<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="notice" value="0.773847,1.3337,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="148.211.88.56" dst_ip="163.222.210.132" dst_port="993" proto="tcp"/>
        </slice>
        <from usec="0" sec="1585976455"/>
        <to usec="0" sec="1585976457"/>
    </anomaly>
    <anomaly type="notice" value="0.773847,1.3337,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.27.129.217" dst_ip="38.186.234.90" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1585976537"/>
        <to usec="0" sec="1585977211"/>
    </anomaly>
    <anomaly type="notice" value="0.773847,1.3337,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="115.27.251.95" dst_ip="213.207.213.86" src_port="65333" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1585976913"/>
        <to usec="0" sec="1585976923"/>
    </anomaly>
    <anomaly type="notice" value="0.773847,1.3337,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="183.186.89.239" dst_ip="203.13.103.240" src_port="80" dst_port="58892" proto="tcp"/>
        </slice>
        <from usec="0" sec="1585976476"/>
        <to usec="0" sec="1585976479"/>
    </anomaly>
    <anomaly type="notice" value="0.773847,1.3337,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="183.186.89.236" dst_ip="203.13.103.240" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1585976425"/>
        <to usec="0" sec="1585976466"/>
    </anomaly>
    <anomaly type="notice" value="0.773847,1.3337,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.222.90.12" dst_ip="67.59.251.248" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1585977028"/>
        <to usec="0" sec="1585977047"/>
    </anomaly>
    <anomaly type="notice" value="0.773847,1.3337,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="123.219.6.71" dst_ip="163.222.111.94" src_port="12293" dst_port="7470" proto="udp"/>
        </slice>
        <from usec="0" sec="1585977296"/>
        <to usec="0" sec="1585977297"/>
    </anomaly>
    <anomaly type="notice" value="0.773847,1.3337,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="163.222.131.187" dst_ip="31.237.173.148" src_port="50430" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1585977018"/>
        <to usec="0" sec="1585977019"/>
    </anomaly>
    <anomaly type="notice" value="0.773847,1.3337,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.222.8.188" dst_ip="129.50.197.109" src_port="64521" dst_port="8801" proto="udp"/>
        </slice>
        <from usec="0" sec="1585977180"/>
        <to usec="0" sec="1585977182"/>
    </anomaly>
    <anomaly type="notice" value="0.773847,1.3337,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="37.7.208.94" dst_port="139" proto="tcp"/>
        </slice>
        <from usec="0" sec="1585976733"/>
        <to usec="0" sec="1585976893"/>
    </anomaly>
    <anomaly type="notice" value="0.773847,1.3337,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.137.211.210"/>
        </slice>
        <from usec="0" sec="1585977179"/>
        <to usec="0" sec="1585977181"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977138"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585976598"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="52.117.36.67"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585976508"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.13.113.225"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585976508"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,999,0 0 0 1 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter dst_ip="37.206.134.239"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585976508"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.105.59.49"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585976434"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="213.215.170.222"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585976508"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="170.133.207.57"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585976508"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="5.66.196.32"/>
        </slice>
        <from usec="0" sec="1585976401"/>
        <to usec="0" sec="1585976508"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="139.237.158.107"/>
        </slice>
        <from usec="0" sec="1585976401"/>
        <to usec="0" sec="1585976507"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="8.33.176.244"/>
        </slice>
        <from usec="0" sec="1585976410"/>
        <to usec="0" sec="1585976501"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="210.131.91.33"/>
        </slice>
        <from usec="0" sec="1585976482"/>
        <to usec="0" sec="1585976491"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.13.106.26"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585976598"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="45.99.72.137"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585976958"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="140.178.113.1"/>
        </slice>
        <from usec="0" sec="1585976402"/>
        <to usec="0" sec="1585976598"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="3.83.131.125"/>
        </slice>
        <from usec="0" sec="1585976423"/>
        <to usec="0" sec="1585976591"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="91.238.227.41"/>
        </slice>
        <from usec="0" sec="1585976505"/>
        <to usec="0" sec="1585976584"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="49.162.20.186"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585976688"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="40.98.155.12"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585976778"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="52.21.53.172"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585976641"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="202.137.211.189" dst_ip="172.154.18.219"/>
