<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="notice" value="0.608152,1.15042,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="17.46.246.17" dst_ip="202.116.35.104" src_port="443" dst_port="54679" proto="tcp"/>
        </slice>
        <from usec="0" sec="1583212267"/>
        <to usec="0" sec="1583212268"/>
    </anomaly>
    <anomaly type="notice" value="0.608152,1.15042,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.47.129.2" dst_ip="13.141.21.159" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1583211618"/>
        <to usec="0" sec="1583211620"/>
    </anomaly>
    <anomaly type="notice" value="0.608152,1.15042,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="133.27.27.0" src_port="22"/>
            <filter src_ip="133.27.27.0" dst_ip="54.206.56.216" src_port="80"/>
        </slice>
        <from usec="0" sec="1583211699"/>
        <to usec="0" sec="1583212398"/>
    </anomaly>
    <anomaly type="notice" value="0.608152,1.15042,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="23.62.146.209" dst_ip="163.218.31.144" src_port="443" dst_port="65261" proto="tcp"/>
        </slice>
        <from usec="0" sec="1583211674"/>
        <to usec="0" sec="1583211676"/>
    </anomaly>
    <anomaly type="notice" value="0.608152,1.15042,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="38.92.174.219" dst_ip="163.218.30.185" src_port="80" dst_port="63726" proto="tcp"/>
        </slice>
        <from usec="0" sec="1583211625"/>
        <to usec="0" sec="1583211721"/>
    </anomaly>
    <anomaly type="notice" value="0.608152,1.15042,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="99.84.62.36" dst_ip="163.218.114.84" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1583211619"/>
        <to usec="0" sec="1583211620"/>
    </anomaly>
    <anomaly type="notice" value="0.608152,1.15042,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="54.40.118.48" dst_ip="163.218.247.7" src_port="47948" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1583211625"/>
        <to usec="0" sec="1583211626"/>
    </anomaly>
    <anomaly type="notice" value="0.608152,1.15042,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="54.40.118.49" dst_ip="163.218.247.7" src_port="36676" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1583211711"/>
        <to usec="0" sec="1583211712"/>
    </anomaly>
    <anomaly type="notice" value="0.608152,1.15042,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.48.193.51" dst_ip="163.218.244.87" src_port="14067" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1583211714"/>
        <to usec="0" sec="1583211721"/>
    </anomaly>
    <anomaly type="notice" value="0.608152,1.15042,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="31.1.82.52" dst_ip="163.218.191.54" src_port="443" dst_port="49746" proto="tcp"/>
        </slice>
        <from usec="0" sec="1583211619"/>
        <to usec="0" sec="1583211639"/>
    </anomaly>
    <anomaly type="notice" value="0.608152,1.15042,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.146.148.243" dst_ip="163.218.114.218" src_port="443" dst_port="61582" proto="tcp"/>
        </slice>
        <from usec="0" sec="1583211661"/>
        <to usec="0" sec="1583211663"/>
    </anomaly>
    <anomaly type="notice" value="0.608152,1.15042,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="13.252.144.147" dst_ip="163.218.71.255" src_port="443" dst_port="55019" proto="tcp"/>
        </slice>
        <from usec="0" sec="1583211908"/>
        <to usec="0" sec="1583211909"/>
    </anomaly>
    <anomaly type="notice" value="0.608152,1.15042,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.218.31.165" dst_ip="31.1.82.36" src_port="57304" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1583212197"/>
        <to usec="0" sec="1583212199"/>
    </anomaly>
    <anomaly type="notice" value="0.608152,1.15042,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="17.253.119.157" dst_ip="163.218.116.67" src_port="443" dst_port="64028" proto="tcp"/>
        </slice>
        <from usec="0" sec="1583212383"/>
        <to usec="0" sec="1583212384"/>
    </anomaly>
    <anomaly type="notice" value="0.608152,1.15042,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="17.253.119.155" dst_ip="163.218.116.67" src_port="443" dst_port="61445" proto="tcp"/>
        </slice>
        <from usec="0" sec="1583212460"/>
        <to usec="0" sec="1583212461"/>
    </anomaly>
    <anomaly type="notice" value="0.608152,1.15042,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.116.35.231" dst_ip="59.89.51.105" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1583211616"/>
        <to usec="0" sec="1583211617"/>
    </anomaly>
    <anomaly type="notice" value="0.608152,1.15042,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.218.48.174" dst_ip="31.1.82.24" src_port="14294" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1583211765"/>
        <to usec="0" sec="1583212421"/>
    </anomaly>
    <anomaly type="notice" value="0.608152,1.15042,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.218.133.153" dst_ip="52.145.193.251" src_port="52957" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1583211615"/>
        <to usec="0" sec="1583211617"/>
    </anomaly>
    <anomaly type="notice" value="0.608152,1.15042,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="203.146.141.215" dst_ip="203.146.141.215" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1583211652"/>
        <to usec="0" sec="1583211730"/>
    </anomaly>
    <anomaly type="notice" value="0.608152,1.15042,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.146.132.122" dst_ip="162.120.185.222" src_port="1194" proto="udp"/>
