<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="notice" value="0.741276,1.14848,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="111.19.253.148" dst_ip="203.144.20.16" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1580619992"/>
        <to usec="0" sec="1580620000"/>
    </anomaly>
    <anomaly type="notice" value="0.741276,1.14848,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="104.255.225.174" dst_ip="163.45.126.189" src_port="57183" dst_port="58333" proto="udp"/>
        </slice>
        <from usec="0" sec="1580620150"/>
        <to usec="0" sec="1580620365"/>
    </anomaly>
    <anomaly type="notice" value="0.741276,1.14848,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="45.53.74.147" proto="tcp"/>
        </slice>
        <from usec="0" sec="1580619746"/>
        <to usec="0" sec="1580620499"/>
    </anomaly>
    <anomaly type="notice" value="0.741276,1.14848,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDPICterp">
        <slice>
            <filter src_ip="202.102.197.129" dst_ip="186.43.242.70" proto="icmp"/>
        </slice>
        <from usec="0" sec="1580619943"/>
        <to usec="0" sec="1580619945"/>
    </anomaly>
    <anomaly type="notice" value="0.741276,1.14848,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="45.27.226.177" dst_port="22" proto="tcp"/>
        </slice>
        <from usec="0" sec="1580620272"/>
        <to usec="0" sec="1580620273"/>
    </anomaly>
    <anomaly type="notice" value="0.741276,1.14848,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="162.12.112.166" dst_port="9300" proto="tcp"/>
        </slice>
        <from usec="0" sec="1580619948"/>
        <to usec="0" sec="1580619959"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620158"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="37.132.116.151"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580619607"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,999,0 0 0 1 0 0 0 0 0 0 0 0,DDoSUDP">
        <slice>
            <filter dst_ip="133.181.110.249"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580619702"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.45.238.71"/>
        </slice>
        <from usec="0" sec="1580619602"/>
        <to usec="0" sec="1580620428"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="80.189.78.129"/>
        </slice>
        <from usec="0" sec="1580619604"/>
        <to usec="0" sec="1580619708"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="38.174.29.197"/>
        </slice>
        <from usec="0" sec="1580619610"/>
        <to usec="0" sec="1580619704"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620158"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.102.240.34"/>
        </slice>
        <from usec="0" sec="1580619601"/>
        <to usec="0" sec="1580619888"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="178.0.228.36"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580619888"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="52.96.226.92"/>
        </slice>
        <from usec="0" sec="1580619603"/>
        <to usec="0" sec="1580619865"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.103.187.228"/>
        </slice>
        <from usec="0" sec="1580619740"/>
        <to usec="0" sec="1580619744"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="45.182.152.219" dst_port="8123"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580619976"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,020,0 0 0 1 0 0 0 0 0 0 0 0,hostout">
        <slice>
            <filter src_ip="163.45.11.172"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580619977"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="69.204.96.196"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620068"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="46.6.79.71"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620068"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="163.45.175.253"/>
        </slice>
        <from usec="0" sec="1580619601"/>
        <to usec="0" sec="1580620066"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="110.110.117.206"/>
        </slice>
        <from usec="0" sec="1580619619"/>
        <to usec="0" sec="1580619942"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="80.235.233.121"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620157"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.29.36.252"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620150"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="222.34.134.84"/>
        </slice>
        <from usec="0" sec="1580619601"/>
        <to usec="0" sec="1580620157"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="219.102.21.36"/>
        </slice>
        <from usec="0" sec="1580619602"/>
        <to usec="0" sec="1580620151"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="1.47.62.180"/>
        </slice>
        <from usec="0" sec="1580619604"/>
        <to usec="0" sec="1580620158"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="203.144.20.16"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620426"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="193.22.121.152"/>
            <filter dst_ip="163.45.232.34"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620335"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.45.168.194"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620246"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="83.101.222.181"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620246"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.144.15.154"/>
        </slice>
        <from usec="0" sec="1580619601"/>
        <to usec="0" sec="1580620248"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="178.240.48.24"/>
        </slice>
        <from usec="0" sec="1580619602"/>
        <to usec="0" sec="1580620246"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="99.171.218.3"/>
        </slice>
        <from usec="0" sec="1580619604"/>
        <to usec="0" sec="1580620247"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.45.127.192"/>
        </slice>