            <filter src_ip="202.137.211.189" src_port="80"/>
            <filter src_ip="202.137.211.189" src_port="443"/>
            <filter dst_ip="123.221.30.128" src_port="443"/>
            <filter dst_ip="172.154.18.219" src_port="80"/>
            <filter src_port="443" dst_port="8484"/>
            <filter dst_ip="123.221.30.128" src_port="80" dst_port="8484"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585976598"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.222.130.10"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585976776"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.222.10.242"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585976775"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="195.226.22.149"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585976778"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="192.18.32.115"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585976659"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="172.152.187.235"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585976778"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="45.21.97.183"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585976778"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="164.186.72.20"/>
        </slice>
        <from usec="0" sec="1585977108"/>
        <to usec="0" sec="1585977228"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="188.232.104.31"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585976857"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="126.151.182.47"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585976769"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="185.2.145.9" src_port="30407"/>
            <filter src_port="30407" dst_port="23"/>
            <filter src_ip="185.2.145.9" src_port="30406" dst_port="23"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585976777"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="187.217.185.234"/>
        </slice>
        <from usec="0" sec="1585976401"/>
        <to usec="0" sec="1585976777"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="64.29.161.182" dst_ip="203.13.105.91" src_port="53"/>
        </slice>
        <from usec="0" sec="1585976401"/>
        <to usec="0" sec="1585976775"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="178.221.81.95"/>
        </slice>
        <from usec="0" sec="1585976404"/>
        <to usec="0" sec="1585976764"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="178.221.87.7"/>
        </slice>
        <from usec="0" sec="1585976404"/>
        <to usec="0" sec="1585976775"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,052,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="5.67.181.102"/>
        </slice>
        <from usec="0" sec="1585976405"/>
        <to usec="0" sec="1585976773"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="31.237.42.117"/>
        </slice>
        <from usec="0" sec="1585976407"/>
        <to usec="0" sec="1585976771"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="139.164.49.140"/>
        </slice>
        <from usec="0" sec="1585976407"/>
        <to usec="0" sec="1585976774"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="177.11.157.13"/>
        </slice>
        <from usec="0" sec="1585976408"/>
        <to usec="0" sec="1585976769"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="222.38.84.169"/>
        </slice>
        <from usec="0" sec="1585976408"/>
        <to usec="0" sec="1585976773"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.27.95.17"/>
        </slice>
        <from usec="0" sec="1585976415"/>
        <to usec="0" sec="1585976734"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="91.238.226.148"/>
        </slice>
        <from usec="0" sec="1585976512"/>
        <to usec="0" sec="1585976706"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="162.125.169.170"/>
        </slice>
        <from usec="0" sec="1585976612"/>
        <to usec="0" sec="1585976754"/>
    </anomaly>
    <anomaly type="notice" value="0.730863,1.30894,020,1 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="133.27.221.187"/>
            <filter src_ip="133.27.221.185"/>
            <filter dst_ip="34.64.81.176"/>
        </slice>
        <from usec="0" sec="1585976403"/>
        <to usec="0" sec="1585977213"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="117.205.235.204"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585976867"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="34.92.105.183"/>
        </slice>
        <from usec="0" sec="1585976406"/>
        <to usec="0" sec="1585976848"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.27.75.230"/>
        </slice>
        <from usec="0" sec="1585976408"/>
        <to usec="0" sec="1585976868"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="1.249.157.75"/>
        </slice>
        <from usec="0" sec="1585976769"/>
        <to usec="0" sec="1585976861"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="172.152.88.145" src_port="42424" dst_port="48413"/>
            <filter dst_ip="172.152.88.145" src_port="443" dst_port="48413"/>
            <filter dst_ip="172.152.88.145"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585976958"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="187.205.206.31"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585976957"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="113.148.11.187" src_port="58849" dst_port="3389"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977048"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.222.14.80"/>