        </slice>
        <from usec="0" sec="1583212153"/>
        <to usec="0" sec="1583212169"/>
    </anomaly>
    <anomaly type="notice" value="0.608152,1.15042,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="52.184.208.1" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="1583211873"/>
        <to usec="0" sec="1583212477"/>
    </anomaly>
    <anomaly type="notice" value="0.608152,1.15042,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="200.61.182.224" src_port="5122" dst_port="5060" proto="udp"/>
        </slice>
        <from usec="0" sec="1583211782"/>
        <to usec="0" sec="1583211783"/>
    </anomaly>
    <anomaly type="notice" value="0.608152,1.15042,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.4.65.224" src_port="22"/>
        </slice>
        <from usec="0" sec="1583211805"/>
        <to usec="0" sec="1583211806"/>
    </anomaly>
    <anomaly type="notice" value="0.608152,1.15042,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.4.65.240" src_port="22"/>
        </slice>
        <from usec="0" sec="1583211971"/>
        <to usec="0" sec="1583211972"/>
    </anomaly>
    <anomaly type="notice" value="0.608152,1.15042,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="86.131.67.78" src_port="22"/>
        </slice>
        <from usec="0" sec="1583211805"/>
        <to usec="0" sec="1583211806"/>
    </anomaly>
    <anomaly type="notice" value="0.608152,1.15042,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.121.5.75"/>
        </slice>
        <from usec="0" sec="1583211761"/>
        <to usec="0" sec="1583211762"/>
    </anomaly>
    <anomaly type="notice" value="0.608152,1.15042,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="192.110.108.7" dst_port="9160" proto="tcp"/>
        </slice>
        <from usec="0" sec="1583211861"/>
        <to usec="0" sec="1583211862"/>
    </anomaly>
    <anomaly type="notice" value="0.608152,1.15042,010,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="27.162.151.108" src_port="5900"/>
        </slice>
        <from usec="0" sec="1583211951"/>
        <to usec="0" sec="1583211952"/>
    </anomaly>
    <anomaly type="notice" value="0.608152,1.15042,012,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="192.110.108.7" src_port="9160" proto="tcp"/>
        </slice>
        <from usec="0" sec="1583211860"/>
        <to usec="0" sec="1583211862"/>
    </anomaly>
    <anomaly type="notice" value="0.608152,1.15042,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.218.150.245"/>
        </slice>
        <from usec="0" sec="1583212218"/>
        <to usec="0" sec="1583212219"/>
    </anomaly>
    <anomaly type="notice" value="0.608152,1.15042,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.4.65.198"/>
        </slice>
        <from usec="0" sec="1583211619"/>
        <to usec="0" sec="1583211659"/>
    </anomaly>
    <anomaly type="notice" value="0.608152,1.15042,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="34.128.166.149"/>
        </slice>
        <from usec="0" sec="1583211670"/>
        <to usec="0" sec="1583211671"/>
    </anomaly>
    <anomaly type="notice" value="0.608152,1.15042,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.218.13.87"/>
        </slice>
        <from usec="0" sec="1583212220"/>
        <to usec="0" sec="1583212221"/>
    </anomaly>
    <anomaly type="notice" value="0.608152,1.15042,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.218.190.155"/>
        </slice>
        <from usec="0" sec="1583212004"/>
        <to usec="0" sec="1583212005"/>
    </anomaly>
    <anomaly type="notice" value="0.608152,1.15042,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.218.117.228"/>
        </slice>
        <from usec="0" sec="1583212210"/>
        <to usec="0" sec="1583212211"/>
    </anomaly>
    <anomaly type="notice" value="0.608152,1.15042,010,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.146.142.112"/>
        </slice>
        <from usec="0" sec="1583212214"/>
        <to usec="0" sec="1583212215"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="103.181.6.88"/>
        </slice>
        <from usec="0" sec="1583211600"/>
        <to usec="0" sec="1583211678"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,020,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.253.7.18"/>
        </slice>
        <from usec="0" sec="1583211600"/>
        <to usec="0" sec="1583211708"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.47.131.177"/>
        </slice>
        <from usec="0" sec="1583211606"/>
        <to usec="0" sec="1583211705"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="54.40.118.90"/>
        </slice>
        <from usec="0" sec="1583211625"/>
        <to usec="0" sec="1583211630"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="205.38.36.152"/>
        </slice>
        <from usec="0" sec="1583211674"/>
        <to usec="0" sec="1583211708"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1583211600"/>
        <to usec="0" sec="1583212428"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.218.214.7"/>
        </slice>
        <from usec="0" sec="1583211600"/>
        <to usec="0" sec="1583211930"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="192.110.52.221"/>
        </slice>
        <from usec="0" sec="1583211600"/>
        <to usec="0" sec="1583211978"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.27.169.234"/>
        </slice>
        <from usec="0" sec="1583211603"/>
