<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="suspicious" value="1.02429,1.26397,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.220.220.48" dst_ip="189.99.149.106" src_port="44930" dst_port="51004" proto="udp"/>
        </slice>
        <from usec="0" sec="1591420349"/>
        <to usec="0" sec="1591420350"/>
    </anomaly>
    <anomaly type="suspicious" value="1.02429,1.26397,010,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="27.103.40.114" src_port="5900"/>
        </slice>
        <from usec="0" sec="1591420015"/>
        <to usec="0" sec="1591420016"/>
    </anomaly>
    <anomaly type="suspicious" value="1.3752,1.40086,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.235.183.62" dst_ip="208.217.156.223" dst_port="443"/>
        </slice>
        <from usec="0" sec="1591419604"/>
        <to usec="0" sec="1591420220"/>
    </anomaly>
    <anomaly type="suspicious" value="1.3752,1.40086,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="104.229.135.53"/>
        </slice>
        <from usec="0" sec="1591420464"/>
        <to usec="0" sec="1591420465"/>
    </anomaly>
    <anomaly type="suspicious" value="1.3752,1.40086,010,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="194.166.26.105" src_port="52078"/>
        </slice>
        <from usec="0" sec="1591420243"/>
        <to usec="0" sec="1591420245"/>
    </anomaly>
    <anomaly type="suspicious" value="1.3752,1.40086,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="117.192.109.241" dst_port="445"/>
        </slice>
        <from usec="0" sec="1591420056"/>
        <to usec="0" sec="1591420058"/>
    </anomaly>
    <anomaly type="suspicious" value="1.3752,1.40086,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="203.90.148.35" dst_port="445"/>
        </slice>
        <from usec="0" sec="1591420033"/>
        <to usec="0" sec="1591420045"/>
    </anomaly>
    <anomaly type="suspicious" value="1.3752,1.40086,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="190.135.249.67" dst_port="445"/>
        </slice>
        <from usec="0" sec="1591419616"/>
        <to usec="0" sec="1591419619"/>
    </anomaly>
    <anomaly type="suspicious" value="1.29058,1.36881,010,1 1 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="194.166.30.151" src_port="52133"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591420427"/>
    </anomaly>
    <anomaly type="suspicious" value="1.3752,1.40086,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.39.14.0" dst_port="5351"/>
        </slice>
        <from usec="0" sec="1591420363"/>
        <to usec="0" sec="1591420364"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08824,1.27268,010,0 0 0 1 1 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.105.157.81" src_port="56131" dst_port="3389"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420330"/>
    </anomaly>
    <anomaly type="suspicious" value="1.29058,1.36881,010,1 1 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="133.253.240.218"/>
            <filter dst_ip="133.253.240.252"/>
            <filter dst_port="445"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420428"/>
    </anomaly>
    <anomaly type="suspicious" value="0.949485,1.2452,901,0 0 0 0 1 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420338"/>
    </anomaly>
    <anomaly type="suspicious" value="0.949485,1.2452,901,0 0 0 0 1 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420158"/>
    </anomaly>
    <anomaly type="suspicious" value="0.822158,1.20902,504,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.90.131.97" dst_ip="192.153.100.179" src_port="39032" dst_port="443"/>
        </slice>
        <from usec="0" sec="1591419602"/>
        <to usec="0" sec="1591420428"/>
    </anomaly>
    <anomaly type="suspicious" value="1.3752,1.40086,010,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="194.166.26.139" src_port="51533"/>
        </slice>
        <from usec="0" sec="1591420240"/>
        <to usec="0" sec="1591420244"/>
    </anomaly>
    <anomaly type="suspicious" value="0.822158,1.20902,999,0 0 0 1 1 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="133.253.66.254"/>
            <filter dst_ip="133.253.66.192"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420338"/>
    </anomaly>
    <anomaly type="suspicious" value="0.822158,1.20902,504,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.220.223.85" dst_ip="163.220.84.120" dst_port="443"/>
        </slice>
        <from usec="0" sec="1591419627"/>
        <to usec="0" sec="1591419967"/>
    </anomaly>
    <anomaly type="suspicious" value="0.822158,1.20902,999,0 0 0 1 1 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="203.90.148.35" dst_ip="133.253.106.5" src_port="53"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420068"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08824,1.27268,999,0 0 0 1 1 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.220.176.188" src_port="53"/>
            <filter dst_ip="163.220.176.156" src_port="53"/>
            <filter dst_ip="163.220.177.92" src_port="53"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420428"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03753,1.21025,504,0 0 0 1 1 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="163.220.220.48" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.822158,1.20902,502,0 0 0 1 1 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.235.5.51" dst_ip="37.250.13.49"/>