        </slice>
        <from usec="0" sec="1585976401"/>
        <to usec="0" sec="1585977228"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="223.211.195.138" dst_ip="133.3.119.60" src_port="53"/>
            <filter src_ip="223.209.218.119" dst_ip="133.3.119.60" src_port="53"/>
        </slice>
        <from usec="0" sec="1585976401"/>
        <to usec="0" sec="1585976958"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="198.99.173.20"/>
        </slice>
        <from usec="0" sec="1585976403"/>
        <to usec="0" sec="1585976958"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="99.169.162.125"/>
        </slice>
        <from usec="0" sec="1585976404"/>
        <to usec="0" sec="1585977228"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="168.95.70.81" dst_ip="133.3.210.217" src_port="53"/>
            <filter src_ip="168.95.217.158" dst_ip="133.3.210.217" src_port="53"/>
        </slice>
        <from usec="0" sec="1585976406"/>
        <to usec="0" sec="1585976944"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.27.108.219" dst_ip="45.99.72.155" src_port="3389"/>
            <filter src_ip="133.27.108.219" dst_ip="212.65.142.123" src_port="3389"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585976939"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="109.51.64.109"/>
        </slice>
        <from usec="0" sec="1585976411"/>
        <to usec="0" sec="1585976958"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="77.188.173.246"/>
        </slice>
        <from usec="0" sec="1585976412"/>
        <to usec="0" sec="1585976954"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="17.134.129.178"/>
        </slice>
        <from usec="0" sec="1585976750"/>
        <to usec="0" sec="1585976904"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.13.98.178"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977048"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="67.205.206.244"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977045"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.222.103.75"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977044"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="203.13.113.236"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977047"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.222.101.189"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977047"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="103.189.42.162"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977047"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="198.99.173.31"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977048"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,502,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="202.60.18.148"/>
        </slice>
        <from usec="0" sec="1585976401"/>
        <to usec="0" sec="1585977047"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.222.55.205"/>
        </slice>
        <from usec="0" sec="1585976401"/>
        <to usec="0" sec="1585977048"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="178.0.161.78"/>
        </slice>
        <from usec="0" sec="1585976402"/>
        <to usec="0" sec="1585977048"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="113.198.198.69" dst_port="23"/>
        </slice>
        <from usec="0" sec="1585976402"/>
        <to usec="0" sec="1585977046"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.38.42.53"/>
        </slice>
        <from usec="0" sec="1585976402"/>
        <to usec="0" sec="1585977043"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="45.30.86.209"/>
        </slice>
        <from usec="0" sec="1585976407"/>
        <to usec="0" sec="1585977044"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="124.126.85.193"/>
        </slice>
        <from usec="0" sec="1585976414"/>
        <to usec="0" sec="1585977020"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,052,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="84.53.72.132"/>
        </slice>
        <from usec="0" sec="1585976434"/>
        <to usec="0" sec="1585977042"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="88.74.253.116"/>
        </slice>
        <from usec="0" sec="1585976769"/>
        <to usec="0" sec="1585977048"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="162.125.169.160"/>
        </slice>
        <from usec="0" sec="1585976770"/>
        <to usec="0" sec="1585977225"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="91.238.227.72"/>
        </slice>
        <from usec="0" sec="1585976888"/>
        <to usec="0" sec="1585977026"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="107.233.89.4"/>
        </slice>
        <from usec="0" sec="1585976890"/>
        <to usec="0" sec="1585977021"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="223.211.195.138" dst_ip="133.3.230.158" src_port="53"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977136"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="50.91.119.204"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977134"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.222.239.195"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977137"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="1.211.141.133"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977133"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="208.187.136.10"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977136"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="88.179.195.196"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977138"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.13.113.236"/>
        </slice>
        <from usec="0" sec="1585976401"/>
        <to usec="0" sec="1585977137"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="180.51.58.248"/>
