348"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.754756,1.12109,010,1 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="159.244.45.158" dst_port="1080"/>
        </slice>
        <from usec="0" sec="1576127115"/>
        <to usec="0" sec="1576127341"/>
    </anomaly>
    <anomaly type="suspicious" value="0.941515,1.11316,504,1 0 0 1 0 0 1 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="202.186.246.234" src_port="443"/>
            <filter src_ip="208.71.192.3" dst_ip="202.186.246.234" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.754756,1.12109,503,1 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.107.98.232" dst_ip="46.143.62.43"/>
            <filter src_ip="133.107.98.232" dst_port="80"/>
            <filter dst_ip="46.143.62.43" dst_port="80"/>
        </slice>
        <from usec="0" sec="1576127115"/>
        <to usec="0" sec="1576127386"/>
    </anomaly>
    <anomaly type="suspicious" value="0.850816,1.1293,999,0 0 0 1 0 0 1 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.186.246.204" src_port="53"/>
            <filter dst_ip="133.106.193.30" src_port="53"/>
            <filter dst_ip="202.178.236.89" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.825772,1.12869,010,0 0 0 0 0 0 1 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="150.197.63.205" dst_port="54756"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.825772,1.12869,999,0 0 0 0 0 0 1 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="203.197.183.202" dst_port="3001"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.825772,1.12869,999,0 0 0 0 0 0 1 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="203.197.172.147" dst_port="53"/>
            <filter src_ip="163.131.93.97" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.825772,1.12869,502,0 0 0 0 0 0 1 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="202.186.196.80" src_port="22"/>
            <filter src_ip="203.197.179.189" src_port="22"/>
            <filter dst_ip="222.73.76.173" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.775897,1.06192,503,1 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="203.197.185.175" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.825772,1.12869,504,0 0 0 0 0 0 1 0 0 1 0 0,mptmp">
        <slice>
            <filter dst_ip="163.131.60.14" src_port="443"/>
            <filter src_ip="37.136.83.176" dst_ip="163.131.234.54" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.775897,1.06192,999,1 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="65.71.233.163" dst_ip="163.131.99.104" dst_port="993"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.825772,1.12869,999,0 0 0 0 0 0 1 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="75.195.69.249" dst_ip="202.186.196.92"/>
            <filter src_ip="75.195.69.249" dst_port="111"/>
            <filter src_ip="75.195.69.249" dst_port="137"/>
            <filter dst_ip="202.186.196.92" dst_port="111"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.775897,1.06192,999,1 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="203.197.183.216" src_port="3010"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0194,1.12515,054,0 0 0 0 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="203.197.181.245"/>
            <filter dst_ip="148.77.82.26" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.13209,1.17306,999,0 0 0 0 0 0 1 0 0 1 1 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.131.92.49" src_port="53"/>
            <filter dst_ip="163.131.92.51" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.33041,1.36333,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="80.102.77.249" dst_port="997"/>
        </slice>
        <from usec="0" sec="1576127392"/>
        <to usec="0" sec="1576127427"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0194,1.12515,504,0 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="173.193.89.49" dst_ip="16.181.167.40" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0194,1.12515,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="202.178.236.44" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0194,1.12515,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="193.222.97.66" dst_ip="203.197.183.216" dst_port="3010"/>
            <filter src_ip="193.222.97.66" dst_ip="203.197.183.216" dst_port="36079"/>
            <filter src_ip="193.222.97.66" dst_ip="203.197.183.216" dst_port="33999"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0194,1.12515,010,0 0 0 0 0 0 0 0 0 1 1 0,sntscSYN">
        <slice>
            <filter src_ip="121.46.200.123" dst_port="23"/>
            <filter src_ip="121.46.200.123" dst_port="26"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0194,1.12515,999,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="17.243.58.15" src_port="3389"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.09624,1.10896,504,1 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="133.228.216.131" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0194,1.12515,010,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="138.220.232.215" src_port="55159" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.09624,1.10896,504,1 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="163.131.179.14" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0194,1.12515,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="165.82.167.66" dst_ip="203.197.190.164" src_port="443" dst_port="65050"/>
            <filter src_ip="165.82.167.66" dst_ip="203.197.190.164" src_port="443" dst_port="58845"/>
            <filter src_ip="165.82.167.66" dst_ip="203.197.190.164" src_port="443" dst_port="58060"/>
            <filter src_ip="165.82.167.66" dst_ip="203.197.190.164" src_port="443" dst_port="54844"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0194,1.12515,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="88.106.29.211" dst_ip="202.178.236.39" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0194,1.12515,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="23.165.30.150" dst_ip="203.197.183.216" dst_port="3010"/>
