<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="suspicious" value="1.02051,1.18181,010,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="94.152.13.24" src_port="48468"/>
        </slice>
        <from usec="0" sec="1580620337"/>
        <to usec="0" sec="1580620338"/>
    </anomaly>
    <anomaly type="suspicious" value="1.02051,1.18181,010,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="185.15.229.83" src_port="51183"/>
        </slice>
        <from usec="0" sec="1580620344"/>
        <to usec="0" sec="1580620345"/>
    </anomaly>
    <anomaly type="suspicious" value="1.02051,1.18181,010,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="80.160.94.197" src_port="48344"/>
        </slice>
        <from usec="0" sec="1580620337"/>
        <to usec="0" sec="1580620338"/>
    </anomaly>
    <anomaly type="suspicious" value="1.02051,1.18181,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="115.167.164.18" dst_port="445"/>
        </slice>
        <from usec="0" sec="1580620278"/>
        <to usec="0" sec="1580620281"/>
    </anomaly>
    <anomaly type="suspicious" value="1.02051,1.18181,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="221.196.135.41" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1580619723"/>
        <to usec="0" sec="1580619731"/>
    </anomaly>
    <anomaly type="suspicious" value="1.02051,1.18181,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="112.122.5.40" dst_port="445"/>
        </slice>
        <from usec="0" sec="1580620152"/>
        <to usec="0" sec="1580620155"/>
    </anomaly>
    <anomaly type="suspicious" value="1.02051,1.18181,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="119.226.234.25" dst_port="445"/>
        </slice>
        <from usec="0" sec="1580620390"/>
        <to usec="0" sec="1580620393"/>
    </anomaly>
    <anomaly type="suspicious" value="1.1319,1.34767,901,0 0 0 0 1 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620158"/>
    </anomaly>
    <anomaly type="suspicious" value="1.1319,1.34767,901,0 0 0 0 1 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620158"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12989,1.33638,010,0 0 0 1 1 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="45.180.72.240" src_port="55237" dst_port="8080"/>
        </slice>
        <from usec="0" sec="1580619601"/>
        <to usec="0" sec="1580620065"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12989,1.33638,010,0 0 0 1 1 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="59.134.246.13" src_port="23727" dst_port="23"/>
        </slice>
        <from usec="0" sec="1580619610"/>
        <to usec="0" sec="1580620150"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12989,1.33638,504,0 0 0 1 1 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.107.22.72" dst_ip="126.168.94.159" src_port="443"/>
        </slice>
        <from usec="0" sec="1580619611"/>
        <to usec="0" sec="1580620326"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12989,1.33638,010,0 0 0 1 1 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="211.235.144.219" src_port="31430"/>
        </slice>
        <from usec="0" sec="1580619601"/>
        <to usec="0" sec="1580620423"/>
    </anomaly>
    <anomaly type="suspicious" value="1.33318,1.47062,901,0 0 0 0 0 1 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620158"/>
    </anomaly>
    <anomaly type="suspicious" value="1.33318,1.47062,901,0 0 0 0 0 1 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620158"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10738,1.31176,999,0 0 0 0 0 0 1 1 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.144.8.178" dst_ip="194.126.222.22" dst_port="53"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620186"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10738,1.31176,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.102.216.46" dst_port="53"/>
        </slice>
        <from usec="0" sec="1580620140"/>
        <to usec="0" sec="1580620186"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10738,1.31176,999,0 0 0 0 0 0 1 1 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.144.8.178" dst_ip="185.54.47.201" dst_port="53"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620456"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10738,1.31176,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.144.7.198" dst_port="53"/>
        </slice>
        <from usec="0" sec="1580620140"/>
        <to usec="0" sec="1580620186"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10738,1.31176,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.102.242.35" src_port="53"/>
        </slice>
        <from usec="0" sec="1580620140"/>
        <to usec="0" sec="1580620186"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10738,1.31176,010,0 0 0 0 0 0 1 1 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="203.144.20.16" dst_ip="52.17.38.212" src_port="55684"/>