        </slice>
        <from usec="0" sec="1585976401"/>
        <to usec="0" sec="1585977129"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="182.241.165.97"/>
        </slice>
        <from usec="0" sec="1585976401"/>
        <to usec="0" sec="1585977132"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.222.90.80"/>
        </slice>
        <from usec="0" sec="1585976403"/>
        <to usec="0" sec="1585977227"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.27.229.136"/>
        </slice>
        <from usec="0" sec="1585976404"/>
        <to usec="0" sec="1585977225"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.38.217.38"/>
        </slice>
        <from usec="0" sec="1585976405"/>
        <to usec="0" sec="1585977137"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="178.45.30.142"/>
        </slice>
        <from usec="0" sec="1585976406"/>
        <to usec="0" sec="1585977228"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="31.80.159.236"/>
        </slice>
        <from usec="0" sec="1585976407"/>
        <to usec="0" sec="1585977135"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="90.89.231.152"/>
        </slice>
        <from usec="0" sec="1585976410"/>
        <to usec="0" sec="1585977128"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="71.221.105.64"/>
        </slice>
        <from usec="0" sec="1585976767"/>
        <to usec="0" sec="1585977132"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="196.15.212.139"/>
        </slice>
        <from usec="0" sec="1585976961"/>
        <to usec="0" sec="1585977061"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="23.160.60.219"/>
        </slice>
        <from usec="0" sec="1585977008"/>
        <to usec="0" sec="1585977059"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.38.20.94"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977227"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="189.28.133.81"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977226"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.222.199.138" src_port="80"/>
            <filter dst_ip="163.222.199.138" dst_port="2222"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977228"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.222.238.36"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977228"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.222.10.203" dst_port="3702"/>
            <filter dst_ip="163.222.10.203"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977228"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="206.66.76.65"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977228"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="139.237.142.203"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977228"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.222.130.19"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977226"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="220.20.96.88"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977227"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,011,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="195.236.178.63"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977228"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="203.13.108.64" dst_port="80"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977228"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="118.122.67.243"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977221"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="54.45.107.18"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977227"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="203.13.101.218"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977228"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="202.135.56.251"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977228"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="96.84.29.206"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977228"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="49.163.51.214"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977226"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="162.1.250.131"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977210"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="43.137.13.166"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977126"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,020,0 0 0 1 0 0 0 0 0 0 0 0,hostout">
        <slice>
            <filter src_ip="163.222.222.94"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977224"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="168.95.70.81" dst_ip="203.13.113.236" src_port="53"/>
            <filter src_ip="168.95.217.158" dst_ip="203.13.113.236" src_port="53"/>
        </slice>
        <from usec="0" sec="1585976401"/>
        <to usec="0" sec="1585977227"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="3.236.114.99"/>
        </slice>
        <from usec="0" sec="1585976401"/>
        <to usec="0" sec="1585977226"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="163.222.9.200" dst_port="443"/>
            <filter dst_ip="31.237.173.166" dst_port="443"/>
        </slice>
        <from usec="0" sec="1585976401"/>
        <to usec="0" sec="1585977206"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="69.137.221.45"/>
        </slice>
        <from usec="0" sec="1585976401"/>
        <to usec="0" sec="1585977226"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,020,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.222.121.238"/>
        </slice>
        <from usec="0" sec="1585976401"/>
        <to usec="0" sec="1585977227"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="222.38.119.200"/>
        </slice>