            <filter src_ip="23.165.30.150" dst_ip="203.197.183.216" dst_port="42687"/>
            <filter src_ip="23.165.30.150" dst_ip="203.197.183.216" dst_port="34665"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0194,1.12515,010,0 0 0 0 0 0 0 0 0 1 1 0,sntscSYN">
        <slice>
            <filter src_ip="208.103.168.165" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0194,1.12515,010,0 0 0 0 0 0 0 0 0 1 1 0,sntscSYN">
        <slice>
            <filter src_ip="218.107.25.225" dst_port="445"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0194,1.12515,999,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="203.197.183.202" dst_port="3001"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0194,1.12515,010,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="17.243.52.41" src_port="18636" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0194,1.12515,010,0 0 0 0 0 0 0 0 0 1 1 0,sntscSYN">
        <slice>
            <filter src_ip="82.157.211.121" src_port="41210" dst_port="2120"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.802499,1.06256,999,1 0 0 1 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="133.106.201.15" src_port="443"/>
            <filter dst_ip="133.106.201.15"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0194,1.12515,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.131.3.114" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0194,1.12515,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="133.106.241.246" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.0194,1.12515,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.131.147.44" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.8141,2.14392,010,1 1 0 1 1 1 1 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="92.65.146.212" src_port="56187"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.38382,1.79622,504,1 1 1 1 1 0 1 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="202.178.236.244" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.4186,1.40313,999,1 1 1 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_port="55763" dst_port="80"/>
            <filter src_ip="45.57.52.21" src_port="55764" dst_port="443"/>
            <filter src_ip="45.57.52.21" src_port="55764" dst_port="80"/>
            <filter src_ip="45.57.52.21" src_port="55763" dst_port="443"/>
            <filter src_ip="45.57.52.21"/>
        </slice>
        <from usec="0" sec="1576127115"/>
        <to usec="0" sec="1576127161"/>
    </anomaly>
    <anomaly type="anomalous" value="1.42996,1.35632,503,1 1 1 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.228.205.131" dst_ip="88.99.204.234" src_port="50957" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.71142,1.43289,504,1 1 1 1 0 0 1 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="202.10.202.5" dst_port="443"/>
            <filter src_ip="202.186.246.204" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.6262,1.39345,010,1 1 1 0 0 0 0 0 0 1 1 0,ntscSYN">
        <slice>
            <filter src_ip="115.231.156.242" dst_port="1433"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.95076,3.23213,504,1 1 1 1 1 1 1 1 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="202.178.236.244" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.34498,1.20972,504,1 1 0 1 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="163.131.11.245" dst_ip="52.47.173.135" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.63608,2.07128,504,0 0 0 1 1 1 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="104.184.242.60" dst_ip="163.131.238.78" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.81074,1.74143,901,0 0 0 0 0 1 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127178"/>
    </anomaly>
    <anomaly type="anomalous" value="2.29394,1.93211,999,0 0 0 1 1 1 0 0 0 0 1 0,mptp">
        <slice>
            <filter dst_ip="133.106.201.15" src_port="443"/>
            <filter dst_ip="133.106.201.15"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.68163,1.39222,504,1 0 0 1 1 0 1 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="202.10.202.5" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.39762,1.36207,504,1 0 0 1 1 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.10.202.5" src_port="443"/>
        </slice>
        <from usec="0" sec="1576126813"/>
        <to usec="0" sec="1576127252"/>
    </anomaly>
    <anomaly type="anomalous" value="1.70239,1.38473,504,1 0 0 1 0 0 1 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.131.220.70" src_port="443"/>
            <filter dst_ip="163.131.220.70" dst_port="35968"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.71142,1.43289,999,1 1 1 1 0 0 1 0 0 1 1 0,ntscUDPOther">
        <slice>
            <filter src_ip="77.72.224.253" dst_port="1112"/>
            <filter src_ip="77.72.224.253" dst_port="4513"/>
            <filter src_ip="77.72.224.253" dst_port="1826"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.7246,2.57465,999,1 0 0 1 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.197.177.9" dst_port="123"/>
            <filter src_ip="185.10.116.80" dst_ip="203.197.177.9" src_port="53"/>
            <filter src_ip="194.103.37.110" dst_ip="203.197.177.9" src_port="53"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127621"/>
    </anomaly>
    <anomaly type="anomalous" value="2.6868,2.5814,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.197.181.252" dst_port="53"/>
        </slice>
        <from usec="0" sec="1576126980"/>
        <to usec="0" sec="1576127611"/>
    </anomaly>
    <anomaly type="anomalous" value="1.6991,1.43242,999,1 1 1 0 0 0 1 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="89.198.171.6" dst_port="67"/>
            <filter src_ip="185.19.69.28" src_port="56845"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.6868,2.5814,999,0 0 0 0 0 0 1 1 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="133.228.34.212" dst_ip="180.223.192.142" src_port="53"/>