        <from usec="0" sec="1580619609"/>
        <to usec="0" sec="1580620156"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="106.204.24.10"/>
        </slice>
        <from usec="0" sec="1580619619"/>
        <to usec="0" sec="1580620244"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="83.187.144.153"/>
        </slice>
        <from usec="0" sec="1580619621"/>
        <to usec="0" sec="1580620238"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="13.63.244.53"/>
        </slice>
        <from usec="0" sec="1580619636"/>
        <to usec="0" sec="1580620247"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="23.214.234.9"/>
        </slice>
        <from usec="0" sec="1580619863"/>
        <to usec="0" sec="1580620246"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="223.248.106.184"/>
        </slice>
        <from usec="0" sec="1580620178"/>
        <to usec="0" sec="1580620204"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="162.12.112.157"/>
        </slice>
        <from usec="0" sec="1580620237"/>
        <to usec="0" sec="1580620248"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="172.189.208.3"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620337"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="107.226.221.195" dst_port="22"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620338"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="64.56.160.8"/>
        </slice>
        <from usec="0" sec="1580619601"/>
        <to usec="0" sec="1580620338"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,504,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="104.165.31.234" dst_port="443"/>
            <filter src_ip="163.45.31.242" dst_ip="38.174.29.199" dst_port="80"/>
        </slice>
        <from usec="0" sec="1580619603"/>
        <to usec="0" sec="1580620428"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="45.145.90.170"/>
        </slice>
        <from usec="0" sec="1580619604"/>
        <to usec="0" sec="1580620325"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="104.40.36.95"/>
        </slice>
        <from usec="0" sec="1580619607"/>
        <to usec="0" sec="1580620328"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="131.158.193.86"/>
        </slice>
        <from usec="0" sec="1580619611"/>
        <to usec="0" sec="1580620291"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="79.209.162.245"/>
        </slice>
        <from usec="0" sec="1580619614"/>
        <to usec="0" sec="1580620295"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="221.218.121.147"/>
        </slice>
        <from usec="0" sec="1580619620"/>
        <to usec="0" sec="1580620274"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="85.224.181.220"/>
        </slice>
        <from usec="0" sec="1580619623"/>
        <to usec="0" sec="1580620296"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="52.114.223.238"/>
        </slice>
        <from usec="0" sec="1580619624"/>
        <to usec="0" sec="1580620301"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="122.117.44.113"/>
        </slice>
        <from usec="0" sec="1580619653"/>
        <to usec="0" sec="1580620428"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="143.10.233.27"/>
        </slice>
        <from usec="0" sec="1580619989"/>
        <to usec="0" sec="1580620331"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,020,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="197.238.142.99"/>
        </slice>
        <from usec="0" sec="1580620267"/>
        <to usec="0" sec="1580620323"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="104.139.88.7"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620428"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="89.103.27.76"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620414"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="177.217.4.82"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620427"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,020,0 0 0 1 0 0 0 0 0 0 0 0,hostout">
        <slice>
            <filter src_ip="203.144.7.47"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620428"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="162.110.89.26"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620428"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="49.223.164.191"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620362"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.45.250.237"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620427"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="124.19.51.4"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620427"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="62.211.154.192"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620428"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="39.79.252.41"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620428"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="61.78.124.19"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620428"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="122.116.224.166"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620424"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="106.181.15.99" src_port="58914" dst_port="3307"/>
        </slice>
        <from usec="0" sec="1580619601"/>
        <to usec="0" sec="1580620428"/>
    </anomaly>
    <anomaly type="notice" value="0.570207,1.1099,999,0 0 0 1 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.45.32.99" src_port="53"/>
            <filter dst_ip="163.45.33.90" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.45.193.181"/>
        </slice>
        <from usec="0" sec="1580619601"/>
        <to usec="0" sec="1580620426"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="129.203.167.152"/>
        </slice>
        <from usec="0" sec="1580619602"/>
        <to usec="0" sec="1580620428"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="112.63.91.38"/>
        </slice>
        <from usec="0" sec="1580619602"/>
        <to usec="0" sec="1580620426"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,020,0 0 0 1 0 0 0 0 0 0 0 0,hostout">