        <from usec="0" sec="1585976402"/>
        <to usec="0" sec="1585977223"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="170.101.217.72"/>
        </slice>
        <from usec="0" sec="1585976402"/>
        <to usec="0" sec="1585977228"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="60.139.45.52"/>
        </slice>
        <from usec="0" sec="1585976403"/>
        <to usec="0" sec="1585977215"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="132.150.101.92"/>
        </slice>
        <from usec="0" sec="1585976403"/>
        <to usec="0" sec="1585977226"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.222.43.128"/>
        </slice>
        <from usec="0" sec="1585976403"/>
        <to usec="0" sec="1585977228"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="180.168.39.244"/>
        </slice>
        <from usec="0" sec="1585976404"/>
        <to usec="0" sec="1585977228"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="20.65.167.168"/>
        </slice>
        <from usec="0" sec="1585976404"/>
        <to usec="0" sec="1585977228"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="168.95.217.158" dst_ip="133.3.218.68" src_port="53"/>
            <filter src_ip="168.95.70.81" dst_ip="133.3.218.68" src_port="53"/>
        </slice>
        <from usec="0" sec="1585976404"/>
        <to usec="0" sec="1585977224"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="212.65.128.2"/>
        </slice>
        <from usec="0" sec="1585976404"/>
        <to usec="0" sec="1585977228"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="223.211.195.138" dst_ip="133.3.104.39" src_port="53"/>
        </slice>
        <from usec="0" sec="1585976404"/>
        <to usec="0" sec="1585977225"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="223.209.218.119" dst_ip="133.3.107.199" src_port="53"/>
            <filter src_ip="223.211.195.138" dst_ip="133.3.107.199" src_port="53"/>
        </slice>
        <from usec="0" sec="1585976405"/>
        <to usec="0" sec="1585977228"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="223.172.163.105"/>
        </slice>
        <from usec="0" sec="1585976405"/>
        <to usec="0" sec="1585977221"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="212.53.244.89"/>
        </slice>
        <from usec="0" sec="1585976406"/>
        <to usec="0" sec="1585977227"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.222.14.81"/>
        </slice>
        <from usec="0" sec="1585976407"/>
        <to usec="0" sec="1585977228"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="217.233.205.132"/>
        </slice>
        <from usec="0" sec="1585976407"/>
        <to usec="0" sec="1585977221"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="126.35.113.126"/>
        </slice>
        <from usec="0" sec="1585976409"/>
        <to usec="0" sec="1585977228"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.222.234.251"/>
        </slice>
        <from usec="0" sec="1585976411"/>
        <to usec="0" sec="1585977213"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,020,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.222.183.130"/>
        </slice>
        <from usec="0" sec="1585976411"/>
        <to usec="0" sec="1585977227"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="133.27.186.119"/>
        </slice>
        <from usec="0" sec="1585976413"/>
        <to usec="0" sec="1585977200"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="123.179.233.206"/>
        </slice>
        <from usec="0" sec="1585976415"/>
        <to usec="0" sec="1585977219"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.13.98.194"/>
        </slice>
        <from usec="0" sec="1585976419"/>
        <to usec="0" sec="1585977205"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="40.69.157.226"/>
        </slice>
        <from usec="0" sec="1585976428"/>
        <to usec="0" sec="1585977197"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="109.159.24.251"/>
        </slice>
        <from usec="0" sec="1585976428"/>
        <to usec="0" sec="1585977216"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="45.175.204.25"/>
        </slice>
        <from usec="0" sec="1585976435"/>
        <to usec="0" sec="1585977216"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="45.128.255.214"/>
        </slice>
        <from usec="0" sec="1585976637"/>
        <to usec="0" sec="1585977228"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="104.167.20.9"/>
        </slice>
        <from usec="0" sec="1585976769"/>
        <to usec="0" sec="1585977202"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="39.159.109.170"/>
        </slice>
        <from usec="0" sec="1585976878"/>
        <to usec="0" sec="1585977064"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="192.107.225.245"/>
        </slice>
        <from usec="0" sec="1585977001"/>
        <to usec="0" sec="1585977226"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="91.238.227.187"/>
        </slice>
        <from usec="0" sec="1585977021"/>
        <to usec="0" sec="1585977125"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="222.8.227.111"/>
        </slice>
        <from usec="0" sec="1585977024"/>
        <to usec="0" sec="1585977156"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="91.238.226.12"/>
        </slice>
        <from usec="0" sec="1585977169"/>
        <to usec="0" sec="1585977195"/>
    </anomaly>
    <anomaly type="notice" value="0.379185,1.316,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="45.214.30.193"/>
        </slice>
        <from usec="0" sec="1585977204"/>
        <to usec="0" sec="1585977214"/>
    </anomaly>
    <anomaly type="notice" value="0.716142,1.35661,999,0 0 0 1 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="43.136.142.161" dst_ip="213.207.213.86" dst_port="1194"/>
