<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="notice" value="0.572023,1.07086,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="13.31.155.208"/>
        </slice>
        <from usec="0" sec="1576126925"/>
        <to usec="0" sec="1576127252"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.197.173.3" dst_ip="198.33.114.93" src_port="62494" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1576126876"/>
        <to usec="0" sec="1576127305"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="202.178.236.39" dst_ip="163.131.181.56" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1576126896"/>
        <to usec="0" sec="1576127249"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.131.180.93" dst_ip="23.147.101.251" src_port="50582" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1576127683"/>
        <to usec="0" sec="1576127696"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.197.172.146" dst_ip="203.197.185.8" src_port="61969" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1576126937"/>
        <to usec="0" sec="1576126938"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="219.81.161.69" dst_ip="203.197.185.82" src_port="62856" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1576127262"/>
        <to usec="0" sec="1576127264"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.131.229.60" dst_ip="51.144.239.123" src_port="59493" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1576126925"/>
        <to usec="0" sec="1576126926"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="219.180.51.190" dst_ip="203.197.176.107" src_port="62710" dst_port="20080" proto="tcp"/>
        </slice>
        <from usec="0" sec="1576127556"/>
        <to usec="0" sec="1576127620"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.228.221.21" dst_ip="52.21.3.221" src_port="54376" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1576126948"/>
        <to usec="0" sec="1576126949"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.131.142.143" dst_ip="202.178.236.244" src_port="58519" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1576127186"/>
        <to usec="0" sec="1576127304"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.197.179.132" dst_ip="126.203.209.1" src_port="40041" dst_port="1028" proto="udp"/>
        </slice>
        <from usec="0" sec="1576126804"/>
        <to usec="0" sec="1576127696"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.131.217.139" dst_ip="157.94.61.144" src_port="65429" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1576127161"/>
        <to usec="0" sec="1576127163"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="203.197.190.163" dst_ip="165.82.167.67" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1576126887"/>
        <to usec="0" sec="1576127684"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.106.196.61" dst_ip="52.150.96.220" src_port="50263" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1576127211"/>
        <to usec="0" sec="1576127212"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.178.236.244" dst_ip="52.245.19.211" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1576127023"/>
        <to usec="0" sec="1576127024"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.78.94.6" dst_ip="202.178.236.44" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1576127468"/>
        <to usec="0" sec="1576127470"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="199.15.207.21" dst_ip="202.186.246.135" src_port="43028" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1576126842"/>
        <to usec="0" sec="1576126844"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="54.178.138.213" dst_ip="202.186.246.135" src_port="40836" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1576127140"/>
        <to usec="0" sec="1576127141"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="133.228.205.243" dst_ip="120.50.108.93" src_port="60269" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1576127135"/>
        <to usec="0" sec="1576127137"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.131.187.200" dst_ip="91.76.164.142" src_port="56782" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1576127299"/>
        <to usec="0" sec="1576127301"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="74.114.232.106" dst_ip="163.131.243.44" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1576127321"/>
        <to usec="0" sec="1576127322"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.197.169.154" dst_ip="34.33.118.151" src_port="50270" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1576127199"/>
        <to usec="0" sec="1576127292"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.131.3.205" proto="tcp"/>
        </slice>
        <from usec="0" sec="1576127082"/>
        <to usec="0" sec="1576127256"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.228.201.202" dst_ip="5.112.179.164" src_port="59764" dst_port="8080" proto="tcp"/>
        </slice>
        <from usec="0" sec="1576127415"/>
        <to usec="0" sec="1576127696"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="202.10.202.5" dst_ip="202.10.202.5" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1576126919"/>
        <to usec="0" sec="1576127249"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.131.180.0" dst_ip="203.197.172.147" src_port="65154" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1576127151"/>
        <to usec="0" sec="1576127153"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,999,1 0 0 0 0 0 0 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="64.223.97.77"/>
        </slice>
        <from usec="0" sec="1576127315"/>
        <to usec="0" sec="1576127317"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="126.78.182.130"/>
        </slice>
        <from usec="0" sec="1576127204"/>
        <to usec="0" sec="1576127254"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="17.243.52.41" dst_ip="35.36.72.215" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1576127688"/>
        <to usec="0" sec="1576127690"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.197.172.147" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1576127312"/>