            <filter src_ip="133.228.187.54" dst_ip="180.223.192.142" src_port="53"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127071"/>
    </anomaly>
    <anomaly type="anomalous" value="2.71181,2.08905,504,1 0 0 1 1 1 1 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.131.55.109" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.57896,1.35777,504,0 0 0 1 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="104.237.4.102" dst_ip="163.131.187.200" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.62962,1.34438,503,1 0 0 1 0 0 0 0 0 1 1 1,ptmplaHTTP">
        <slice>
            <filter src_ip="133.228.201.12" dst_port="80"/>
            <filter src_ip="133.228.201.12" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.63608,2.07128,504,0 0 0 1 1 1 0 0 0 1 1 1,ptmpla">
        <slice>
            <filter src_ip="151.156.237.51" dst_ip="163.131.209.139" src_port="443" dst_port="33262"/>
            <filter src_ip="151.156.237.51" dst_ip="163.131.209.139" src_port="443" dst_port="33258"/>
            <filter src_ip="151.156.237.51" dst_ip="163.131.3.178" src_port="443" dst_port="52231"/>
            <filter src_ip="151.156.237.51" dst_ip="163.131.246.134" src_port="443" dst_port="51993"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.66674,2.06253,999,1 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="163.131.188.146" dst_ip="103.232.150.244"/>
            <filter src_ip="163.131.188.146" dst_ip="47.143.9.29"/>
            <filter src_ip="163.131.188.146" src_port="11211"/>
            <filter src_ip="163.131.188.163" dst_ip="103.232.150.244"/>
            <filter src_ip="163.131.188.163" dst_ip="47.143.9.29"/>
            <filter src_ip="163.131.188.163" src_port="11211"/>
            <filter src_ip="163.131.188.144" dst_ip="103.232.150.244"/>
            <filter src_ip="163.131.188.144" dst_ip="47.143.9.29"/>
            <filter src_ip="163.131.188.144" src_port="11211"/>
            <filter src_ip="163.131.188.162" dst_ip="103.232.150.244"/>
            <filter src_ip="163.131.188.162" dst_ip="47.143.9.29"/>
            <filter src_ip="163.131.188.162" src_port="11211"/>
            <filter dst_ip="103.232.150.244" src_port="11211"/>
            <filter dst_ip="47.143.9.29" src_port="11211"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.43227,1.2544,504,1 1 0 1 0 0 1 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="202.10.202.5" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.35024,1.32748,999,0 0 0 1 1 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="203.197.172.147" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.85162,1.5614,999,1 1 1 1 1 0 0 0 0 1 0 0,ipv4gretun">
        <slice>
            <filter src_ip="203.197.185.8" dst_ip="206.189.28.206"/>
            <filter src_ip="203.197.185.8" dst_ip="204.51.213.225"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.44457,1.35682,999,1 1 1 1 0 0 0 0 0 1 0 0,ipv4gretun">
        <slice>
            <filter src_ip="206.189.28.206" dst_ip="203.197.185.8"/>
            <filter src_ip="204.51.213.225" dst_ip="203.197.185.8"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.70239,1.38473,999,1 0 0 1 0 0 1 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="173.122.48.210" dst_port="520"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.96593,2.25301,999,1 1 1 1 1 1 1 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="45.35.148.123" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.63608,2.07128,503,0 0 0 1 1 1 0 0 0 1 1 1,ptmpHTTP">
        <slice>
            <filter src_ip="203.197.179.136" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.33241,1.76531,504,1 1 1 1 1 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="17.243.58.18" src_port="443"/>
            <filter dst_ip="163.131.181.176" src_port="443"/>
            <filter src_ip="1.228.138.249" dst_ip="163.131.181.176" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.76699,2.57068,999,1 0 0 0 0 0 1 1 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="203.197.177.9" dst_ip="185.10.116.80" dst_port="53"/>
            <filter src_ip="203.197.177.9" dst_ip="194.103.37.110" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.66674,2.06253,999,1 0 0 1 1 1 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="203.197.183.202" src_port="3001"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.56561,1.35727,504,0 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="163.131.155.155" dst_ip="104.9.232.166" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.56561,1.35727,504,0 0 0 0 0 0 0 0 0 1 1 1,mptpla">
        <slice>
            <filter dst_ip="163.131.187.200" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.56561,1.35727,999,0 0 0 0 0 0 0 0 0 1 1 1,ptmpla">
        <slice>
            <filter src_ip="126.140.151.254" dst_ip="203.197.183.229" dst_port="3010"/>
            <filter src_ip="126.140.151.254" dst_ip="203.197.183.216" dst_port="3010"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.64121,1.39724,504,0 0 0 0 0 0 1 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="202.178.236.111" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.56561,1.35727,999,0 0 0 0 0 0 0 0 0 1 1 1,ptmpla">
        <slice>
            <filter src_ip="203.197.183.229" src_port="3010"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.70239,1.38473,504,1 0 0 1 0 0 1 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="202.178.236.39" src_port="443"/>
            <filter dst_ip="203.197.181.213" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.8497,1.46573,010,1 1 0 0 0 0 1 0 0 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="138.124.73.115" dst_port="789"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.56561,1.35727,504,0 0 0 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="203.197.172.147" src_port="443"/>
            <filter dst_ip="163.131.238.65" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.56561,1.35727,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.131.3.181" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