            <filter src_ip="218.145.149.25" dst_ip="213.207.213.86" dst_port="1194"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977228"/>
    </anomaly>
    <anomaly type="notice" value="0.759959,1.38052,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.13.105.40" dst_port="53"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585976446"/>
    </anomaly>
    <anomaly type="notice" value="0.759959,1.38052,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="167.147.158.157" src_port="60000" dst_port="3389"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585976446"/>
    </anomaly>
    <anomaly type="notice" value="0.716142,1.35661,010,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="124.184.176.102" dst_port="23"/>
            <filter dst_ip="133.229.169.58" dst_port="23"/>
        </slice>
        <from usec="0" sec="1585976418"/>
        <to usec="0" sec="1585976997"/>
    </anomaly>
    <anomaly type="notice" value="0.759959,1.38052,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="54.160.62.96"/>
        </slice>
        <from usec="0" sec="1585976580"/>
        <to usec="0" sec="1585976626"/>
    </anomaly>
    <anomaly type="notice" value="0.759959,1.38052,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="43.136.142.161" dst_ip="203.13.108.225" dst_port="1194"/>
            <filter src_ip="218.145.149.25" dst_ip="203.13.108.225" dst_port="1194"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585976626"/>
    </anomaly>
    <anomaly type="notice" value="0.716142,1.35661,010,0 0 0 1 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.3.125.202" dst_port="50348"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977121"/>
    </anomaly>
    <anomaly type="notice" value="0.585502,1.2916,999,0 0 0 1 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.222.238.29" src_port="53"/>
            <filter dst_ip="163.222.239.195" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.759959,1.38052,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="3.132.21.204"/>
        </slice>
        <from usec="0" sec="1585976580"/>
        <to usec="0" sec="1585976626"/>
    </anomaly>
    <anomaly type="notice" value="0.759959,1.38052,999,0 0 0 0 0 0 1 0 0 0 0 0,DDoSUDP">
        <slice>
            <filter dst_ip="163.222.234.98"/>
        </slice>
        <from usec="0" sec="1585976580"/>
        <to usec="0" sec="1585976626"/>
    </anomaly>
    <anomaly type="notice" value="0.759959,1.38052,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="203.13.124.26"/>
        </slice>
        <from usec="0" sec="1585976580"/>
        <to usec="0" sec="1585976626"/>
    </anomaly>
    <anomaly type="notice" value="0.716142,1.35661,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.13.108.138" dst_port="60217"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977228"/>
    </anomaly>
    <anomaly type="notice" value="0.759959,1.38052,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.13.107.105" dst_port="53"/>
        </slice>
        <from usec="0" sec="1585976580"/>
        <to usec="0" sec="1585976626"/>
    </anomaly>
    <anomaly type="notice" value="0.759959,1.38052,010,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="222.151.57.79" src_port="443" dst_port="2302"/>
            <filter dst_ip="222.151.57.79" src_port="80" dst_port="2302"/>
        </slice>
        <from usec="0" sec="1585976580"/>
        <to usec="0" sec="1585976626"/>
    </anomaly>
    <anomaly type="notice" value="0.716142,1.35661,010,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="51.79.121.66" src_port="443"/>
            <filter dst_ip="58.85.28.37"/>
        </slice>
        <from usec="0" sec="1585976400"/>
        <to usec="0" sec="1585977121"/>
    </anomaly>
    <anomaly type="notice" value="0.759959,1.38052,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.13.97.221"/>
        </slice>
        <from usec="0" sec="1585976580"/>
        <to usec="0" sec="1585976626"/>
    </anomaly>
    <anomaly type="notice" value="0.759959,1.38052,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.13.105.63"/>
        </slice>
        <from usec="0" sec="1585976580"/>
        <to usec="0" sec="1585976626"/>
    </anomaly>
    <anomaly type="notice" value="0.759959,1.38052,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="185.101.69.33"/>
        </slice>
        <from usec="0" sec="1585976580"/>
        <to usec="0" sec="1585976626"/>
    </anomaly>
    <anomaly type="notice" value="0.759959,1.38052,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="54.33.29.6"/>
        </slice>
        <from usec="0" sec="1585976580"/>
        <to usec="0" sec="1585976626"/>
    </anomaly>
    <anomaly type="notice" value="0.759959,1.38052,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.13.105.40" dst_port="53"/>
        </slice>
        <from usec="0" sec="1585976580"/>
        <to usec="0" sec="1585976716"/>
    </anomaly>
    <anomaly type="notice" value="0.759959,1.38052,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="3.133.113.143"/>
        </slice>
        <from usec="0" sec="1585976580"/>
        <to usec="0" sec="1585976896"/>
    </anomaly>
    <anomaly type="notice" value="0.759959,1.38052,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.13.107.105" dst_port="53"/>
        </slice>
        <from usec="0" sec="1585976850"/>
        <to usec="0" sec="1585976896"/>
    </anomaly>
    <anomaly type="notice" value="0.759959,1.38052,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="125.199.89.183" dst_ip="202.39.182.237" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1585976580"/>
        <to usec="0" sec="1585977121"/>
    </anomaly>