        </slice>
        <from usec="0" sec="1580620140"/>
        <to usec="0" sec="1580620186"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10738,1.31176,010,0 0 0 0 0 0 1 1 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.4.122.69" dst_port="50356"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620186"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10738,1.31176,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.107.16.81" src_port="53"/>
        </slice>
        <from usec="0" sec="1580620140"/>
        <to usec="0" sec="1580620186"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10738,1.31176,010,0 0 0 0 0 0 1 1 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="167.98.87.210" dst_ip="203.144.26.93" src_port="32766"/>
        </slice>
        <from usec="0" sec="1580620140"/>
        <to usec="0" sec="1580620186"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10738,1.31176,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.144.2.128" src_port="53"/>
        </slice>
        <from usec="0" sec="1580620140"/>
        <to usec="0" sec="1580620186"/>
    </anomaly>
    <anomaly type="suspicious" value="0.964096,1.27681,010,0 0 0 1 0 0 0 1 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.36.208.213" dst_port="54748"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620186"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10738,1.31176,999,0 0 0 0 0 0 1 1 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.29.36.90" dst_ip="60.49.78.214" src_port="587"/>
        </slice>
        <from usec="0" sec="1580620140"/>
        <to usec="0" sec="1580620186"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10738,1.31176,010,0 0 0 0 0 0 1 1 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.4.121.58" dst_port="50356"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620186"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10738,1.31176,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.144.14.57" dst_port="53"/>
        </slice>
        <from usec="0" sec="1580620140"/>
        <to usec="0" sec="1580620186"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10738,1.31176,010,0 0 0 0 0 0 1 1 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.36.170.202" dst_port="54756"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620186"/>
    </anomaly>
    <anomaly type="suspicious" value="0.788633,1.14995,010,0 0 0 0 0 0 1 0 0 1 0 0,ntscSYN">
        <slice>
            <filter src_ip="162.12.115.143" dst_port="109"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08337,1.14487,999,1 1 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="163.45.126.189" dst_ip="73.205.74.214" src_port="58333" dst_port="57183"/>
            <filter src_ip="163.45.126.189" dst_ip="31.10.178.59" src_port="59543" dst_port="443"/>
            <filter src_ip="203.144.20.16" dst_ip="73.205.74.214"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03434,1.11388,504,0 0 0 0 0 0 0 0 0 1 1 1,ptmpla">
        <slice>
            <filter src_ip="163.45.159.115" dst_ip="52.240.76.36" dst_port="443"/>
            <filter src_ip="163.45.159.115" dst_ip="40.77.1.46" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03434,1.11388,503,0 0 0 0 0 0 0 0 0 1 1 1,ptmpHTTP">
        <slice>
            <filter src_ip="163.45.2.25" src_port="80"/>
            <filter src_ip="163.45.2.25" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.772764,1.08009,999,0 0 0 1 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.45.7.116" dst_port="993"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.775695,1.09402,010,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="109.111.184.244" src_port="7651" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03215,1.1002,504,0 0 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="203.144.2.199" src_port="53"/>
            <filter dst_ip="203.144.2.199" src_port="443"/>
            <filter dst_ip="163.45.142.170" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.775695,1.09402,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="133.29.36.163" src_port="443"/>
            <filter src_ip="133.29.36.163" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.775695,1.09402,010,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="137.179.74.154" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.775695,1.09402,010,0 0 0 0 0 0 0 0 0 1 1 0,sntscSYN">
        <slice>
            <filter src_ip="144.37.42.194" src_port="40444" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03434,1.11388,504,0 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="151.122.104.143" dst_ip="163.45.127.150" src_port="443"/>
            <filter src_ip="151.122.104.143" dst_ip="163.45.127.150" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03434,1.11388,504,0 0 0 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.45.125.78" src_port="443"/>