        <to usec="0" sec="1583211966"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,504,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.218.31.45"/>
        </slice>
        <from usec="0" sec="1583211606"/>
        <to usec="0" sec="1583211972"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="180.194.4.95"/>
        </slice>
        <from usec="0" sec="1583211610"/>
        <to usec="0" sec="1583211963"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.218.119.55"/>
        </slice>
        <from usec="0" sec="1583211612"/>
        <to usec="0" sec="1583211970"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.27.79.161"/>
        </slice>
        <from usec="0" sec="1583211618"/>
        <to usec="0" sec="1583211902"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="60.143.125.228"/>
        </slice>
        <from usec="0" sec="1583211811"/>
        <to usec="0" sec="1583211832"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1583211600"/>
        <to usec="0" sec="1583212428"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="81.68.227.122"/>
        </slice>
        <from usec="0" sec="1583211600"/>
        <to usec="0" sec="1583212068"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="123.121.144.48"/>
        </slice>
        <from usec="0" sec="1583211600"/>
        <to usec="0" sec="1583212067"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,020,0 0 0 1 0 0 0 0 0 0 0 0,hostout">
        <slice>
            <filter dst_ip="31.240.138.1"/>
        </slice>
        <from usec="0" sec="1583211600"/>
        <to usec="0" sec="1583212068"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.218.117.237"/>
        </slice>
        <from usec="0" sec="1583211600"/>
        <to usec="0" sec="1583212043"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="192.45.24.173"/>
        </slice>
        <from usec="0" sec="1583211600"/>
        <to usec="0" sec="1583212067"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="38.92.174.242" src_port="53"/>
        </slice>
        <from usec="0" sec="1583211600"/>
        <to usec="0" sec="1583212068"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.218.191.58" src_port="443"/>
        </slice>
        <from usec="0" sec="1583211601"/>
        <to usec="0" sec="1583212068"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="168.89.3.14" dst_ip="133.4.205.6" src_port="53"/>
            <filter src_ip="168.89.209.18" dst_ip="133.4.205.6" src_port="53"/>
        </slice>
        <from usec="0" sec="1583211602"/>
        <to usec="0" sec="1583212064"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="1.18.118.251"/>
        </slice>
        <from usec="0" sec="1583211602"/>
        <to usec="0" sec="1583212068"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="27.11.85.88"/>
        </slice>
        <from usec="0" sec="1583211602"/>
        <to usec="0" sec="1583212060"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="52.217.56.95"/>
        </slice>
        <from usec="0" sec="1583211602"/>
        <to usec="0" sec="1583212062"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.218.215.6"/>
        </slice>
        <from usec="0" sec="1583211602"/>
        <to usec="0" sec="1583212049"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="74.104.180.244"/>
        </slice>
        <from usec="0" sec="1583211603"/>
        <to usec="0" sec="1583212067"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="54.215.128.126"/>
        </slice>
        <from usec="0" sec="1583211607"/>
        <to usec="0" sec="1583212063"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="91.98.17.0"/>
        </slice>
        <from usec="0" sec="1583211646"/>
        <to usec="0" sec="1583212061"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="114.199.159.35"/>
        </slice>
        <from usec="0" sec="1583211663"/>
        <to usec="0" sec="1583212066"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="165.252.214.193"/>
        </slice>
        <from usec="0" sec="1583211881"/>
        <to usec="0" sec="1583211949"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="185.40.202.127"/>
        </slice>
        <from usec="0" sec="1583211947"/>
        <to usec="0" sec="1583212061"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="187.27.23.219"/>
        </slice>
        <from usec="0" sec="1583211600"/>
        <to usec="0" sec="1583212247"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.146.142.41" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="1583211600"/>
        <to usec="0" sec="1583212233"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.146.137.110"/>
        </slice>
        <from usec="0" sec="1583211600"/>
        <to usec="0" sec="1583212233"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="201.133.79.57"/>
        </slice>
        <from usec="0" sec="1583211600"/>
        <to usec="0" sec="1583212247"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="77.0.158.238" src_port="38825" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1583211600"/>
        <to usec="0" sec="1583212246"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,502,0 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter dst_ip="51.142.152.88"/>
            <filter dst_ip="45.168.42.169"/>
            <filter dst_ip="192.147.133.235"/>
            <filter src_port="22"/>
            <filter src_ip="203.146.148.243" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="203.146.130.198"/>
        </slice>
        <from usec="0" sec="1583211600"/>
        <to usec="0" sec="1583212248"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.27.15.75"/>
        </slice>