        <slice>
            <filter src_ip="87.244.189.93"/>
        </slice>
        <from usec="0" sec="1580619602"/>
        <to usec="0" sec="1580620426"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="1.45.170.79"/>
        </slice>
        <from usec="0" sec="1580619602"/>
        <to usec="0" sec="1580620427"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="163.45.17.242"/>
        </slice>
        <from usec="0" sec="1580619602"/>
        <to usec="0" sec="1580620424"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="163.45.232.14"/>
        </slice>
        <from usec="0" sec="1580619603"/>
        <to usec="0" sec="1580620428"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="192.223.226.133"/>
        </slice>
        <from usec="0" sec="1580619603"/>
        <to usec="0" sec="1580620418"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="90.173.246.42"/>
        </slice>
        <from usec="0" sec="1580619603"/>
        <to usec="0" sec="1580620404"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="37.224.45.230"/>
        </slice>
        <from usec="0" sec="1580619603"/>
        <to usec="0" sec="1580620426"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.45.87.91"/>
        </slice>
        <from usec="0" sec="1580619604"/>
        <to usec="0" sec="1580620428"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="13.60.203.97"/>
        </slice>
        <from usec="0" sec="1580619604"/>
        <to usec="0" sec="1580620271"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,011,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="119.71.145.124"/>
        </slice>
        <from usec="0" sec="1580619604"/>
        <to usec="0" sec="1580620391"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="170.241.77.128"/>
        </slice>
        <from usec="0" sec="1580619604"/>
        <to usec="0" sec="1580620424"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.45.124.232"/>
        </slice>
        <from usec="0" sec="1580619605"/>
        <to usec="0" sec="1580620417"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="45.56.242.241" dst_port="443"/>
        </slice>
        <from usec="0" sec="1580619605"/>
        <to usec="0" sec="1580620428"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="185.72.116.121"/>
        </slice>
        <from usec="0" sec="1580619605"/>
        <to usec="0" sec="1580620428"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="91.63.147.234"/>
        </slice>
        <from usec="0" sec="1580619605"/>
        <to usec="0" sec="1580620428"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="187.237.186.146"/>
        </slice>
        <from usec="0" sec="1580619605"/>
        <to usec="0" sec="1580620422"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="104.255.225.174"/>
        </slice>
        <from usec="0" sec="1580619606"/>
        <to usec="0" sec="1580620428"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="13.97.214.167"/>
        </slice>
        <from usec="0" sec="1580619607"/>
        <to usec="0" sec="1580620428"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="114.60.175.149"/>
        </slice>
        <from usec="0" sec="1580619607"/>
        <to usec="0" sec="1580620419"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.45.168.180"/>
        </slice>
        <from usec="0" sec="1580619608"/>
        <to usec="0" sec="1580620428"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="111.97.4.33"/>
        </slice>
        <from usec="0" sec="1580619608"/>
        <to usec="0" sec="1580620427"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="177.97.55.180"/>
        </slice>
        <from usec="0" sec="1580619608"/>
        <to usec="0" sec="1580620428"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="128.203.118.124"/>
        </slice>
        <from usec="0" sec="1580619608"/>
        <to usec="0" sec="1580620419"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.45.126.208"/>
        </slice>
        <from usec="0" sec="1580619609"/>
        <to usec="0" sec="1580620418"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="114.55.72.193"/>
        </slice>
        <from usec="0" sec="1580619609"/>
        <to usec="0" sec="1580620426"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="31.10.178.47"/>
        </slice>
        <from usec="0" sec="1580619609"/>
        <to usec="0" sec="1580620415"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="205.181.136.43"/>
        </slice>
        <from usec="0" sec="1580619609"/>
        <to usec="0" sec="1580620428"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="131.158.232.177"/>
        </slice>
        <from usec="0" sec="1580619610"/>
        <to usec="0" sec="1580620414"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="203.144.20.16"/>
        </slice>
        <from usec="0" sec="1580619611"/>
        <to usec="0" sec="1580620424"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="1.47.91.228"/>
        </slice>
        <from usec="0" sec="1580619613"/>
        <to usec="0" sec="1580620424"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="204.197.209.109"/>
        </slice>
        <from usec="0" sec="1580619618"/>
        <to usec="0" sec="1580620426"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="118.206.177.158"/>
        </slice>
        <from usec="0" sec="1580619630"/>
        <to usec="0" sec="1580620424"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="131.158.228.14"/>
        </slice>
        <from usec="0" sec="1580619633"/>
        <to usec="0" sec="1580620389"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.45.25.108"/>
        </slice>
        <from usec="0" sec="1580619699"/>
        <to usec="0" sec="1580620416"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="23.192.224.187"/>
        </slice>
        <from usec="0" sec="1580619870"/>
        <to usec="0" sec="1580620411"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter src_ip="86.81.176.231"/>
        </slice>
        <from usec="0" sec="1580619893"/>