            <filter dst_ip="163.45.125.78" dst_port="8999"/>
            <filter dst_ip="163.45.127.135" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.775695,1.09402,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="160.245.80.154" dst_ip="202.107.22.88" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03215,1.1002,504,0 0 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="31.10.178.2" dst_port="443"/>
            <filter src_ip="163.45.125.156" dst_ip="23.156.60.38" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.772764,1.08009,999,0 0 0 1 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="163.45.32.99" dst_port="53"/>
            <filter src_ip="163.45.33.91" dst_port="53"/>
            <filter src_ip="163.45.33.90" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.775695,1.09402,999,0 0 0 0 0 0 0 0 0 1 1 0,ntscUDPOther">
        <slice>
            <filter src_ip="172.151.11.104" dst_port="69"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.775695,1.09402,010,0 0 0 0 0 0 0 0 0 1 1 0,ntscSYN">
        <slice>
            <filter src_ip="172.150.185.177" src_port="59340" dst_port="4702"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.775695,1.09402,010,0 0 0 0 0 0 0 0 0 1 1 0,sntscSYN">
        <slice>
            <filter src_ip="178.0.121.15" src_port="46691" dst_port="1697"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03434,1.11388,011,0 0 0 0 0 0 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="193.226.229.115" src_port="50002"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03434,1.11388,504,0 0 0 0 0 0 0 0 0 1 1 1,mptpla">
        <slice>
            <filter dst_ip="163.45.157.223" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.775695,1.09402,020,0 0 0 0 0 0 0 0 0 1 1 0,icmp_error">
        <slice>
            <filter src_ip="202.102.235.254"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.775695,1.09402,999,0 0 0 0 0 0 0 0 0 1 1 0,ntscUDPOther">
        <slice>
            <filter src_ip="204.210.125.123" src_port="64408" dst_port="1900"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03434,1.11388,999,0 0 0 0 0 0 0 0 0 1 1 1,malphfl">
        <slice>
            <filter src_ip="213.217.19.120" dst_ip="203.144.7.219" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.775695,1.09402,010,0 0 0 0 0 0 0 0 0 1 1 0,sntscSYN">
        <slice>
            <filter src_ip="45.219.124.172" dst_port="82"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.775695,1.09402,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="74.114.244.131" dst_ip="202.107.21.44" src_port="443" dst_port="53494"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03434,1.11388,504,0 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="94.125.94.179" dst_ip="163.45.127.76" src_port="443" dst_port="59684"/>
            <filter src_ip="94.125.94.179" dst_ip="163.45.127.76" src_port="443" dst_port="59680"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03434,1.11388,503,0 0 0 0 0 0 0 0 0 1 1 1,mptplaHTTP">
        <slice>
            <filter dst_ip="163.45.192.24" src_port="443"/>
            <filter src_ip="99.171.53.34" dst_ip="163.45.192.24" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03215,1.1002,504,0 0 0 1 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.45.125.229" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03434,1.11388,999,0 0 0 0 0 0 0 0 0 1 1 1,ptmpla">
        <slice>
            <filter src_ip="203.144.12.163" src_port="3010"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.775695,1.09402,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="163.45.149.250" dst_ip="126.208.198.229" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03215,1.1002,504,0 0 0 1 0 0 0 0 0 1 1 1,salphfl">
        <slice>
            <filter src_ip="163.45.124.19" dst_ip="66.104.49.34" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03434,1.11388,999,0 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="163.45.193.149" dst_ip="157.243.234.59" src_port="54448" dst_port="40003"/>
            <filter src_ip="163.45.193.149" dst_ip="157.243.234.59" src_port="54216" dst_port="443"/>
            <filter src_ip="163.45.193.149" dst_ip="157.243.234.59"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.772764,1.08009,504,0 0 0 1 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="104.36.21.137" dst_ip="163.45.154.245" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03215,1.1002,504,0 0 0 1 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.45.156.155" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.775695,1.09402,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="203.144.2.129" dst_ip="196.196.243.71" src_port="443" dst_port="49081"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.775695,1.09402,011,0 0 0 0 0 0 0 0 0 1 1 0,heavy_hitter">
        <slice>
            <filter src_ip="203.144.20.16" dst_ip="156.74.136.87" src_port="55684"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.775695,1.09402,010,0 0 0 0 0 0 0 0 0 1 1 0,heavy_hitter">