        <from usec="0" sec="1583211601"/>
        <to usec="0" sec="1583212428"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="122.137.35.103"/>
        </slice>
        <from usec="0" sec="1583211601"/>
        <to usec="0" sec="1583212248"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="212.20.182.189"/>
        </slice>
        <from usec="0" sec="1583211601"/>
        <to usec="0" sec="1583212244"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="121.122.21.188"/>
        </slice>
        <from usec="0" sec="1583211602"/>
        <to usec="0" sec="1583212247"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="60.247.192.120" dst_port="23"/>
            <filter src_ip="60.247.192.120" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1583211602"/>
        <to usec="0" sec="1583212238"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="14.161.73.21"/>
        </slice>
        <from usec="0" sec="1583211602"/>
        <to usec="0" sec="1583212245"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="52.176.139.102"/>
        </slice>
        <from usec="0" sec="1583211603"/>
        <to usec="0" sec="1583212224"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="164.247.3.95"/>
        </slice>
        <from usec="0" sec="1583211603"/>
        <to usec="0" sec="1583212246"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="118.172.245.105"/>
        </slice>
        <from usec="0" sec="1583211603"/>
        <to usec="0" sec="1583212246"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,504,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="107.250.69.21"/>
        </slice>
        <from usec="0" sec="1583211604"/>
        <to usec="0" sec="1583212237"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="86.87.179.221" dst_ip="133.4.72.157" src_port="53"/>
        </slice>
        <from usec="0" sec="1583211605"/>
        <to usec="0" sec="1583212246"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.27.159.85"/>
        </slice>
        <from usec="0" sec="1583211605"/>
        <to usec="0" sec="1583212232"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="119.42.151.56"/>
        </slice>
        <from usec="0" sec="1583211605"/>
        <to usec="0" sec="1583212245"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.116.36.94" dst_port="53"/>
        </slice>
        <from usec="0" sec="1583211606"/>
        <to usec="0" sec="1583212247"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.218.31.115"/>
        </slice>
        <from usec="0" sec="1583211606"/>
        <to usec="0" sec="1583212248"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="168.89.209.18" dst_ip="133.4.249.106" src_port="53"/>
            <filter src_ip="168.89.3.14" dst_ip="133.4.249.106" src_port="53"/>
        </slice>
        <from usec="0" sec="1583211607"/>
        <to usec="0" sec="1583212242"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="61.114.115.243"/>
        </slice>
        <from usec="0" sec="1583211607"/>
        <to usec="0" sec="1583212246"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="133.27.3.9"/>
        </slice>
        <from usec="0" sec="1583211609"/>
        <to usec="0" sec="1583212233"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="13.141.9.3"/>
        </slice>
        <from usec="0" sec="1583211618"/>
        <to usec="0" sec="1583212248"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.146.138.125" dst_port="53"/>
        </slice>
        <from usec="0" sec="1583211622"/>
        <to usec="0" sec="1583212246"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.218.119.207"/>
        </slice>
        <from usec="0" sec="1583211623"/>
        <to usec="0" sec="1583212245"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.116.35.235" src_port="443"/>
        </slice>
        <from usec="0" sec="1583211626"/>
        <to usec="0" sec="1583212235"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.218.190.123"/>
        </slice>
        <from usec="0" sec="1583211629"/>
        <to usec="0" sec="1583212198"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="176.142.140.91"/>
        </slice>
        <from usec="0" sec="1583212068"/>
        <to usec="0" sec="1583212073"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="192.231.250.193"/>
        </slice>
        <from usec="0" sec="1583212078"/>
        <to usec="0" sec="1583212088"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="69.208.151.197"/>
        </slice>
        <from usec="0" sec="1583212084"/>
        <to usec="0" sec="1583212085"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.243.192.127"/>
        </slice>
        <from usec="0" sec="1583212117"/>
        <to usec="0" sec="1583212138"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="17.248.100.170"/>
        </slice>
        <from usec="0" sec="1583212210"/>
        <to usec="0" sec="1583212248"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="220.120.213.13"/>
        </slice>
        <from usec="0" sec="1583211601"/>
        <to usec="0" sec="1583212338"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,010,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="178.91.186.84"/>
        </slice>
        <from usec="0" sec="1583211600"/>
        <to usec="0" sec="1583212396"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.218.66.96"/>
        </slice>
        <from usec="0" sec="1583211600"/>
        <to usec="0" sec="1583212425"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.218.55.228"/>
        </slice>
        <from usec="0" sec="1583211600"/>
