<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="notice" value="0.543696,1.17919,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.43.26.244" dst_ip="177.40.154.201" src_port="38035" dst_port="38825" proto="udp"/>
        </slice>
        <from usec="0" sec="1588655208"/>
        <to usec="0" sec="1588655694"/>
    </anomaly>
    <anomaly type="notice" value="0.543696,1.17919,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="60.66.238.104" dst_ip="203.82.207.107" src_port="42596" dst_port="995" proto="tcp"/>
        </slice>
        <from usec="0" sec="1588655162"/>
        <to usec="0" sec="1588655164"/>
    </anomaly>
    <anomaly type="notice" value="0.543696,1.17919,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.1.238.31" dst_ip="126.95.217.241" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1588655351"/>
        <to usec="0" sec="1588655356"/>
    </anomaly>
    <anomaly type="notice" value="0.543696,1.17919,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="45.15.82.194" dst_ip="45.15.82.194" proto="icmp"/>
        </slice>
        <from usec="0" sec="1588654949"/>
        <to usec="0" sec="1588654951"/>
    </anomaly>
    <anomaly type="notice" value="0.543696,1.17919,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="203.82.211.211" dst_port="445" proto="tcp"/>
        </slice>
        <from usec="0" sec="1588655176"/>
        <to usec="0" sec="1588655178"/>
    </anomaly>
    <anomaly type="notice" value="0.543696,1.17919,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="203.82.202.199" dst_port="445" proto="tcp"/>
        </slice>
        <from usec="0" sec="1588655169"/>
        <to usec="0" sec="1588655173"/>
    </anomaly>
    <anomaly type="notice" value="0.543696,1.17919,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="117.30.152.177" src_port="3391" proto="tcp"/>
        </slice>
        <from usec="0" sec="1588655302"/>
        <to usec="0" sec="1588655305"/>
    </anomaly>
    <anomaly type="notice" value="0.543696,1.17919,012,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="162.131.201.247" src_port="8443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1588655676"/>
        <to usec="0" sec="1588655678"/>
    </anomaly>
    <anomaly type="notice" value="0.543696,1.17919,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.8.0.94"/>
        </slice>
        <from usec="0" sec="1588655364"/>
        <to usec="0" sec="1588655366"/>
    </anomaly>
    <anomaly type="notice" value="0.692627,1.21357,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.212.215.116" dst_ip="170.185.178.240" src_port="49920" dst_port="9000"/>
        </slice>
        <from usec="0" sec="1588655346"/>
        <to usec="0" sec="1588655348"/>
    </anomaly>
    <anomaly type="notice" value="0.610869,1.25888,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="45.15.82.194" dst_ip="45.15.82.194" proto="icmp"/>
        </slice>
        <from usec="0" sec="1588654949"/>
        <to usec="0" sec="1588654951"/>
    </anomaly>
    <anomaly type="notice" value="0.692627,1.21357,999,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="123.156.27.210" src_port="3389"/>
        </slice>
        <from usec="0" sec="1588654911"/>
        <to usec="0" sec="1588655536"/>
    </anomaly>
    <anomaly type="notice" value="0.692627,1.21357,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="199.91.73.239"/>
        </slice>
        <from usec="0" sec="1588655586"/>
        <to usec="0" sec="1588655700"/>
    </anomaly>
    <anomaly type="notice" value="0.692627,1.21357,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="114.41.176.168"/>
        </slice>
        <from usec="0" sec="1588654911"/>
        <to usec="0" sec="1588654912"/>
    </anomaly>
    <anomaly type="notice" value="0.692627,1.21357,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="123.156.27.210" dst_port="3389"/>
        </slice>
        <from usec="0" sec="1588654911"/>
        <to usec="0" sec="1588655526"/>
    </anomaly>
    <anomaly type="notice" value="0.692627,1.21357,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="162.131.201.2" dst_port="435"/>
        </slice>
        <from usec="0" sec="1588655354"/>
        <to usec="0" sec="1588655365"/>
    </anomaly>
    <anomaly type="notice" value="0.692627,1.21357,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="77.139.188.38" dst_port="3389"/>
        </slice>
        <from usec="0" sec="1588654814"/>
        <to usec="0" sec="1588655294"/>
    </anomaly>
    <anomaly type="notice" value="0.692627,1.21357,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="112.184.232.78" dst_port="445"/>
        </slice>