            <filter src_ip="133.235.5.51" src_port="22"/>
            <filter src_ip="203.90.133.38" dst_ip="37.250.13.49" src_port="22"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420158"/>
    </anomaly>
    <anomaly type="suspicious" value="0.822158,1.20902,999,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="168.32.241.24" dst_ip="133.253.195.173" src_port="53"/>
            <filter src_ip="203.90.148.35" dst_ip="133.253.195.173" src_port="53"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420158"/>
    </anomaly>
    <anomaly type="suspicious" value="0.822158,1.20902,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.90.137.116" dst_ip="126.181.136.17" src_port="49995" dst_port="6881"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591420154"/>
    </anomaly>
    <anomaly type="suspicious" value="0.822158,1.20902,999,0 0 0 1 1 0 0 0 0 0 0 0,DDoSUDP">
        <slice>
            <filter dst_ip="133.118.153.28" dst_port="58141"/>
            <filter dst_ip="133.118.153.28" dst_port="45340"/>
        </slice>
        <from usec="0" sec="1591419607"/>
        <to usec="0" sec="1591420157"/>
    </anomaly>
    <anomaly type="suspicious" value="0.822158,1.20902,010,0 0 0 1 1 0 0 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="202.11.25.35" dst_ip="133.253.73.81" src_port="60000"/>
        </slice>
        <from usec="0" sec="1591419607"/>
        <to usec="0" sec="1591420158"/>
    </anomaly>
    <anomaly type="suspicious" value="0.822158,1.20902,502,0 0 0 1 1 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.90.148.38" src_port="22"/>
            <filter src_ip="203.90.148.38"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420232"/>
    </anomaly>
    <anomaly type="suspicious" value="0.822158,1.20902,010,0 0 0 1 1 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="203.90.148.35" src_port="47944" dst_port="13589"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420248"/>
    </anomaly>
    <anomaly type="suspicious" value="0.822158,1.20902,020,0 0 0 1 1 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter src_ip="203.90.141.141" dst_ip="14.93.214.240" src_port="22" dst_port="60808"/>
            <filter src_ip="203.90.141.141" dst_ip="14.93.214.240" src_port="22" dst_port="55574"/>
            <filter src_ip="203.90.141.141" dst_ip="14.93.214.240" src_port="22" dst_port="50338"/>
            <filter src_ip="203.90.141.141" dst_ip="14.93.214.240"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420244"/>
    </anomaly>
    <anomaly type="suspicious" value="0.822158,1.20902,010,0 0 0 1 1 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="117.84.87.91" src_port="56815" dst_port="23"/>
            <filter src_ip="117.84.87.91" src_port="58071" dst_port="23"/>
            <filter src_ip="117.84.87.91" src_port="50935" dst_port="23"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420247"/>
    </anomaly>
    <anomaly type="suspicious" value="0.822158,1.20902,504,0 0 0 1 1 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.220.220.125" dst_port="443"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591420428"/>
    </anomaly>
    <anomaly type="suspicious" value="0.822158,1.20902,010,0 0 0 1 1 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="114.184.88.15" src_port="17080" dst_port="23"/>
            <filter src_ip="114.184.88.15" src_port="46071" dst_port="23"/>
        </slice>
        <from usec="0" sec="1591419606"/>
        <to usec="0" sec="1591420244"/>
    </anomaly>
    <anomaly type="suspicious" value="0.822158,1.20902,010,0 0 0 1 1 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="58.36.97.199" src_port="38953" dst_port="23"/>
            <filter src_ip="58.36.97.199" src_port="35385" dst_port="23"/>
        </slice>
        <from usec="0" sec="1591419607"/>
        <to usec="0" sec="1591420248"/>
    </anomaly>
    <anomaly type="suspicious" value="0.822158,1.20902,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.90.137.116" dst_ip="60.106.81.15" src_port="49995" dst_port="6881"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420331"/>
    </anomaly>
    <anomaly type="suspicious" value="0.822158,1.20902,999,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="168.32.241.24" dst_ip="133.253.225.87" src_port="53"/>
            <filter src_ip="203.90.148.35" dst_ip="133.253.225.87" src_port="53"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420331"/>
    </anomaly>
    <anomaly type="suspicious" value="0.822158,1.20902,504,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="163.220.18.161" src_port="443"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420338"/>
    </anomaly>
    <anomaly type="suspicious" value="0.822158,1.20902,010,0 0 0 1 1 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="39.101.220.211" dst_ip="133.253.227.220" src_port="80"/>
        </slice>
        <from usec="0" sec="1591419602"/>
        <to usec="0" sec="1591420338"/>
    </anomaly>
    <anomaly type="suspicious" value="0.822158,1.20902,999,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="168.32.241.24" dst_ip="133.253.204.176" src_port="53"/>
            <filter src_ip="203.90.148.35" dst_ip="133.253.204.176" src_port="53"/>
        </slice>
        <from usec="0" sec="1591419602"/>
        <to usec="0" sec="1591420327"/>
    </anomaly>