        <to usec="0" sec="1580620342"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="150.71.75.252"/>
        </slice>
        <from usec="0" sec="1580619995"/>
        <to usec="0" sec="1580620340"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="113.155.91.242"/>
        </slice>
        <from usec="0" sec="1580620167"/>
        <to usec="0" sec="1580620417"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="142.85.156.113"/>
        </slice>
        <from usec="0" sec="1580620209"/>
        <to usec="0" sec="1580620324"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="31.10.178.62"/>
        </slice>
        <from usec="0" sec="1580620296"/>
        <to usec="0" sec="1580620428"/>
    </anomaly>
    <anomaly type="notice" value="0.439189,1.14797,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="13.209.228.88"/>
        </slice>
        <from usec="0" sec="1580620363"/>
        <to usec="0" sec="1580620378"/>
    </anomaly>
    <anomaly type="notice" value="0.699781,1.18673,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.45.80.13" dst_port="53"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580619646"/>
    </anomaly>
    <anomaly type="notice" value="0.699781,1.18673,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.144.7.223" dst_port="53"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580619646"/>
    </anomaly>
    <anomaly type="notice" value="0.699781,1.18673,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.36.209.42"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580619646"/>
    </anomaly>
    <anomaly type="notice" value="0.699781,1.18673,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="103.54.205.204" dst_ip="196.76.164.221" dst_port="5353"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580619646"/>
    </anomaly>
    <anomaly type="notice" value="0.699781,1.18673,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.102.242.35"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580619646"/>
    </anomaly>
    <anomaly type="notice" value="0.699781,1.18673,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.107.16.81" src_port="53"/>
            <filter dst_ip="202.107.16.81" dst_port="53"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580619646"/>
    </anomaly>
    <anomaly type="notice" value="0.699781,1.18673,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="202.102.205.146"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580619646"/>
    </anomaly>
    <anomaly type="notice" value="0.699781,1.18673,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="133.181.200.93"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580619646"/>
    </anomaly>
    <anomaly type="notice" value="0.699781,1.18673,010,0 0 0 0 0 0 1 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="167.98.87.210" dst_ip="203.144.26.93" src_port="32766"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580619646"/>
    </anomaly>
    <anomaly type="notice" value="0.699781,1.18673,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.144.8.149" dst_port="60217"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580619646"/>
    </anomaly>
    <anomaly type="notice" value="0.699781,1.18673,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.36.171.138" dst_port="54756"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580619646"/>
    </anomaly>
    <anomaly type="notice" value="0.699781,1.18673,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.29.36.93" dst_ip="60.49.78.214" src_port="587"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580619646"/>
    </anomaly>
    <anomaly type="notice" value="0.699781,1.18673,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="163.45.67.192"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580619646"/>
    </anomaly>
    <anomaly type="notice" value="0.699781,1.18673,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.144.1.126" dst_port="53"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580619646"/>
    </anomaly>
    <anomaly type="notice" value="0.699781,1.18673,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.144.14.57" dst_port="53"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580619646"/>
    </anomaly>
    <anomaly type="notice" value="0.696531,1.1739,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.144.2.210" src_port="53"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620407"/>
    </anomaly>
    <anomaly type="notice" value="0.699781,1.18673,010,0 0 0 0 0 0 1 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="167.98.87.186" dst_ip="203.144.1.93" src_port="32766"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580619646"/>
    </anomaly>
    <anomaly type="notice" value="0.699781,1.18673,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="146.88.112.4" src_port="1901" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580619646"/>
    </anomaly>
    <anomaly type="notice" value="0.699781,1.18673,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="51.86.87.175" dst_port="9443"/>
        </slice>
        <from usec="0" sec="1580619825"/>
        <to usec="0" sec="1580619871"/>
    </anomaly>
    <anomaly type="notice" value="0.699781,1.18673,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="162.12.112.166" dst_port="9300"/>
        </slice>
        <from usec="0" sec="1580619825"/>
        <to usec="0" sec="1580619871"/>
    </anomaly>
    <anomaly type="notice" value="0.699781,1.18673,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="162.12.113.160"/>
        </slice>
        <from usec="0" sec="1580620140"/>
        <to usec="0" sec="1580620186"/>
    </anomaly>
    <anomaly type="notice" value="0.699781,1.18673,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.144.7.223" dst_port="53"/>
        </slice>
        <from usec="0" sec="1580620140"/>
        <to usec="0" sec="1580620186"/>
    </anomaly>
    <anomaly type="notice" value="0.699781,1.18673,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="163.45.67.192"/>
        </slice>
        <from usec="0" sec="1580620140"/>
        <to usec="0" sec="1580620186"/>
    </anomaly>