        <to usec="0" sec="1576127317"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.228.209.77"/>
        </slice>
        <from usec="0" sec="1576126937"/>
        <to usec="0" sec="1576126950"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.178.236.244" dst_ip="23.91.125.59" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1576127579"/>
        <to usec="0" sec="1576127583"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="42.3.219.96" src_port="46808" dst_port="21"/>
            <filter src_ip="42.3.219.96" src_port="46629" dst_port="23"/>
        </slice>
        <from usec="0" sec="1576126876"/>
        <to usec="0" sec="1576127090"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="218.17.132.125" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1576127427"/>
        <to usec="0" sec="1576127428"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.131.251.136" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1576127325"/>
        <to usec="0" sec="1576127326"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="172.118.134.158" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1576127015"/>
        <to usec="0" sec="1576127016"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.131.179.255"/>
        </slice>
        <from usec="0" sec="1576127332"/>
        <to usec="0" sec="1576127333"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="159.244.37.213" dst_port="1080"/>
        </slice>
        <from usec="0" sec="1576126949"/>
        <to usec="0" sec="1576127205"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.197.181.245"/>
        </slice>
        <from usec="0" sec="1576126923"/>
        <to usec="0" sec="1576126924"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.197.173.21"/>
        </slice>
        <from usec="0" sec="1576127097"/>
        <to usec="0" sec="1576127138"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="185.119.118.180"/>
        </slice>
        <from usec="0" sec="1576126921"/>
        <to usec="0" sec="1576126922"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.131.2.222"/>
        </slice>
        <from usec="0" sec="1576127123"/>
        <to usec="0" sec="1576127125"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="60.78.44.53"/>
        </slice>
        <from usec="0" sec="1576127146"/>
        <to usec="0" sec="1576127147"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.228.212.107"/>
        </slice>
        <from usec="0" sec="1576127148"/>
        <to usec="0" sec="1576127157"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.197.185.175" dst_port="80"/>
        </slice>
        <from usec="0" sec="1576126939"/>
        <to usec="0" sec="1576127290"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.228.148.215"/>
        </slice>
        <from usec="0" sec="1576127082"/>
        <to usec="0" sec="1576127083"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="75.237.159.245"/>
        </slice>
        <from usec="0" sec="1576127640"/>
        <to usec="0" sec="1576127641"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="123.126.13.56"/>
        </slice>
        <from usec="0" sec="1576127022"/>
        <to usec="0" sec="1576127023"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,502,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="213.231.48.156" dst_ip="203.197.187.73" src_port="64697" dst_port="22" proto="tcp"/>
        </slice>
        <from usec="0" sec="1576126917"/>
        <to usec="0" sec="1576126918"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.131.240.156"/>
        </slice>
        <from usec="0" sec="1576126841"/>
        <to usec="0" sec="1576126842"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="52.130.133.248"/>
        </slice>
        <from usec="0" sec="1576127100"/>
        <to usec="0" sec="1576127101"/>
    </anomaly>
    <anomaly type="notice" value="0.572023,1.07086,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.178.232.160"/>
        </slice>
        <from usec="0" sec="1576127115"/>
        <to usec="0" sec="1576127117"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576126908"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.197.172.147"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576126899"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.197.189.218" src_port="53"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576126908"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="185.14.19.92"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576126908"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="92.64.103.114" src_port="50164"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576126908"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="202.54.154.2"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576126908"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="139.165.25.66"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576126908"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="165.1.189.190"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576126908"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,020,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.87.36.147"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576126908"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="159.69.236.27"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576126907"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="77.72.224.166"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576126908"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="112.234.200.110"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576126855"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="27.106.113.212"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576126908"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="172.148.140.12"/>
        </slice>
        <from usec="0" sec="1576126801"/>
        <to usec="0" sec="1576126908"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="46.156.103.97"/>
        </slice>
        <from usec="0" sec="1576126801"/>