    <anomaly type="suspicious" value="0.822158,1.20902,504,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="163.220.2.115" src_port="443"/>
        </slice>
        <from usec="0" sec="1591419603"/>
        <to usec="0" sec="1591420335"/>
    </anomaly>
    <anomaly type="suspicious" value="0.822158,1.20902,999,0 0 0 1 1 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="203.90.148.35" dst_ip="133.253.115.149" src_port="53"/>
        </slice>
        <from usec="0" sec="1591419603"/>
        <to usec="0" sec="1591420337"/>
    </anomaly>
    <anomaly type="suspicious" value="0.822158,1.20902,999,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="168.32.241.24" dst_ip="133.253.235.84" src_port="53"/>
            <filter src_ip="203.90.148.35" dst_ip="133.253.235.84" src_port="53"/>
        </slice>
        <from usec="0" sec="1591419603"/>
        <to usec="0" sec="1591420330"/>
    </anomaly>
    <anomaly type="suspicious" value="0.822158,1.20902,010,0 0 0 1 1 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.220.118.9"/>
        </slice>
        <from usec="0" sec="1591419603"/>
        <to usec="0" sec="1591420338"/>
    </anomaly>
    <anomaly type="suspicious" value="0.822158,1.20902,502,0 0 0 1 1 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="73.139.24.49" src_port="22"/>
        </slice>
        <from usec="0" sec="1591420272"/>
        <to usec="0" sec="1591420304"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08824,1.27268,999,0 0 0 1 1 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="203.90.131.121" dst_ip="13.235.31.197"/>
            <filter src_ip="203.90.131.121" dst_ip="40.169.139.36"/>
            <filter src_ip="203.90.131.121" dst_port="53"/>
            <filter dst_ip="13.235.31.197" dst_port="53"/>
            <filter dst_ip="40.169.139.36" dst_port="53"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420410"/>
    </anomaly>
    <anomaly type="suspicious" value="0.822158,1.20902,503,0 0 0 1 1 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.90.137.76" dst_port="80"/>
        </slice>
        <from usec="0" sec="1591419605"/>
        <to usec="0" sec="1591420428"/>
    </anomaly>
    <anomaly type="suspicious" value="1.50133,1.56345,901,0 0 0 0 0 1 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420338"/>
    </anomaly>
    <anomaly type="suspicious" value="1.50133,1.56345,901,0 0 0 0 0 1 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420158"/>
    </anomaly>
    <anomaly type="suspicious" value="0.917782,1.22734,010,0 0 0 0 0 0 1 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="192.56.70.145" dst_ip="133.253.66.225" dst_port="465"/>
            <filter src_ip="104.25.115.210" dst_ip="133.253.66.225" dst_port="465"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.917782,1.22734,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.253.66.250" dst_port="50348"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.917782,1.22734,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.253.66.247"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.917782,1.22734,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.253.66.164"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.917782,1.22734,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="202.235.85.83"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.917782,1.22734,010,0 0 0 0 0 0 1 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="104.25.115.210" dst_ip="202.235.83.94" dst_port="465"/>
            <filter src_ip="192.56.70.145" dst_ip="202.235.83.94" dst_port="465"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.917782,1.22734,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="194.166.26.124" dst_port="51591"/>
            <filter dst_ip="194.166.26.124"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.917782,1.22734,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="202.235.84.224"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.917782,1.22734,010,0 0 0 0 0 0 1 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="192.56.70.145" dst_ip="202.235.84.209" dst_port="465"/>
            <filter src_ip="104.25.115.210" dst_ip="202.235.84.209" dst_port="465"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.917782,1.22734,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.253.65.187" dst_port="50356"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.917782,1.22734,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.90.142.63"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.917782,1.22734,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="202.235.83.205"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.917782,1.22734,010,0 0 0 0 0 0 1 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="167.56.136.237" dst_ip="203.90.129.134" src_port="32766"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.917782,1.22734,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="202.235.83.241"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419646"/>
    </anomaly>
    <anomaly type="suspicious" value="0.917782,1.22734,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="194.166.26.51" dst_port="51651"/>
            <filter dst_ip="194.166.26.51"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420411"/>
    </anomaly>
    <anomaly type="suspicious" value="0.917782,1.22734,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="97.73.9.121" dst_port="22"/>
        </slice>