    <anomaly type="notice" value="0.696531,1.1739,504,0 0 0 1 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="40.121.172.6" dst_port="443"/>
        </slice>
        <from usec="0" sec="1580619607"/>
        <to usec="0" sec="1580620338"/>
    </anomaly>
    <anomaly type="notice" value="0.699781,1.18673,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="185.35.241.60"/>
        </slice>
        <from usec="0" sec="1580620140"/>
        <to usec="0" sec="1580620186"/>
    </anomaly>
    <anomaly type="notice" value="0.699781,1.18673,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="51.86.87.174" dst_port="8444"/>
            <filter src_ip="51.86.87.174" dst_port="990"/>
        </slice>
        <from usec="0" sec="1580620410"/>
        <to usec="0" sec="1580620456"/>
    </anomaly>
    <anomaly type="notice" value="0.574172,1.12347,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="128.15.24.63" dst_port="80"/>
            <filter src_ip="128.15.24.63" dst_port="443"/>
            <filter src_ip="128.15.24.63" dst_port="8080"/>
            <filter src_ip="128.15.24.63" dst_port="8443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.570207,1.1099,504,0 0 0 1 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="133.29.48.181" dst_ip="66.104.49.76" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.574172,1.12347,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="133.29.234.72"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.574172,1.12347,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="133.29.51.215" dst_port="443"/>
            <filter src_ip="133.29.51.215"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.574172,1.12347,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="133.29.17.12"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.574172,1.12347,010,0 0 0 0 0 0 0 0 0 1 0 0,ntscSYN">
        <slice>
            <filter src_ip="162.12.114.184" dst_port="9300"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.574172,1.12347,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="163.45.203.97" dst_port="443"/>
            <filter src_ip="163.45.203.97" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.574172,1.12347,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="163.45.163.11" dst_ip="149.98.21.220" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.574172,1.12347,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.45.0.226"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.574172,1.12347,504,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="172.33.25.125"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.574172,1.12347,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="180.130.0.65"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.574172,1.12347,504,0 0 0 0 0 0 0 0 0 1 0 0,heavy_hitter">
        <slice>
            <filter src_ip="18.10.108.146"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.574172,1.12347,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="192.130.125.13" dst_port="82"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.574172,1.12347,020,0 0 0 0 0 0 0 0 0 1 0 0,icmp_error">
        <slice>
            <filter src_ip="202.102.244.237"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.574172,1.12347,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="203.144.11.153" src_port="3389"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.570207,1.1099,999,0 0 0 1 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="203.144.7.192" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.574172,1.12347,010,0 0 0 0 0 0 0 0 0 1 0 0,ntscSYN">
        <slice>
            <filter src_ip="37.29.149.127" src_port="54828" dst_port="50802"/>
            <filter src_ip="37.29.149.127" src_port="54828" dst_port="5038"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.574172,1.12347,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="5.40.213.141"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.574172,1.12347,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="52.88.230.209"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.574172,1.12347,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="59.171.85.165"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.574172,1.12347,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="66.252.53.63"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.574172,1.12347,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="68.200.168.76" src_port="43262" dst_port="1995"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.574172,1.12347,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="23.63.45.229" src_port="29011"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.574172,1.12347,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="79.78.229.63"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.574172,1.12347,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="89.202.130.149" dst_port="23"/>
            <filter src_ip="89.202.130.149" dst_port="26"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.570207,1.1099,504,0 0 0 1 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="163.45.126.178" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.574172,1.12347,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="163.45.168.82" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.574172,1.12347,999,0 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="133.29.234.75" src_port="3389"/>
            <filter dst_ip="210.167.20.235" src_port="3389"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.574172,1.12347,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="5.37.136.130"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.574172,1.12347,011,0 0 0 0 0 0 0 0 0 1 0 0,heavy_hitter">
        <slice>
            <filter dst_ip="67.181.215.243"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.696531,1.1739,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.144.7.192" dst_port="53"/>
            <filter src_ip="162.111.200.135" dst_ip="203.144.14.56" dst_port="53"/>
        </slice>
        <from usec="0" sec="1580619600"/>
        <to usec="0" sec="1580620126"/>
    </anomaly>
</admd:annotation>