        <from usec="0" sec="1588655033"/>
        <to usec="0" sec="1588655036"/>
    </anomaly>
    <anomaly type="notice" value="0.692627,1.21357,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="194.24.107.213" dst_port="445"/>
        </slice>
        <from usec="0" sec="1588655120"/>
        <to usec="0" sec="1588655121"/>
    </anomaly>
    <anomaly type="notice" value="0.692627,1.21357,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="45.23.50.103" dst_port="445"/>
        </slice>
        <from usec="0" sec="1588655338"/>
        <to usec="0" sec="1588655342"/>
    </anomaly>
    <anomaly type="notice" value="0.692627,1.21357,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="118.219.163.135" dst_port="3389"/>
        </slice>
        <from usec="0" sec="1588655049"/>
        <to usec="0" sec="1588655621"/>
    </anomaly>
    <anomaly type="notice" value="0.692627,1.21357,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="36.93.35.101" dst_port="445"/>
        </slice>
        <from usec="0" sec="1588654879"/>
        <to usec="0" sec="1588654883"/>
    </anomaly>
    <anomaly type="notice" value="0.692627,1.21357,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="59.50.29.194" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1588654844"/>
        <to usec="0" sec="1588654848"/>
    </anomaly>
    <anomaly type="notice" value="0.692627,1.21357,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="222.78.140.173" dst_port="445"/>
        </slice>
        <from usec="0" sec="1588655632"/>
        <to usec="0" sec="1588655634"/>
    </anomaly>
    <anomaly type="notice" value="0.692627,1.21357,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="219.123.15.13" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1588654963"/>
        <to usec="0" sec="1588654969"/>
    </anomaly>
    <anomaly type="notice" value="0.692627,1.21357,999,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="162.131.201.2" src_port="435"/>
        </slice>
        <from usec="0" sec="1588655354"/>
        <to usec="0" sec="1588655365"/>
    </anomaly>
    <anomaly type="notice" value="0.692627,1.21357,999,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="77.139.188.38" src_port="3389"/>
        </slice>
        <from usec="0" sec="1588654814"/>
        <to usec="0" sec="1588655305"/>
    </anomaly>
    <anomaly type="notice" value="0.692627,1.21357,999,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="1.234.138.241" src_port="3389"/>
        </slice>
        <from usec="0" sec="1588654911"/>
        <to usec="0" sec="1588655536"/>
    </anomaly>
    <anomaly type="notice" value="0.692627,1.21357,502,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="87.20.72.7" src_port="22"/>
        </slice>
        <from usec="0" sec="1588655551"/>
        <to usec="0" sec="1588655559"/>
    </anomaly>
    <anomaly type="notice" value="0.692627,1.21357,999,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="95.215.151.171" src_port="3389"/>
        </slice>
        <from usec="0" sec="1588654985"/>
        <to usec="0" sec="1588654997"/>
    </anomaly>
    <anomaly type="notice" value="0.58031,1.25275,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1588654800"/>
        <to usec="0" sec="1588655538"/>
    </anomaly>
    <anomaly type="notice" value="0.58031,1.25275,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.1.250.177"/>
        </slice>
        <from usec="0" sec="1588654822"/>
        <to usec="0" sec="1588654998"/>
    </anomaly>
    <anomaly type="notice" value="0.58031,1.25275,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="167.80.133.131"/>
        </slice>
        <from usec="0" sec="1588654800"/>
        <to usec="0" sec="1588655088"/>
    </anomaly>
    <anomaly type="notice" value="0.58031,1.25275,504,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.212.214.34" src_port="443"/>
            <filter dst_ip="172.58.124.155" src_port="443"/>
        </slice>
        <from usec="0" sec="1588654800"/>
        <to usec="0" sec="1588655175"/>
    </anomaly>
    <anomaly type="notice" value="0.58031,1.25275,011,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="185.94.60.26" dst_port="59185"/>
        </slice>
        <from usec="0" sec="1588654800"/>
        <to usec="0" sec="1588655178"/>
    </anomaly>
    <anomaly type="notice" value="0.58031,1.25275,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.212.115.191"/>
        </slice>
        <from usec="0" sec="1588654800"/>
        <to usec="0" sec="1588655172"/>
    </anomaly>
    <anomaly type="notice" value="0.58031,1.25275,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.43.49.111"/>
        </slice>