        <from usec="0" sec="1591420410"/>
        <to usec="0" sec="1591420456"/>
    </anomaly>
    <anomaly type="suspicious" value="1.33305,1.416,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.220.176.186" src_port="53"/>
        </slice>
        <from usec="0" sec="1591420365"/>
        <to usec="0" sec="1591420411"/>
    </anomaly>
    <anomaly type="suspicious" value="1.24557,1.3843,504,0 0 0 1 0 0 1 1 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="24.19.44.225" dst_port="80"/>
            <filter src_ip="24.19.44.225" dst_port="443"/>
            <filter dst_ip="203.90.139.90" dst_port="443"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420411"/>
    </anomaly>
    <anomaly type="suspicious" value="1.33305,1.416,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.220.177.102" src_port="53"/>
            <filter dst_ip="163.220.177.102"/>
        </slice>
        <from usec="0" sec="1591420365"/>
        <to usec="0" sec="1591420411"/>
    </anomaly>
    <anomaly type="suspicious" value="1.33305,1.416,020,0 0 0 0 0 0 1 1 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="194.166.26.52" dst_port="51681"/>
            <filter dst_ip="194.166.26.52"/>
        </slice>
        <from usec="0" sec="1591420365"/>
        <to usec="0" sec="1591420411"/>
    </anomaly>
    <anomaly type="suspicious" value="1.5431,1.5886,999,0 0 0 0 0 0 0 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.220.176.191" src_port="53"/>
        </slice>
        <from usec="0" sec="1591420365"/>
        <to usec="0" sec="1591420411"/>
    </anomaly>
    <anomaly type="suspicious" value="1.5431,1.5886,020,0 0 0 0 0 0 0 1 1 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="194.166.26.152" dst_port="52120"/>
            <filter dst_ip="194.166.26.152"/>
        </slice>
        <from usec="0" sec="1591420365"/>
        <to usec="0" sec="1591420411"/>
    </anomaly>
    <anomaly type="suspicious" value="0.857037,1.16248,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.220.220.105"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.857037,1.16248,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="18.156.122.225"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.857037,1.16248,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="198.44.188.180" src_port="44839" dst_port="12968"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.857037,1.16248,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="51.222.27.207"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.02998,1.1452,999,0 0 0 1 0 0 0 0 0 1 1 0,mptpla">
        <slice>
            <filter src_ip="69.180.228.23" dst_ip="163.220.69.114" src_port="2101" dst_port="55456"/>
            <filter src_ip="69.180.228.23" dst_ip="163.220.69.114" src_port="2101" dst_port="55450"/>
            <filter src_ip="194.166.30.151" dst_ip="163.220.69.114" src_port="52133" dst_port="15645"/>
            <filter src_ip="194.166.30.151" dst_ip="163.220.69.114" src_port="52133" dst_port="15245"/>
            <filter src_ip="31.54.161.15" dst_ip="163.220.69.114" src_port="45588" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.857037,1.16248,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="75.241.12.174" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.857037,1.16248,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="150.73.251.145"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.857037,1.16248,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="162.255.36.213"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.857037,1.16248,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="133.235.6.6" dst_ip="192.25.59.152" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.857037,1.16248,502,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="203.90.141.69" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.857037,1.16248,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter src_ip="202.155.206.155" dst_ip="203.90.137.229" dst_port="53"/>
            <filter src_ip="193.150.60.61" dst_ip="203.90.137.229" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20403,1.26514,504,1 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="203.90.137.186" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.857037,1.16248,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="52.99.50.133"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.857037,1.16248,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="91.93.92.212"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.13421,1.18332,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="104.153.243.40" dst_ip="203.90.143.18" src_port="443"/>
            <filter src_ip="104.153.243.40" dst_ip="163.220.122.55" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.02998,1.1452,504,0 0 0 1 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="133.235.178.107" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.13421,1.18332,010,0 0 0 0 0 0 0 0 0 1 1 0,sntscSYN">
        <slice>
            <filter src_ip="159.218.227.51" src_port="52136" dst_port="18290"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.13421,1.18332,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="163.220.119.13" dst_ip="40.169.133.232" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.13421,1.18332,010,0 0 0 0 0 0 0 0 0 1 1 0,sntscSYN">
        <slice>