        <slice>
            <filter src_ip="203.144.20.16" dst_ip="203.144.4.45" src_port="55684"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03434,1.11388,504,0 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="131.158.18.125" dst_ip="211.28.237.25" src_port="443" dst_port="58903"/>
            <filter src_ip="131.158.18.125" dst_ip="211.28.237.25" src_port="443" dst_port="58902"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10533,1.30017,020,0 0 0 1 0 0 1 1 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="51.86.87.174"/>
            <filter dst_ip="51.86.87.174" src_port="7443"/>
            <filter dst_ip="51.86.87.174"/>
            <filter dst_ip="146.88.112.4"/>
            <filter dst_ip="146.88.112.4"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620186"/>
    </anomaly>
    <anomaly type="suspicious" value="0.775695,1.09402,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="203.144.8.206" dst_ip="23.223.97.219" src_port="59951" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03215,1.1002,503,0 0 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_port="80"/>
            <filter src_ip="203.144.20.16" src_port="23"/>
            <filter dst_ip="37.29.147.155" src_port="23"/>
            <filter dst_ip="125.148.197.86" src_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.36841,1.33504,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="150.2.204.25" dst_port="445"/>
            <filter src_ip="150.2.204.25" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1580620315"/>
        <to usec="0" sec="1580620318"/>
    </anomaly>
    <anomaly type="anomalous" value="1.41591,1.30245,010,1 1 1 0 0 0 0 0 0 1 0 0,ntscSYN">
        <slice>
            <filter src_ip="139.4.151.221" dst_port="48083"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.36841,1.33504,999,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="77.9.97.219" src_port="5064"/>
        </slice>
        <from usec="0" sec="1580620243"/>
        <to usec="0" sec="1580620372"/>
    </anomaly>
    <anomaly type="anomalous" value="1.50891,1.27714,999,1 1 1 0 0 0 0 0 0 1 1 0,ptpposcaUDP">
        <slice>
            <filter src_ip="203.144.7.219" dst_ip="213.217.19.120" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.36841,1.33504,999,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="218.253.38.66" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="1580619708"/>
        <to usec="0" sec="1580620325"/>
    </anomaly>
    <anomaly type="anomalous" value="1.74277,1.31724,010,1 1 1 0 0 0 1 0 0 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="185.37.168.210" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.38672,1.72843,010,1 1 1 1 1 1 1 0 0 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="222.51.0.156" src_port="9090" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.48257,1.2857,999,1 1 0 1 0 0 1 1 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="103.54.205.204" src_port="5353"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.36841,1.33504,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.102.127.226" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1580619618"/>
        <to usec="0" sec="1580620337"/>
    </anomaly>
    <anomaly type="anomalous" value="1.36841,1.33504,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="186.43.242.70" src_port="5109" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1580619852"/>
        <to usec="0" sec="1580619946"/>
    </anomaly>
    <anomaly type="anomalous" value="1.6568,1.29419,999,1 1 1 0 0 0 0 0 0 1 1 1,ntscUDPOther">
        <slice>
            <filter src_ip="51.72.65.238" src_port="5100" dst_port="5060"/>
            <filter src_ip="51.72.65.238" src_port="5098" dst_port="5060"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.74277,1.31724,010,1 1 1 0 0 0 1 0 0 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="218.214.254.148" src_port="6000" dst_port="1433"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.36841,1.33504,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.102.124.4" dst_port="5351"/>
        </slice>
        <from usec="0" sec="1580619828"/>
        <to usec="0" sec="1580620473"/>
    </anomaly>
    <anomaly type="anomalous" value="1.36841,1.33504,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.102.124.7" dst_port="5351"/>
        </slice>
        <from usec="0" sec="1580619942"/>
        <to usec="0" sec="1580620149"/>
    </anomaly>
    <anomaly type="anomalous" value="1.36841,1.33504,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="218.206.112.43" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1580620111"/>
        <to usec="0" sec="1580620112"/>
    </anomaly>
    <anomaly type="anomalous" value="1.36841,1.33504,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="190.70.69.173" dst_port="445"/>