        <to usec="0" sec="1576126890"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="45.76.212.149"/>
        </slice>
        <from usec="0" sec="1576126801"/>
        <to usec="0" sec="1576126908"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="172.149.203.85"/>
        </slice>
        <from usec="0" sec="1576126801"/>
        <to usec="0" sec="1576126907"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.186.196.245"/>
        </slice>
        <from usec="0" sec="1576126802"/>
        <to usec="0" sec="1576126908"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="171.38.214.97"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576126989"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="13.8.103.71"/>
        </slice>
        <from usec="0" sec="1576126803"/>
        <to usec="0" sec="1576126996"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.252.243.85"/>
        </slice>
        <from usec="0" sec="1576126804"/>
        <to usec="0" sec="1576126965"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="23.120.90.39"/>
        </slice>
        <from usec="0" sec="1576126823"/>
        <to usec="0" sec="1576126986"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.228.202.51"/>
        </slice>
        <from usec="0" sec="1576126824"/>
        <to usec="0" sec="1576126992"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="104.68.86.23"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127176"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="74.114.239.60"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127087"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="61.36.37.139"/>
        </slice>
        <from usec="0" sec="1576126801"/>
        <to usec="0" sec="1576127088"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.197.191.15"/>
        </slice>
        <from usec="0" sec="1576126801"/>
        <to usec="0" sec="1576127088"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,020,0 0 0 1 0 0 0 0 0 0 0 0,hostout">
        <slice>
            <filter src_ip="203.242.93.138"/>
        </slice>
        <from usec="0" sec="1576126802"/>
        <to usec="0" sec="1576127088"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.252.64.126"/>
        </slice>
        <from usec="0" sec="1576126809"/>
        <to usec="0" sec="1576127086"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.131.181.195"/>
        </slice>
        <from usec="0" sec="1576126817"/>
        <to usec="0" sec="1576127508"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.228.205.3"/>
        </slice>
        <from usec="0" sec="1576126833"/>
        <to usec="0" sec="1576127001"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="131.72.238.201"/>
        </slice>
        <from usec="0" sec="1576127013"/>
        <to usec="0" sec="1576127072"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127178"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="172.149.234.15"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127178"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="192.29.232.23"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127177"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="74.114.231.116"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127176"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="222.89.193.70"/>
        </slice>
        <from usec="0" sec="1576126801"/>
        <to usec="0" sec="1576127177"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="103.99.44.230"/>
        </slice>
        <from usec="0" sec="1576126802"/>
        <to usec="0" sec="1576127178"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="83.123.136.87"/>
        </slice>
        <from usec="0" sec="1576126803"/>
        <to usec="0" sec="1576127178"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.131.180.11"/>
        </slice>
        <from usec="0" sec="1576126803"/>
        <to usec="0" sec="1576127177"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="94.102.187.196"/>
        </slice>
        <from usec="0" sec="1576126806"/>
        <to usec="0" sec="1576127176"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.178.236.244"/>
        </slice>
        <from usec="0" sec="1576126809"/>
        <to usec="0" sec="1576127176"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.178.238.65"/>
        </slice>
        <from usec="0" sec="1576126814"/>
        <to usec="0" sec="1576127178"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.131.232.248"/>
        </slice>
        <from usec="0" sec="1576126817"/>
        <to usec="0" sec="1576127178"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.228.150.175"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127252"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.131.181.16"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127264"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="176.59.164.138"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127268"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="165.167.42.111"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127268"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.131.11.23"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127267"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="36.227.230.195"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127268"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="185.86.41.31"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127268"/>
    </anomaly>
    <anomaly type="notice" value="0.607617,1.0715,504,1 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.197.190.164" dst_port="53"/>
            <filter src_ip="203.197.190.164" dst_port="443"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127268"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="143.108.45.52"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127268"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="164.195.91.74"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127264"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="36.234.207.134"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127266"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="74.114.231.214"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127262"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="45.76.212.177"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127268"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.178.236.244"/>