        <to usec="0" sec="1583212424"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="51.81.119.22"/>
        </slice>
        <from usec="0" sec="1583211602"/>
        <to usec="0" sec="1583212419"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="54.140.236.172"/>
        </slice>
        <from usec="0" sec="1583211602"/>
        <to usec="0" sec="1583212414"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="177.180.95.209"/>
        </slice>
        <from usec="0" sec="1583211605"/>
        <to usec="0" sec="1583212403"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.218.38.184"/>
        </slice>
        <from usec="0" sec="1583211606"/>
        <to usec="0" sec="1583212425"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="220.121.193.24"/>
        </slice>
        <from usec="0" sec="1583211608"/>
        <to usec="0" sec="1583212426"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="104.36.0.72"/>
        </slice>
        <from usec="0" sec="1583211610"/>
        <to usec="0" sec="1583212425"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.146.135.249"/>
        </slice>
        <from usec="0" sec="1583211616"/>
        <to usec="0" sec="1583212412"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="54.40.116.151"/>
        </slice>
        <from usec="0" sec="1583212324"/>
        <to usec="0" sec="1583212329"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="103.175.1.38"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="103.175.135.240"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="104.46.4.75"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="104.36.6.156"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="117.199.11.115"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="122.137.115.198"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,020,0 0 0 0 0 0 0 0 0 1 0 0,hostout">
        <slice>
            <filter src_ip="133.4.224.207"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.531759,1.16521,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.4.71.6" dst_ip="187.223.207.193" src_port="445"/>
            <filter src_ip="133.4.71.6" dst_ip="168.204.138.54" src_port="445"/>
        </slice>
        <from usec="0" sec="1583211629"/>
        <to usec="0" sec="1583212248"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="139.172.26.47"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="157.245.45.61"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="163.218.190.198"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.665249,1.1047,503,1 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.218.30.214" dst_port="80"/>
            <filter src_ip="163.218.30.214" dst_ip="13.141.34.19" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPDNS">
        <slice>
            <filter src_ip="172.121.22.153" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="189.134.241.169"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.596217,1.12008,010,0 0 0 1 0 0 0 0 0 1 0 0,ntscSYN">
        <slice>
            <filter src_ip="222.111.83.41" src_port="32767" dst_port="8545"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="196.52.211.75"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="203.146.135.34" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="209.228.243.84"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,020,0 0 0 0 0 0 0 0 0 1 0 0,ptpDoSIC">
        <slice>
            <filter src_ip="210.155.113.68"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.596217,1.12008,999,0 0 0 1 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="223.54.230.233" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="23.47.114.44"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="23.36.84.232"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="23.51.156.149"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="41.250.113.9" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="67.180.35.152" dst_port="445"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="98.232.211.47"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="99.84.241.85"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="104.3.123.233"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="188.95.92.235"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="126.114.208.232"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="13.141.189.16"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,010,0 0 0 0 0 0 0 0 0 1 0 0,poscaSYN">
        <slice>
            <filter src_ip="68.21.121.59" dst_ip="133.253.11.101" src_port="32766"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter src_ip="168.89.209.18" dst_ip="133.4.214.5" src_port="53"/>
            <filter src_ip="168.89.3.14" dst_ip="133.4.214.5" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,504,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="104.45.29.145" dst_ip="163.218.178.128" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="13.252.144.214" dst_ip="163.218.189.131" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.218.191.55" src_port="443"/>
            <filter dst_ip="163.218.191.55" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.218.31.102" src_port="443"/>
            <filter dst_ip="163.218.31.102"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="80.201.58.114" src_port="443"/>