        <from usec="0" sec="1588654800"/>
        <to usec="0" sec="1588655178"/>
    </anomaly>
    <anomaly type="notice" value="0.58031,1.25275,020,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="222.143.221.235"/>
        </slice>
        <from usec="0" sec="1588654803"/>
        <to usec="0" sec="1588655178"/>
    </anomaly>
    <anomaly type="notice" value="0.58031,1.25275,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.8.2.188"/>
        </slice>
        <from usec="0" sec="1588654806"/>
        <to usec="0" sec="1588655177"/>
    </anomaly>
    <anomaly type="notice" value="0.58031,1.25275,502,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="165.252.216.223"/>
        </slice>
        <from usec="0" sec="1588654808"/>
        <to usec="0" sec="1588655166"/>
    </anomaly>
    <anomaly type="notice" value="0.58031,1.25275,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="52.241.17.12"/>
        </slice>
        <from usec="0" sec="1588654818"/>
        <to usec="0" sec="1588655176"/>
    </anomaly>
    <anomaly type="notice" value="0.58031,1.25275,010,0 0 0 1 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="162.131.193.184" dst_port="873"/>
        </slice>
        <from usec="0" sec="1588654882"/>
        <to usec="0" sec="1588655169"/>
    </anomaly>
    <anomaly type="notice" value="0.58031,1.25275,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="191.61.187.104"/>
        </slice>
        <from usec="0" sec="1588655043"/>
        <to usec="0" sec="1588655178"/>
    </anomaly>
    <anomaly type="notice" value="0.58031,1.25275,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="62.148.157.199"/>
        </slice>
        <from usec="0" sec="1588655083"/>
        <to usec="0" sec="1588655135"/>
    </anomaly>
    <anomaly type="notice" value="0.58031,1.25275,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="64.127.148.67"/>
        </slice>
        <from usec="0" sec="1588654801"/>
        <to usec="0" sec="1588655268"/>
    </anomaly>
    <anomaly type="notice" value="0.58031,1.25275,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="112.213.95.17"/>
        </slice>
        <from usec="0" sec="1588654804"/>
        <to usec="0" sec="1588655268"/>
    </anomaly>
    <anomaly type="notice" value="0.58031,1.25275,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="31.35.187.98"/>
        </slice>
        <from usec="0" sec="1588654821"/>
        <to usec="0" sec="1588655165"/>
    </anomaly>
    <anomaly type="notice" value="0.58031,1.25275,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="206.220.227.1"/>
        </slice>
        <from usec="0" sec="1588654826"/>
        <to usec="0" sec="1588655265"/>
    </anomaly>
    <anomaly type="notice" value="0.58031,1.25275,020,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="112.91.86.6"/>
        </slice>
        <from usec="0" sec="1588654877"/>
        <to usec="0" sec="1588655146"/>
    </anomaly>
    <anomaly type="notice" value="0.58031,1.25275,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.212.3.34"/>
        </slice>
        <from usec="0" sec="1588654807"/>
        <to usec="0" sec="1588655354"/>
    </anomaly>
    <anomaly type="notice" value="0.58031,1.25275,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1588654800"/>
        <to usec="0" sec="1588655448"/>
    </anomaly>
    <anomaly type="notice" value="0.58031,1.25275,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="124.118.113.126"/>
        </slice>
        <from usec="0" sec="1588654801"/>
        <to usec="0" sec="1588655448"/>
    </anomaly>
    <anomaly type="notice" value="0.58031,1.25275,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="159.65.56.104"/>
        </slice>
        <from usec="0" sec="1588654801"/>
        <to usec="0" sec="1588655448"/>
    </anomaly>
    <anomaly type="notice" value="0.58031,1.25275,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="113.120.158.179"/>
        </slice>
        <from usec="0" sec="1588654802"/>
        <to usec="0" sec="1588655445"/>
    </anomaly>
    <anomaly type="notice" value="0.58031,1.25275,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="180.68.239.185"/>
        </slice>
        <from usec="0" sec="1588654819"/>
        <to usec="0" sec="1588655443"/>
    </anomaly>
    <anomaly type="notice" value="0.58031,1.25275,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="183.151.27.220"/>
        </slice>
        <from usec="0" sec="1588654902"/>
        <to usec="0" sec="1588655417"/>
    </anomaly>
    <anomaly type="notice" value="0.58031,1.25275,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="27.236.174.108"/>
        </slice>