    <anomaly type="notice" value="0.759959,1.38052,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="203.151.184.44"/>
        </slice>
        <from usec="0" sec="1585977075"/>
        <to usec="0" sec="1585977121"/>
    </anomaly>
    <anomaly type="notice" value="0.716142,1.35661,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.13.102.61" dst_port="53"/>
        </slice>
        <from usec="0" sec="1585976417"/>
        <to usec="0" sec="1585977121"/>
    </anomaly>
    <anomaly type="notice" value="0.759959,1.38052,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.3.125.186" dst_port="50356"/>
        </slice>
        <from usec="0" sec="1585976580"/>
        <to usec="0" sec="1585977121"/>
    </anomaly>
    <anomaly type="notice" value="0.759959,1.38052,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="34.99.255.237"/>
        </slice>
        <from usec="0" sec="1585977075"/>
        <to usec="0" sec="1585977121"/>
    </anomaly>
    <anomaly type="notice" value="0.759959,1.38052,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="51.93.70.223" dst_ip="203.13.111.130" dst_port="1194"/>
            <filter src_ip="194.197.238.58" dst_ip="203.13.111.130" dst_port="1194"/>
            <filter src_ip="43.136.142.161" dst_ip="203.13.111.130" dst_port="1194"/>
        </slice>
        <from usec="0" sec="1585976580"/>
        <to usec="0" sec="1585977121"/>
    </anomaly>
    <anomaly type="notice" value="0.759959,1.38052,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.13.107.105" dst_port="53"/>
        </slice>
        <from usec="0" sec="1585977075"/>
        <to usec="0" sec="1585977121"/>
    </anomaly>
    <anomaly type="notice" value="0.759959,1.38052,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="35.220.214.169"/>
        </slice>
        <from usec="0" sec="1585977075"/>
        <to usec="0" sec="1585977121"/>
    </anomaly>
    <anomaly type="notice" value="0.759959,1.38052,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="163.222.194.157"/>
        </slice>
        <from usec="0" sec="1585977075"/>
        <to usec="0" sec="1585977121"/>
    </anomaly>
    <anomaly type="notice" value="0.759959,1.38052,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.3.126.218" dst_port="50356"/>
        </slice>
        <from usec="0" sec="1585976580"/>
        <to usec="0" sec="1585977121"/>
    </anomaly>
    <anomaly type="notice" value="0.759959,1.38052,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.13.105.40" dst_port="53"/>
        </slice>
        <from usec="0" sec="1585977075"/>
        <to usec="0" sec="1585977121"/>
    </anomaly>
    <anomaly type="notice" value="0.759959,1.38052,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.13.101.40"/>
        </slice>
        <from usec="0" sec="1585977075"/>
        <to usec="0" sec="1585977121"/>
    </anomaly>
    <anomaly type="notice" value="0.759959,1.38052,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="144.37.170.28"/>
        </slice>
        <from usec="0" sec="1585976850"/>
        <to usec="0" sec="1585977211"/>
    </anomaly>
    <anomaly type="notice" value="0.759959,1.38052,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.13.107.105" dst_port="53"/>
        </slice>
        <from usec="0" sec="1585977165"/>
        <to usec="0" sec="1585977211"/>
    </anomaly>
    <anomaly type="notice" value="0.759959,1.38052,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="18.180.253.89"/>
        </slice>
        <from usec="0" sec="1585977165"/>
        <to usec="0" sec="1585977211"/>
    </anomaly>
    <anomaly type="notice" value="0.759959,1.38052,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="3.135.12.216"/>
        </slice>
        <from usec="0" sec="1585977165"/>
        <to usec="0" sec="1585977211"/>
    </anomaly>
    <anomaly type="notice" value="0.759959,1.38052,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="15.163.164.15"/>
        </slice>
        <from usec="0" sec="1585977210"/>
        <to usec="0" sec="1585977256"/>
    </anomaly>
    <anomaly type="notice" value="0.759959,1.38052,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.13.105.40" dst_port="53"/>
        </slice>
        <from usec="0" sec="1585977210"/>
        <to usec="0" sec="1585977256"/>
    </anomaly>
    <anomaly type="notice" value="0.759959,1.38052,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="101.78.164.125" dst_ip="133.229.128.19" dst_port="1312"/>
        </slice>
        <from usec="0" sec="1585976670"/>
        <to usec="0" sec="1585977256"/>
    </anomaly>
    <anomaly type="notice" value="0.638351,1.31669,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="131.119.132.113"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.638351,1.31669,010,0 0 0 0 0 0 0 0 0 1 0 0,ntscSYN">
        <slice>
            <filter src_ip="141.146.73.95"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585502,1.2916,504,0 0 0 1 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="163.222.89.42" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.638351,1.31669,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="163.222.111.94"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.638351,1.31669,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="203.13.109.242"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585502,1.2916,999,0 0 0 1 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="202.137.208.45" src_port="53"/>
            <filter src_ip="202.137.208.45" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.638351,1.31669,502,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="202.135.56.245" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585502,1.2916,502,0 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter dst_ip="203.13.108.242"/>