        </slice>
        <from usec="0" sec="1580619907"/>
        <to usec="0" sec="1580619910"/>
    </anomaly>
    <anomaly type="anomalous" value="1.36841,1.33504,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="193.137.133.159" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1580619662"/>
        <to usec="0" sec="1580620327"/>
    </anomaly>
    <anomaly type="anomalous" value="1.36841,1.33504,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="223.197.34.127" dst_port="445"/>
        </slice>
        <from usec="0" sec="1580620232"/>
        <to usec="0" sec="1580620233"/>
    </anomaly>
    <anomaly type="anomalous" value="1.6568,1.29419,999,1 1 1 0 0 0 0 0 0 1 1 1,ntscUDPOther">
        <slice>
            <filter src_ip="89.252.80.218" dst_port="1031"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.36841,1.33504,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="188.172.172.56" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1580619648"/>
        <to usec="0" sec="1580620314"/>
    </anomaly>
    <anomaly type="anomalous" value="1.36841,1.33504,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="202.220.36.183"/>
        </slice>
        <from usec="0" sec="1580619686"/>
        <to usec="0" sec="1580619688"/>
    </anomaly>
    <anomaly type="anomalous" value="1.36841,1.33504,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="188.92.78.86"/>
        </slice>
        <from usec="0" sec="1580620211"/>
        <to usec="0" sec="1580620212"/>
    </anomaly>
    <anomaly type="anomalous" value="2.47805,1.79991,012,1 1 1 1 1 1 0 1 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="45.53.75.254"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.93107,1.57895,999,0 0 0 1 1 1 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="203.144.12.178" dst_port="3001"/>
            <filter dst_ip="203.144.12.178"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.93107,1.57895,999,0 0 0 1 1 1 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="203.144.12.163"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.93107,1.57895,999,0 0 0 1 1 1 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="203.144.12.154"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.13847,1.59425,010,1 1 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="89.252.80.223" src_port="48400"/>
            <filter src_ip="45.56.242.247" src_port="42847"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.66471,2.36279,999,1 1 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.144.8.178" dst_port="123"/>
            <filter src_ip="185.54.47.201" dst_ip="203.144.8.178" src_port="53"/>
            <filter src_ip="194.126.222.22" dst_ip="203.144.8.178" src_port="53"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620469"/>
    </anomaly>
    <anomaly type="anomalous" value="2.57075,2.3463,999,1 0 0 0 0 0 1 1 1 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.144.20.16" dst_ip="197.58.201.214" dst_port="1312"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620290"/>
    </anomaly>
    <anomaly type="anomalous" value="1.36675,1.32364,999,1 1 1 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="8.51.63.244" src_port="53"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620428"/>
    </anomaly>
    <anomaly type="anomalous" value="1.36675,1.32364,999,1 1 1 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="77.9.97.226" src_port="5069"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580619978"/>
    </anomaly>
    <anomaly type="anomalous" value="2.50043,2.34605,999,0 0 0 1 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.144.14.56" dst_port="53"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620330"/>
    </anomaly>
    <anomaly type="anomalous" value="2.53634,1.81655,504,1 1 1 1 1 1 1 1 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="202.226.173.241" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.19245,1.10073,504,1 0 0 0 0 0 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="52.69.186.52" dst_port="443"/>
            <filter src_ip="52.69.186.52" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.71412,1.27733,504,1 1 0 1 0 0 1 1 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="202.226.173.241" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.27694,1.25279,010,0 0 0 0 0 0 1 1 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="133.4.121.85" dst_port="50348"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.38576,2.66709,999,1 1 1 1 1 1 1 1 1 1 1 1,ptmp">
        <slice>
            <filter src_ip="45.53.75.254"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.71544,1.28913,999,1 1 0 0 0 0 1 1 0 1 1 1,ptmpla">
        <slice>
            <filter src_ip="45.53.74.147" dst_ip="133.4.122.35"/>
            <filter src_ip="45.53.74.147" dst_ip="133.4.122.34"/>