        </slice>
        <from usec="0" sec="1576126801"/>
        <to usec="0" sec="1576127268"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="149.228.13.140"/>
        </slice>
        <from usec="0" sec="1576126801"/>
        <to usec="0" sec="1576127265"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="5.164.59.31"/>
        </slice>
        <from usec="0" sec="1576126801"/>
        <to usec="0" sec="1576127268"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="117.30.23.101"/>
        </slice>
        <from usec="0" sec="1576126801"/>
        <to usec="0" sec="1576127268"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="82.223.169.166"/>
        </slice>
        <from usec="0" sec="1576126802"/>
        <to usec="0" sec="1576127262"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="114.150.88.72"/>
        </slice>
        <from usec="0" sec="1576126802"/>
        <to usec="0" sec="1576127261"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.178.236.127"/>
        </slice>
        <from usec="0" sec="1576126802"/>
        <to usec="0" sec="1576127268"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.228.124.155"/>
        </slice>
        <from usec="0" sec="1576126802"/>
        <to usec="0" sec="1576127239"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="185.223.118.237"/>
        </slice>
        <from usec="0" sec="1576126803"/>
        <to usec="0" sec="1576127260"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.197.172.147"/>
        </slice>
        <from usec="0" sec="1576126806"/>
        <to usec="0" sec="1576127265"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="176.59.164.138"/>
        </slice>
        <from usec="0" sec="1576126806"/>
        <to usec="0" sec="1576127266"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.228.13.63"/>
        </slice>
        <from usec="0" sec="1576126807"/>
        <to usec="0" sec="1576127259"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="188.133.136.6"/>
        </slice>
        <from usec="0" sec="1576126807"/>
        <to usec="0" sec="1576127268"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="121.209.34.209"/>
        </slice>
        <from usec="0" sec="1576126814"/>
        <to usec="0" sec="1576127119"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="203.197.172.147"/>
        </slice>
        <from usec="0" sec="1576126818"/>
        <to usec="0" sec="1576127255"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="72.227.214.230"/>
        </slice>
        <from usec="0" sec="1576126835"/>
        <to usec="0" sec="1576127256"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.252.95.46"/>
        </slice>
        <from usec="0" sec="1576126849"/>
        <to usec="0" sec="1576127243"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="13.8.103.99"/>
        </slice>
        <from usec="0" sec="1576126868"/>
        <to usec="0" sec="1576127216"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.197.179.136"/>
        </slice>
        <from usec="0" sec="1576126876"/>
        <to usec="0" sec="1576127259"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="46.222.192.242"/>
        </slice>
        <from usec="0" sec="1576126929"/>
        <to usec="0" sec="1576127185"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.228.211.129"/>
        </slice>
        <from usec="0" sec="1576127003"/>
        <to usec="0" sec="1576127262"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.211.155.164"/>
        </slice>
        <from usec="0" sec="1576127048"/>
        <to usec="0" sec="1576127135"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="49.158.65.69"/>
        </slice>
        <from usec="0" sec="1576127118"/>
        <to usec="0" sec="1576127240"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.34.28.221"/>
        </slice>
        <from usec="0" sec="1576127152"/>
        <to usec="0" sec="1576127266"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="64.223.97.77"/>
        </slice>
        <from usec="0" sec="1576127196"/>
        <to usec="0" sec="1576127247"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="94.102.187.196"/>
        </slice>
        <from usec="0" sec="1576127225"/>
        <to usec="0" sec="1576127242"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="197.147.54.249"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127358"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="188.228.65.122"/>
        </slice>
        <from usec="0" sec="1576126803"/>
        <to usec="0" sec="1576127358"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="17.243.52.43"/>
        </slice>
        <from usec="0" sec="1576126801"/>
        <to usec="0" sec="1576127416"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.228.221.153" dst_ip="188.212.15.101" dst_port="443"/>
            <filter src_ip="133.228.221.153"/>
        </slice>
        <from usec="0" sec="1576126803"/>
        <to usec="0" sec="1576127445"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.228.215.120" src_port="22"/>
            <filter src_ip="133.228.215.120"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127519"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="122.177.107.75"/>
        </slice>
        <from usec="0" sec="1576126801"/>
        <to usec="0" sec="1576127537"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="41.222.70.186"/>
        </slice>
        <from usec="0" sec="1576126805"/>