            <filter src_ip="222.69.192.120" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585502,1.2916,504,0 0 0 1 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="23.228.158.83" dst_ip="163.222.172.220" src_port="443" dst_port="33292"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.638351,1.31669,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="31.237.173.139"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.638351,1.31669,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="92.113.97.237" src_port="63904" dst_port="8081"/>
            <filter src_ip="92.113.97.237" src_port="55183" dst_port="8443"/>
            <filter src_ip="92.113.97.237" src_port="56957" dst_port="1250"/>
            <filter src_ip="92.113.97.237" src_port="53736" dst_port="5443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.638351,1.31669,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="107.236.191.140"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.638351,1.31669,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter src_ip="219.150.78.15" dst_ip="133.3.215.203"/>
            <filter dst_ip="133.3.215.203" dst_port="36715"/>
            <filter dst_ip="133.3.215.203" dst_port="36714"/>
            <filter dst_ip="133.3.215.203" dst_port="9993"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.843736,1.33295,010,0 0 0 1 0 0 1 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="133.3.126.181" dst_port="50348"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.638351,1.31669,010,0 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="65.116.152.84" dst_ip="133.3.205.211"/>
            <filter src_ip="65.116.152.84" dst_port="22"/>
            <filter src_ip="65.116.152.84" dst_port="443"/>
            <filter src_ip="84.209.20.85" dst_ip="133.3.205.211"/>
            <filter src_ip="84.209.20.85" dst_port="22"/>
            <filter src_ip="84.209.20.85" dst_port="443"/>
            <filter src_ip="54.231.15.165" dst_ip="133.3.205.211"/>
            <filter src_ip="54.231.15.165" dst_port="22"/>
            <filter src_ip="54.231.15.165" dst_port="443"/>
            <filter dst_ip="133.3.205.211" dst_port="22"/>
            <filter dst_ip="133.3.205.211" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.638351,1.31669,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="140.178.112.90"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.638351,1.31669,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.222.43.221" dst_port="3702"/>
            <filter dst_ip="163.222.43.221"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.638351,1.31669,020,0 0 0 0 0 0 0 0 0 1 0 0,icmp_error">
        <slice>
            <filter dst_ip="185.103.199.173"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.638351,1.31669,010,0 0 0 0 0 0 0 0 0 1 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="51.79.121.66" dst_ip="202.39.182.164" dst_port="465"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.638351,1.31669,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="203.151.184.46"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.638351,1.31669,020,0 0 0 0 0 0 0 0 0 1 0 0,DDoSIC">
        <slice>
            <filter dst_ip="203.13.110.195"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.638351,1.31669,010,0 0 0 0 0 0 0 0 0 1 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="65.116.152.84" dst_ip="203.13.108.98" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.638351,1.31669,010,0 0 0 0 0 0 0 0 0 1 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="54.231.15.165" dst_ip="203.13.108.21" dst_port="443"/>
            <filter src_ip="84.209.20.85" dst_ip="203.13.108.21" dst_port="443"/>
            <filter src_ip="65.116.152.84" dst_ip="203.13.108.21" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.638351,1.31669,010,0 0 0 0 0 0 0 0 0 1 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="65.116.152.84" dst_ip="203.13.108.224" dst_port="22"/>
            <filter src_ip="54.231.15.165" dst_ip="203.13.108.224" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.638351,1.31669,502,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.222.109.190" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.638351,1.31669,502,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="210.193.232.36"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.638351,1.31669,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="212.65.141.157"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.638351,1.31669,020,0 0 0 0 0 0 0 0 0 1 0 0,icmp_error">
        <slice>
            <filter dst_ip="220.107.152.128"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.638351,1.31669,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="52.42.239.236"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.638351,1.31669,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="52.160.14.56"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.857845,1.3081,999,0 0 0 1 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="163.222.15.193" dst_ip="35.214.143.216" dst_port="6667"/>
            <filter src_ip="163.222.15.193" dst_ip="52.70.132.142" dst_port="6667"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.638351,1.31669,999,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="68.192.53.95"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.638351,1.31669,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="91.130.68.216"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.857845,1.3081,010,0 0 0 1 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="198.20.100.114" src_port="26200"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.857845,1.3081,020,0 0 0 1 0 0 0 0 0 1 1 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="47.65.224.19"/>
            <filter dst_ip="161.129.152.170"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