        <from usec="0" sec="1588655376"/>
        <to usec="0" sec="1588655434"/>
    </anomaly>
    <anomaly type="notice" value="0.58031,1.25275,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="37.20.6.238"/>
        </slice>
        <from usec="0" sec="1588654800"/>
        <to usec="0" sec="1588655537"/>
    </anomaly>
    <anomaly type="notice" value="0.58031,1.25275,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICecrqICecrqdurmterp">
        <slice>
            <filter dst_ip="46.109.130.68"/>
        </slice>
        <from usec="0" sec="1588654800"/>
        <to usec="0" sec="1588655538"/>
    </anomaly>
    <anomaly type="notice" value="0.58031,1.25275,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="113.146.223.153"/>
        </slice>
        <from usec="0" sec="1588654800"/>
        <to usec="0" sec="1588655512"/>
    </anomaly>
    <anomaly type="notice" value="0.58031,1.25275,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="177.182.100.101"/>
        </slice>
        <from usec="0" sec="1588654800"/>
        <to usec="0" sec="1588655531"/>
    </anomaly>
    <anomaly type="notice" value="0.58031,1.25275,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="52.11.135.2"/>
        </slice>
        <from usec="0" sec="1588654800"/>
        <to usec="0" sec="1588655538"/>
    </anomaly>
    <anomaly type="notice" value="0.58031,1.25275,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="185.84.2.155"/>
        </slice>
        <from usec="0" sec="1588654801"/>
        <to usec="0" sec="1588655537"/>
    </anomaly>
    <anomaly type="notice" value="0.58031,1.25275,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="185.251.97.6"/>
        </slice>
        <from usec="0" sec="1588654803"/>
        <to usec="0" sec="1588655503"/>
    </anomaly>
    <anomaly type="notice" value="0.58031,1.25275,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="177.232.18.35"/>
        </slice>
        <from usec="0" sec="1588654819"/>
        <to usec="0" sec="1588655537"/>
    </anomaly>
    <anomaly type="notice" value="0.607643,1.24419,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="162.131.206.21" dst_port="873"/>
        </slice>
        <from usec="0" sec="1588654800"/>
        <to usec="0" sec="1588654846"/>
    </anomaly>
    <anomaly type="notice" value="0.607643,1.24419,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="146.80.244.45" src_port="1901" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1588654800"/>
        <to usec="0" sec="1588654846"/>
    </anomaly>
    <anomaly type="notice" value="0.607643,1.24419,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="146.80.244.45" src_port="1901" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1588654935"/>
        <to usec="0" sec="1588655026"/>
    </anomaly>
    <anomaly type="notice" value="0.607643,1.24419,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="18.239.217.197"/>
        </slice>
        <from usec="0" sec="1588655070"/>
        <to usec="0" sec="1588655116"/>
    </anomaly>
    <anomaly type="notice" value="0.607643,1.24419,999,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="108.90.225.66" dst_ip="163.43.74.156" dst_port="3702"/>
        </slice>
        <from usec="0" sec="1588655070"/>
        <to usec="0" sec="1588655116"/>
    </anomaly>
    <anomaly type="notice" value="0.607643,1.24419,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="51.91.164.80" dst_port="8081"/>
        </slice>
        <from usec="0" sec="1588655205"/>
        <to usec="0" sec="1588655251"/>
    </anomaly>
    <anomaly type="notice" value="0.607643,1.24419,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="146.80.244.45"/>
        </slice>
        <from usec="0" sec="1588655250"/>
        <to usec="0" sec="1588655296"/>
    </anomaly>
    <anomaly type="notice" value="0.718996,1.27078,999,0 0 0 1 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.43.251.145" dst_port="53"/>
        </slice>
        <from usec="0" sec="1588654800"/>
        <to usec="0" sec="1588655448"/>
    </anomaly>
    <anomaly type="notice" value="0.607643,1.24419,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.197.95.205"/>
        </slice>
        <from usec="0" sec="1588655250"/>
        <to usec="0" sec="1588655296"/>
    </anomaly>
    <anomaly type="notice" value="0.768945,1.20806,054,0 0 0 0 0 0 1 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="203.82.193.87" src_port="443"/>
            <filter dst_ip="70.225.199.207" src_port="80"/>
            <filter dst_ip="70.225.199.207" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.718996,1.27078,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.82.203.199" dst_port="53"/>