        <to usec="0" sec="1576127535"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="173.170.227.91"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127628"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="118.113.112.63"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127628"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="114.42.18.100"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127625"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="46.138.252.43"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127628"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="216.123.43.15"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127627"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="134.34.210.237"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127628"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.178.238.24"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127621"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="104.74.210.167"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127628"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="114.47.0.55"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127627"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="51.16.18.218"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127628"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="78.100.83.202"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127628"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="124.190.6.243"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127619"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="112.242.141.59"/>
        </slice>
        <from usec="0" sec="1576126801"/>
        <to usec="0" sec="1576127627"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,501,0 0 0 1 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="163.130.25.140"/>
        </slice>
        <from usec="0" sec="1576126801"/>
        <to usec="0" sec="1576127628"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.197.177.3"/>
        </slice>
        <from usec="0" sec="1576126801"/>
        <to usec="0" sec="1576127626"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.131.196.107"/>
        </slice>
        <from usec="0" sec="1576126801"/>
        <to usec="0" sec="1576127626"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="45.76.212.154" src_port="61000" dst_port="57946"/>
        </slice>
        <from usec="0" sec="1576126801"/>
        <to usec="0" sec="1576127628"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.197.179.156"/>
        </slice>
        <from usec="0" sec="1576126801"/>
        <to usec="0" sec="1576127628"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="162.193.108.164"/>
        </slice>
        <from usec="0" sec="1576126801"/>
        <to usec="0" sec="1576127617"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.131.181.26"/>
        </slice>
        <from usec="0" sec="1576126802"/>
        <to usec="0" sec="1576127628"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="17.243.52.41"/>
        </slice>
        <from usec="0" sec="1576126802"/>
        <to usec="0" sec="1576127606"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="113.44.249.58"/>
        </slice>
        <from usec="0" sec="1576126803"/>
        <to usec="0" sec="1576127623"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="36.239.214.213"/>
        </slice>
        <from usec="0" sec="1576126803"/>
        <to usec="0" sec="1576127605"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="222.37.44.255"/>
        </slice>
        <from usec="0" sec="1576126803"/>
        <to usec="0" sec="1576127628"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="178.44.98.79"/>
        </slice>
        <from usec="0" sec="1576126804"/>
        <to usec="0" sec="1576127627"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="180.237.160.44"/>
        </slice>
        <from usec="0" sec="1576126805"/>
        <to usec="0" sec="1576127628"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="45.29.17.46" src_port="41608" dst_port="23"/>
        </slice>
        <from usec="0" sec="1576126805"/>
        <to usec="0" sec="1576127617"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.131.0.166"/>
        </slice>
        <from usec="0" sec="1576126806"/>
        <to usec="0" sec="1576127626"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.214.220.23"/>
        </slice>
        <from usec="0" sec="1576126806"/>
        <to usec="0" sec="1576127619"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="123.8.21.20"/>
        </slice>
        <from usec="0" sec="1576126807"/>
        <to usec="0" sec="1576127624"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="92.193.204.54"/>
        </slice>
        <from usec="0" sec="1576126807"/>
        <to usec="0" sec="1576127627"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.228.211.99"/>
        </slice>
        <from usec="0" sec="1576126807"/>
        <to usec="0" sec="1576127628"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="45.163.243.62"/>
        </slice>
        <from usec="0" sec="1576126808"/>
        <to usec="0" sec="1576127622"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="177.248.147.220"/>
        </slice>
        <from usec="0" sec="1576126809"/>
        <to usec="0" sec="1576127624"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.131.229.103"/>
        </slice>
        <from usec="0" sec="1576126812"/>
        <to usec="0" sec="1576127627"/>
    </anomaly>
    <anomaly type="notice" value="0.607617,1.0715,504,1 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.228.202.93" dst_port="443"/>
            <filter src_ip="133.228.202.93" dst_port="80"/>
        </slice>
        <from usec="0" sec="1576126813"/>
        <to usec="0" sec="1576127602"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.131.61.54"/>
        </slice>
        <from usec="0" sec="1576126814"/>
        <to usec="0" sec="1576127627"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="192.29.232.23"/>
        </slice>
        <from usec="0" sec="1576126815"/>
        <to usec="0" sec="1576127628"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.131.217.137"/>
        </slice>
        <from usec="0" sec="1576126815"/>
        <to usec="0" sec="1576127596"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="3.56.176.174"/>
        </slice>
        <from usec="0" sec="1576126818"/>