            <filter src_ip="45.53.74.147" dst_ip="133.4.122.32"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.27516,1.24064,010,0 0 0 1 0 0 1 1 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="150.36.170.218" dst_port="54748"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.19245,1.10073,503,1 0 0 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.45.124.113"/>
            <filter src_ip="38.174.29.198" dst_ip="163.45.31.242" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.38672,1.72843,010,1 1 1 1 1 1 1 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="185.15.229.252" src_port="49228"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.93107,1.57895,020,0 0 0 1 1 1 0 0 0 1 1 1,ntscICec">
        <slice>
            <filter src_ip="35.178.203.20"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.95556,1.45351,999,1 1 1 1 1 0 0 0 0 1 1 1,ipv4gretun">
        <slice>
            <filter src_ip="203.144.6.248" dst_ip="206.164.24.254"/>
            <filter src_ip="203.144.6.248" dst_ip="204.197.209.109"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.58,2.31359,901,0 0 0 1 0 0 1 1 1 1 1 0,empty">
        <slice/>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.93107,1.57895,010,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="92.105.42.177" src_port="48472"/>
            <filter src_ip="92.104.96.248" src_port="45518"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.40645,1.22884,502,1 0 0 1 0 0 1 1 0 1 1 0,mptmp">
        <slice>
            <filter dst_ip="185.37.168.154" src_port="22"/>
            <filter dst_ip="218.172.192.202" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.26052,1.6842,504,1 0 0 1 1 1 1 1 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="202.107.16.110" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.19245,1.10073,999,1 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="163.45.127.192" dst_ip="45.149.100.43" dst_port="16377"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.16711,1.14058,503,0 0 0 0 0 0 1 0 0 1 1 1,mptplaHTTP">
        <slice>
            <filter src_ip="192.154.106.170" dst_ip="163.45.163.11" src_port="80"/>
            <filter src_ip="192.154.106.175" dst_ip="163.45.163.11" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.80579,1.56501,504,0 0 0 1 1 1 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.45.127.29" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.88515,1.43381,999,1 1 0 1 1 0 1 1 0 1 1 0,mptmp">
        <slice>
            <filter dst_ip="203.144.11.153"/>
            <filter src_ip="103.54.205.204" dst_ip="203.144.1.254" dst_port="5353"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.46598,1.29557,504,0 0 0 1 1 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.45.143.51" src_port="443"/>
            <filter dst_ip="163.45.193.27" src_port="443"/>
            <filter dst_ip="163.45.159.2" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.38343,1.13546,999,1 1 0 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="203.144.12.154"/>
            <filter src_ip="203.144.12.178" src_port="3001"/>
            <filter src_ip="203.144.12.178"/>
            <filter src_ip="203.144.12.178"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.19054,1.08688,503,1 0 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_port="80"/>
            <filter dst_ip="203.144.8.206" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.48378,1.14856,999,1 1 0 1 0 0 1 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="162.12.113.113" dst_port="9300"/>
            <filter src_ip="174.151.123.74" dst_port="520"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.93107,1.57895,504,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="218.117.1.116" src_port="11039"/>
            <filter src_ip="218.117.1.116" dst_port="23"/>
            <filter dst_ip="163.45.247.117" src_port="443"/>
            <filter src_port="11039" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.74147,1.30569,010,1 1 1 1 0 0 1 0 0 1 1 1,ptmpHTTP">
        <slice>
            <filter src_ip="205.181.136.43"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.48378,1.14856,503,1 1 0 1 0 0 1 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="203.144.6.40" dst_port="80"/>
            <filter dst_ip="203.144.11.144" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.56405,1.24655,502,1 0 0 1 0 0 1 1 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="49.168.112.111" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.48378,1.14856,503,1 1 0 1 0 0 1 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="40.88.218.132" dst_port="443"/>
            <filter dst_ip="52.178.122.253" dst_port="443"/>
            <filter dst_ip="38.174.29.204" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.19054,1.08688,503,1 0 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="203.144.6.40" src_port="80"/>
            <filter src_ip="203.144.11.144" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