        </slice>
        <from usec="0" sec="1588654804"/>
        <to usec="0" sec="1588655476"/>
    </anomaly>
    <anomaly type="notice" value="0.607643,1.24419,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.1.238.2" src_port="53"/>
        </slice>
        <from usec="0" sec="1588655070"/>
        <to usec="0" sec="1588655296"/>
    </anomaly>
    <anomaly type="notice" value="0.607643,1.24419,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.82.203.193"/>
        </slice>
        <from usec="0" sec="1588655250"/>
        <to usec="0" sec="1588655296"/>
    </anomaly>
    <anomaly type="notice" value="0.607643,1.24419,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.197.95.189"/>
        </slice>
        <from usec="0" sec="1588655250"/>
        <to usec="0" sec="1588655296"/>
    </anomaly>
    <anomaly type="notice" value="0.607643,1.24419,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="133.53.252.67"/>
        </slice>
        <from usec="0" sec="1588655250"/>
        <to usec="0" sec="1588655296"/>
    </anomaly>
    <anomaly type="notice" value="0.607643,1.24419,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="194.29.226.138"/>
        </slice>
        <from usec="0" sec="1588655250"/>
        <to usec="0" sec="1588655296"/>
    </anomaly>
    <anomaly type="notice" value="0.607643,1.24419,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.82.198.114"/>
        </slice>
        <from usec="0" sec="1588655250"/>
        <to usec="0" sec="1588655296"/>
    </anomaly>
    <anomaly type="notice" value="0.718996,1.27078,504,0 0 0 1 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="40.173.34.89" dst_port="443"/>
        </slice>
        <from usec="0" sec="1588654813"/>
        <to usec="0" sec="1588655517"/>
    </anomaly>
    <anomaly type="notice" value="0.607643,1.24419,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="163.43.221.151"/>
        </slice>
        <from usec="0" sec="1588655250"/>
        <to usec="0" sec="1588655296"/>
    </anomaly>
    <anomaly type="notice" value="0.607643,1.24419,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="163.43.182.250"/>
        </slice>
        <from usec="0" sec="1588655250"/>
        <to usec="0" sec="1588655296"/>
    </anomaly>
    <anomaly type="notice" value="0.718996,1.27078,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.82.205.197" dst_port="53"/>
        </slice>
        <from usec="0" sec="1588654802"/>
        <to usec="0" sec="1588655447"/>
    </anomaly>
    <anomaly type="notice" value="0.607643,1.24419,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.197.93.213" dst_port="50356"/>
        </slice>
        <from usec="0" sec="1588655070"/>
        <to usec="0" sec="1588655296"/>
    </anomaly>
    <anomaly type="notice" value="0.789637,1.22591,504,1 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="40.136.32.171" dst_port="443"/>
            <filter dst_ip="162.109.224.65" dst_port="443"/>
        </slice>
        <from usec="0" sec="1588654804"/>
        <to usec="0" sec="1588655296"/>
    </anomaly>
    <anomaly type="notice" value="0.607643,1.24419,010,0 0 0 0 0 0 1 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="104.240.120.83" dst_ip="203.82.205.250" src_port="32766"/>
        </slice>
        <from usec="0" sec="1588655250"/>
        <to usec="0" sec="1588655296"/>
    </anomaly>
    <anomaly type="notice" value="0.607643,1.24419,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="162.131.205.163"/>
        </slice>
        <from usec="0" sec="1588655340"/>
        <to usec="0" sec="1588655386"/>
    </anomaly>
    <anomaly type="notice" value="0.607643,1.24419,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="45.13.175.201" dst_ip="163.43.160.61" dst_port="53"/>
            <filter src_ip="194.0.171.219" dst_ip="163.43.160.61" dst_port="53"/>
        </slice>
        <from usec="0" sec="1588655250"/>
        <to usec="0" sec="1588655386"/>
    </anomaly>
    <anomaly type="notice" value="0.607643,1.24419,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.82.203.208" dst_port="53"/>
        </slice>
        <from usec="0" sec="1588655250"/>
        <to usec="0" sec="1588655386"/>
    </anomaly>
    <anomaly type="notice" value="0.607643,1.24419,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="3.58.148.4"/>
        </slice>
        <from usec="0" sec="1588655340"/>
        <to usec="0" sec="1588655386"/>
    </anomaly>
    <anomaly type="notice" value="0.718996,1.27078,504,0 0 0 1 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.43.56.83" src_port="443"/>
        </slice>
        <from usec="0" sec="1588654803"/>