        <to usec="0" sec="1576127627"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="162.193.109.182"/>
        </slice>
        <from usec="0" sec="1576126819"/>
        <to usec="0" sec="1576127615"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="209.228.79.106"/>
        </slice>
        <from usec="0" sec="1576126826"/>
        <to usec="0" sec="1576127591"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="75.0.101.92"/>
        </slice>
        <from usec="0" sec="1576126832"/>
        <to usec="0" sec="1576127604"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter src_ip="114.236.93.140"/>
        </slice>
        <from usec="0" sec="1576127110"/>
        <to usec="0" sec="1576127593"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="162.0.106.243"/>
        </slice>
        <from usec="0" sec="1576127210"/>
        <to usec="0" sec="1576127624"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="45.176.252.17"/>
        </slice>
        <from usec="0" sec="1576127375"/>
        <to usec="0" sec="1576127612"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="172.149.38.41"/>
        </slice>
        <from usec="0" sec="1576127450"/>
        <to usec="0" sec="1576127628"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="104.152.103.231"/>
        </slice>
        <from usec="0" sec="1576127465"/>
        <to usec="0" sec="1576127524"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="133.228.187.54" dst_ip="180.223.192.140" src_port="53"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576126846"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="133.228.187.54" dst_ip="180.223.192.151" src_port="53"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576126846"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="133.228.187.54" dst_ip="156.26.151.109" src_port="53"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576126846"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="156.26.151.112" src_port="53"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576126846"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="156.26.112.127" src_port="53"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576126846"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="133.228.187.54" dst_ip="125.168.37.187" src_port="53"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576126846"/>
    </anomaly>
    <anomaly type="notice" value="0.670136,1.13771,020,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="13.204.208.37"/>
            <filter dst_ip="146.122.12.0"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127386"/>
    </anomaly>
    <anomaly type="notice" value="0.454573,1.08825,504,0 0 0 1 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="52.247.98.186" dst_ip="202.178.236.39" src_port="443"/>
        </slice>
        <from usec="0" sec="1576126808"/>
        <to usec="0" sec="1576127609"/>
    </anomaly>
    <anomaly type="notice" value="0.670136,1.13771,999,0 0 0 1 0 0 1 0 0 0 0 0,DDoSUDP">
        <slice>
            <filter dst_ip="133.106.178.136" dst_port="60217"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127628"/>
    </anomaly>
    <anomaly type="notice" value="0.670136,1.13771,020,0 0 0 1 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="204.51.213.225"/>
            <filter dst_ip="18.199.104.79"/>
            <filter dst_ip="18.198.197.199"/>
        </slice>
        <from usec="0" sec="1576126801"/>
        <to usec="0" sec="1576127619"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="18.199.170.121"/>
        </slice>
        <from usec="0" sec="1576126980"/>
        <to usec="0" sec="1576127026"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="94.102.177.1"/>
        </slice>
        <from usec="0" sec="1576126980"/>
        <to usec="0" sec="1576127026"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,DDoSUDP">
        <slice>
            <filter dst_ip="163.131.188.144"/>
        </slice>
        <from usec="0" sec="1576126980"/>
        <to usec="0" sec="1576127026"/>
    </anomaly>
    <anomaly type="notice" value="0.670136,1.13771,020,0 0 0 1 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.197.189.218" dst_port="53"/>
            <filter dst_ip="203.197.189.218"/>
        </slice>
        <from usec="0" sec="1576126843"/>
        <to usec="0" sec="1576127626"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.197.169.154"/>
        </slice>
        <from usec="0" sec="1576126980"/>
        <to usec="0" sec="1576127026"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="133.228.34.212" dst_ip="180.223.192.140" src_port="53"/>
        </slice>
        <from usec="0" sec="1576126980"/>
        <to usec="0" sec="1576127026"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="133.228.34.212" dst_ip="180.223.192.151" src_port="53"/>
        </slice>
        <from usec="0" sec="1576126980"/>
        <to usec="0" sec="1576127026"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="84.116.71.168" src_port="53"/>
        </slice>
        <from usec="0" sec="1576126980"/>
        <to usec="0" sec="1576127026"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="84.116.69.48" src_port="53"/>
        </slice>
        <from usec="0" sec="1576126980"/>
        <to usec="0" sec="1576127026"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="211.120.168.169" src_port="53"/>
        </slice>
        <from usec="0" sec="1576126980"/>
        <to usec="0" sec="1576127026"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="211.120.168.171" src_port="53"/>
        </slice>
        <from usec="0" sec="1576126980"/>
        <to usec="0" sec="1576127026"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="211.120.168.170" src_port="53"/>
        </slice>
        <from usec="0" sec="1576126980"/>
        <to usec="0" sec="1576127026"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="133.228.34.212" dst_ip="156.26.151.109" src_port="53"/>
        </slice>
        <from usec="0" sec="1576126980"/>
        <to usec="0" sec="1576127026"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="156.26.112.111" src_port="53"/>
        </slice>