            <filter dst_ip="80.201.58.114" src_port="993"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.218.207.104"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="18.237.236.177"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="192.228.60.186"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="202.116.33.220" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,502,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="202.249.21.162"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,010,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="203.146.141.42" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,020,0 0 0 0 0 0 0 0 0 1 0 0,icmp_error">
        <slice>
            <filter dst_ip="203.85.252.216"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="38.92.174.219"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="4.208.174.67"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="47.160.146.161"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="52.100.104.16"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="52.216.113.123"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,503,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="8.134.49.132"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.49365,1.1237,999,0 0 0 0 0 0 0 0 0 1 0 0,DDoSUDP">
        <slice>
            <filter dst_ip="84.42.7.241"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713796,1.13149,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="185.241.106.225" dst_ip="202.116.38.86" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713796,1.13149,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="143.56.75.95" dst_ip="177.145.83.149" src_port="443" dst_port="49399"/>
            <filter src_ip="143.56.75.95" dst_ip="177.145.83.149" src_port="443" dst_port="49389"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713796,1.13149,504,0 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="151.153.81.187" dst_ip="133.4.65.208" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713796,1.13149,010,0 0 0 0 0 0 0 0 0 1 1 0,sntscSYN">
        <slice>
            <filter src_ip="192.118.101.79" src_port="27480" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713796,1.13149,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="17.250.118.204" dst_ip="177.145.83.149" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713796,1.13149,020,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="203.146.138.119"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713796,1.13149,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="23.219.94.60" src_port="80"/>
            <filter src_ip="23.219.94.60" dst_ip="163.218.189.168" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713796,1.13149,010,0 0 0 0 0 0 0 0 0 1 1 0,ntscSYN">
        <slice>
            <filter src_ip="45.184.114.155" src_port="60000" dst_port="2222"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713796,1.13149,010,0 0 0 0 0 0 0 0 0 1 1 0,sntscSYN">
        <slice>
            <filter src_ip="92.149.80.222" src_port="64721" dst_port="5000"/>
            <filter src_ip="92.149.80.222" src_port="63394" dst_port="993"/>
            <filter src_ip="92.149.80.222" src_port="54333" dst_port="5916"/>
            <filter src_ip="92.149.80.222" src_port="60739" dst_port="389"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713796,1.13149,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="203.146.148.243" dst_ip="114.195.122.35" src_port="443" dst_port="58076"/>
            <filter src_ip="203.146.148.243" dst_ip="114.195.122.35" src_port="443" dst_port="57213"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713796,1.13149,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="163.218.30.75" dst_ip="134.45.185.236" src_port="60672" dst_port="443"/>
            <filter src_ip="163.218.30.75" dst_ip="134.45.185.236" src_port="60671" dst_port="443"/>
            <filter src_ip="163.218.30.75" dst_ip="134.45.185.236" src_port="60482" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713796,1.13149,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.218.163.231" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713796,1.13149,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.218.188.116" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713796,1.13149,503,0 0 0 0 0 0 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.218.190.226" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713796,1.13149,504,0 0 0 0 0 0 0 0 0 1 1 0,mptpla">
        <slice>
            <filter src_ip="203.146.148.243" dst_ip="163.218.31.153" src_port="443"/>
            <filter src_ip="54.78.208.18" dst_ip="163.218.31.153" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713796,1.13149,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="163.218.190.30" dst_ip="163.218.26.42" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713796,1.13149,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.218.104.92" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713796,1.13149,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.218.133.185" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713796,1.13149,999,0 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="118.242.193.146" dst_ip="202.116.33.241" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713796,1.13149,010,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="203.146.133.12" dst_port="3127"/>
            <filter dst_ip="203.146.133.12" dst_port="3128"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713796,1.13149,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="163.218.113.134" dst_ip="209.228.243.84" src_port="54331" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713796,1.13149,504,0 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="99.84.60.33" dst_ip="163.218.189.91" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