        <to usec="0" sec="1588655386"/>
    </anomaly>
    <anomaly type="notice" value="0.607643,1.24419,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="3.239.229.116"/>
        </slice>
        <from usec="0" sec="1588655340"/>
        <to usec="0" sec="1588655386"/>
    </anomaly>
    <anomaly type="notice" value="0.607643,1.24419,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="3.242.250.237"/>
        </slice>
        <from usec="0" sec="1588655340"/>
        <to usec="0" sec="1588655386"/>
    </anomaly>
    <anomaly type="notice" value="0.607643,1.24419,999,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="52.241.244.146" dst_ip="203.82.196.69"/>
            <filter src_ip="52.241.244.146" dst_ip="109.15.222.249"/>
            <filter src_ip="52.241.244.146" dst_ip="203.82.193.65"/>
            <filter src_ip="52.241.244.146" dst_ip="203.82.198.31"/>
            <filter src_ip="52.241.244.146" dst_port="1194"/>
            <filter dst_ip="203.82.196.69" dst_port="1194"/>
            <filter dst_ip="109.15.222.249" dst_port="1194"/>
            <filter dst_ip="203.82.193.65" dst_port="1194"/>
            <filter dst_ip="203.82.198.31" dst_port="1194"/>
        </slice>
        <from usec="0" sec="1588655115"/>
        <to usec="0" sec="1588655701"/>
    </anomaly>
    <anomaly type="notice" value="0.607643,1.24419,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.197.93.179" dst_port="50348"/>
        </slice>
        <from usec="0" sec="1588655250"/>
        <to usec="0" sec="1588655476"/>
    </anomaly>
    <anomaly type="notice" value="0.607643,1.24419,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.43.7.8" dst_port="53"/>
        </slice>
        <from usec="0" sec="1588655250"/>
        <to usec="0" sec="1588655476"/>
    </anomaly>
    <anomaly type="notice" value="0.607643,1.24419,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="62.210.106.96"/>
        </slice>
        <from usec="0" sec="1588655430"/>
        <to usec="0" sec="1588655476"/>
    </anomaly>
    <anomaly type="notice" value="0.607643,1.24419,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="162.131.206.149" dst_port="8443"/>
        </slice>
        <from usec="0" sec="1588655475"/>
        <to usec="0" sec="1588655521"/>
    </anomaly>
    <anomaly type="notice" value="0.607643,1.24419,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="146.80.244.45" src_port="1901"/>
        </slice>
        <from usec="0" sec="1588655475"/>
        <to usec="0" sec="1588655521"/>
    </anomaly>
    <anomaly type="notice" value="0.607643,1.24419,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="34.25.221.83"/>
        </slice>
        <from usec="0" sec="1588655520"/>
        <to usec="0" sec="1588655566"/>
    </anomaly>
    <anomaly type="notice" value="0.607643,1.24419,999,0 0 0 0 0 0 1 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="162.225.36.62" dst_ip="163.43.7.8" dst_port="53"/>
        </slice>
        <from usec="0" sec="1588655655"/>
        <to usec="0" sec="1588655701"/>
    </anomaly>
    <anomaly type="notice" value="0.641156,1.18908,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="17.250.97.232"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641156,1.18908,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="61.214.23.42"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641156,1.18908,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="126.206.244.105"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.768945,1.20806,011,0 0 0 0 0 0 1 0 0 1 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="189.238.218.21" src_port="52869"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641156,1.18908,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="52.173.119.78" dst_ip="163.43.204.104" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641156,1.18908,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.43.64.164" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.747533,1.21687,999,0 0 0 1 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.43.251.162" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641156,1.18908,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="192.226.218.181"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641156,1.18908,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.82.207.110" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641156,1.18908,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="35.235.152.165"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641156,1.18908,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="46.249.39.11"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