        <from usec="0" sec="1576126980"/>
        <to usec="0" sec="1576127026"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="156.26.151.112" src_port="53"/>
        </slice>
        <from usec="0" sec="1576126980"/>
        <to usec="0" sec="1576127026"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="156.26.112.127" src_port="53"/>
        </slice>
        <from usec="0" sec="1576126980"/>
        <to usec="0" sec="1576127026"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="23.147.137.240" src_port="53"/>
        </slice>
        <from usec="0" sec="1576126980"/>
        <to usec="0" sec="1576127026"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="176.54.186.8" src_port="53"/>
        </slice>
        <from usec="0" sec="1576126980"/>
        <to usec="0" sec="1576127026"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="133.228.34.212" dst_ip="180.231.228.17" src_port="53"/>
            <filter src_ip="133.228.187.54" dst_ip="180.231.228.17" src_port="53"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127071"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="133.228.34.212" dst_ip="125.168.37.187" src_port="53"/>
        </slice>
        <from usec="0" sec="1576126980"/>
        <to usec="0" sec="1576127071"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="63.200.170.93"/>
        </slice>
        <from usec="0" sec="1576127250"/>
        <to usec="0" sec="1576127296"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="35.58.108.16"/>
        </slice>
        <from usec="0" sec="1576127340"/>
        <to usec="0" sec="1576127386"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="13.197.188.245"/>
        </slice>
        <from usec="0" sec="1576127340"/>
        <to usec="0" sec="1576127386"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.186.201.113"/>
        </slice>
        <from usec="0" sec="1576127340"/>
        <to usec="0" sec="1576127386"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.197.184.202" dst_port="53"/>
        </slice>
        <from usec="0" sec="1576126980"/>
        <to usec="0" sec="1576127386"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.131.93.110" src_port="53"/>
        </slice>
        <from usec="0" sec="1576127340"/>
        <to usec="0" sec="1576127386"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.131.92.60" src_port="53"/>
        </slice>
        <from usec="0" sec="1576127340"/>
        <to usec="0" sec="1576127386"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.131.92.61" src_port="53"/>
        </slice>
        <from usec="0" sec="1576127340"/>
        <to usec="0" sec="1576127386"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.131.93.109" src_port="53"/>
        </slice>
        <from usec="0" sec="1576127340"/>
        <to usec="0" sec="1576127386"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.131.92.56" src_port="53"/>
        </slice>
        <from usec="0" sec="1576127340"/>
        <to usec="0" sec="1576127386"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.131.93.104" src_port="53"/>
        </slice>
        <from usec="0" sec="1576127340"/>
        <to usec="0" sec="1576127386"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.131.136.63" src_port="53"/>
        </slice>
        <from usec="0" sec="1576127340"/>
        <to usec="0" sec="1576127386"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.131.93.106" src_port="53"/>
        </slice>
        <from usec="0" sec="1576127340"/>
        <to usec="0" sec="1576127386"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="54.92.148.169"/>
        </slice>
        <from usec="0" sec="1576127340"/>
        <to usec="0" sec="1576127386"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.131.92.55" src_port="53"/>
        </slice>
        <from usec="0" sec="1576127340"/>
        <to usec="0" sec="1576127386"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.197.172.147" src_port="53"/>
        </slice>
        <from usec="0" sec="1576127340"/>
        <to usec="0" sec="1576127386"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.131.92.52" src_port="53"/>
        </slice>
        <from usec="0" sec="1576127340"/>
        <to usec="0" sec="1576127386"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.178.236.244" src_port="53"/>
        </slice>
        <from usec="0" sec="1576127340"/>
        <to usec="0" sec="1576127386"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="202.186.206.144"/>
        </slice>
        <from usec="0" sec="1576127340"/>
        <to usec="0" sec="1576127386"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.131.92.48" src_port="53"/>
        </slice>
        <from usec="0" sec="1576127340"/>
        <to usec="0" sec="1576127386"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.131.11.245"/>
        </slice>
        <from usec="0" sec="1576127340"/>
        <to usec="0" sec="1576127386"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,504,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.178.238.222" src_port="443"/>
            <filter src_ip="104.152.103.80" dst_ip="202.178.238.222" src_port="80"/>
        </slice>
        <from usec="0" sec="1576127340"/>
        <to usec="0" sec="1576127386"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="98.72.96.189" src_port="53"/>
        </slice>
        <from usec="0" sec="1576127340"/>
        <to usec="0" sec="1576127386"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.197.62.158"/>
        </slice>
        <from usec="0" sec="1576127340"/>
        <to usec="0" sec="1576127386"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.197.62.141"/>
        </slice>
        <from usec="0" sec="1576127340"/>
        <to usec="0" sec="1576127386"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="34.62.90.103"/>
        </slice>
        <from usec="0" sec="1576127340"/>
        <to usec="0" sec="1576127386"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="3.99.170.104"/>
        </slice>
        <from usec="0" sec="1576127340"/>
        <to usec="0" sec="1576127386"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="207.231.84.148" dst_ip="163.131.188.163" dst_port="11211"/>
        </slice>
        <from usec="0" sec="1576127340"/>
        <to usec="0" sec="1576127386"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="18.154.249.168"/>
        </slice>
        <from usec="0" sec="1576127340"/>
        <to usec="0" sec="1576127386"/>
    </anomaly>
    <anomaly type="notice" value="0.670136,1.13771,010,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="133.252.66.78" dst_port="50348"/>
            <filter dst_ip="133.252.66.38" dst_port="50356"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127628"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="54.183.243.53"/>
        </slice>
        <from usec="0" sec="1576127340"/>
        <to usec="0" sec="1576127386"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="18.167.39.238"/>
        </slice>
        <from usec="0" sec="1576127340"/>
        <to usec="0" sec="1576127386"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,502,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="222.73.158.22" src_port="22"/>
        </slice>
        <from usec="0" sec="1576127340"/>
        <to usec="0" sec="1576127386"/>
    </anomaly>
    <anomaly type="notice" value="0.670136,1.13771,999,0 0 0 1 0 0 1 0 0 0 0 0,DDoSUDP">
        <slice>
            <filter dst_ip="163.131.60.10"/>
        </slice>
        <from usec="0" sec="1576126800"/>
        <to usec="0" sec="1576127579"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="1.228.138.249" dst_ip="203.197.181.214" src_port="53"/>
        </slice>
        <from usec="0" sec="1576127340"/>
        <to usec="0" sec="1576127386"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="92.65.146.212"/>
        </slice>
        <from usec="0" sec="1576127340"/>
        <to usec="0" sec="1576127386"/>
    </anomaly>
    <anomaly type="notice" value="0.638039,1.13711,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.197.177.9" dst_ip="185.10.116.80" dst_port="53"/>
        </slice>
        <from usec="0" sec="1576126980"/>
        <to usec="0" sec="1576127521"/>
    </anomaly>
    <anomaly type="notice" value="0.693861,1.07945,503,0 0 0 1 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="39.10.46.204" dst_ip="203.197.185.198" src_port="80" dst_port="123"/>
            <filter src_ip="39.10.46.204" dst_ip="203.197.172.147" src_port="80" dst_port="123"/>
            <filter src_ip="39.10.46.204" dst_ip="203.197.184.243" src_port="80" dst_port="123"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662914,1.07881,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="103.120.210.78" dst_port="23"/>
            <filter src_ip="103.120.210.78" dst_port="26"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662914,1.07881,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="146.122.12.0"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662914,1.07881,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="113.236.164.85"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662914,1.07881,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="117.30.23.15"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662914,1.07881,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="123.55.148.35"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662914,1.07881,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="133.228.205.137"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662914,1.07881,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="139.165.34.134"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662914,1.07881,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="153.100.43.16" src_port="29342" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662914,1.07881,010,0 0 0 0 0 0 0 0 0 1 0 0,ntscSYN">
        <slice>
            <filter src_ip="61.113.168.106" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662914,1.07881,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="163.131.158.180"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662914,1.07881,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="178.112.84.76" dst_port="4991"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662914,1.07881,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="183.186.247.108"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662914,1.07881,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="13.187.47.192" src_port="50102"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662914,1.07881,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="202.84.171.92"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662914,1.07881,020,0 0 0 0 0 0 0 0 0 1 0 0,icmp_error">
        <slice>
            <filter src_ip="203.197.181.252"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662914,1.07881,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="133.106.178.136"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662914,1.07881,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="210.154.10.168"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662914,1.07881,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="221.100.98.225"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662914,1.07881,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="52.217.0.56"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662914,1.07881,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="137.109.24.127"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662914,1.07881,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.178.236.101" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662914,1.07881,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="202.178.238.61" dst_port="443"/>
            <filter src_ip="17.243.52.41" dst_ip="202.178.238.61" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662914,1.07881,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.186.196.94" src_port="53"/>
            <filter dst_ip="202.186.196.94" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.693861,1.07945,504,0 0 0 1 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="52.37.144.172" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