            <filter src_ip="167.172.25.208" src_port="53901" dst_port="15540"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.13421,1.18332,010,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="198.146.189.157"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.13421,1.18332,999,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="203.90.137.186" dst_port="443"/>
            <filter src_ip="203.90.137.186"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.13421,1.18332,503,0 0 0 0 0 0 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.220.222.230" src_port="80"/>
            <filter dst_ip="163.220.222.230" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.13421,1.18332,503,0 0 0 0 0 0 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.220.71.95"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.02998,1.1452,503,0 0 0 1 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="163.220.178.84" dst_ip="126.29.176.149" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.70073,2.05632,999,1 1 1 1 0 0 1 1 1 1 1 1,alphfl">
        <slice>
            <filter src_ip="213.247.120.22" dst_ip="163.220.178.168" dst_port="6576"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.78107,2.08598,010,1 1 1 1 1 1 1 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="185.159.2.249" src_port="52342"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.79303,1.64427,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.220.119.12" dst_ip="38.169.236.233" src_port="64007" dst_port="80"/>
        </slice>
        <from usec="0" sec="1591420325"/>
        <to usec="0" sec="1591420327"/>
    </anomaly>
    <anomaly type="anomalous" value="1.79303,1.64427,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="104.229.135.53" src_port="49774" dst_port="123"/>
        </slice>
        <from usec="0" sec="1591420458"/>
        <to usec="0" sec="1591420488"/>
    </anomaly>
    <anomaly type="anomalous" value="2.1768,1.70153,503,1 1 1 1 0 0 0 0 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="203.90.131.87" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.79303,1.64427,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="188.219.140.142"/>
        </slice>
        <from usec="0" sec="1591419801"/>
        <to usec="0" sec="1591419802"/>
    </anomaly>
    <anomaly type="anomalous" value="1.79303,1.64427,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="54.118.170.132" dst_port="8291"/>
            <filter src_ip="54.118.170.132" dst_port="8728"/>
            <filter src_ip="54.118.170.132" dst_port="22"/>
        </slice>
        <from usec="0" sec="1591420237"/>
        <to usec="0" sec="1591420247"/>
    </anomaly>
    <anomaly type="anomalous" value="2.53561,1.99119,999,1 1 1 1 1 1 0 0 0 1 1 0,ntscUDPOther">
        <slice>
            <filter src_ip="51.48.198.236" src_port="9090" dst_port="5060"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.79303,1.64427,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="139.221.15.53" src_port="63792" dst_port="22"/>
        </slice>
        <from usec="0" sec="1591420215"/>
        <to usec="0" sec="1591420217"/>
    </anomaly>
    <anomaly type="anomalous" value="1.79303,1.64427,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="212.7.61.185" src_port="5381" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1591420260"/>
        <to usec="0" sec="1591420343"/>
    </anomaly>
    <anomaly type="anomalous" value="1.79303,1.64427,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="221.62.250.226" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1591420483"/>
        <to usec="0" sec="1591420487"/>
    </anomaly>
    <anomaly type="anomalous" value="1.79303,1.64427,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.17.128.213" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1591419661"/>
        <to usec="0" sec="1591420451"/>
    </anomaly>
    <anomaly type="anomalous" value="1.79303,1.64427,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="70.69.186.164" dst_port="65353"/>
        </slice>
        <from usec="0" sec="1591419728"/>
        <to usec="0" sec="1591419739"/>
    </anomaly>
    <anomaly type="anomalous" value="1.79303,1.64427,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="193.234.122.80" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1591419665"/>
        <to usec="0" sec="1591420274"/>
    </anomaly>
    <anomaly type="anomalous" value="1.79303,1.64427,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="160.128.214.107" dst_port="8291"/>
            <filter src_ip="160.128.214.107" dst_port="8728"/>
            <filter src_ip="160.128.214.107" dst_port="22"/>
        </slice>
        <from usec="0" sec="1591419923"/>
        <to usec="0" sec="1591419934"/>
    </anomaly>
    <anomaly type="anomalous" value="1.79303,1.64427,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="221.61.143.150" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1591420167"/>
        <to usec="0" sec="1591420169"/>
    </anomaly>
    <anomaly type="anomalous" value="1.79303,1.64427,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="211.37.52.119" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1591420107"/>
        <to usec="0" sec="1591420109"/>
    </anomaly>
    <anomaly type="anomalous" value="1.79303,1.64427,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="218.96.38.141" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1591419887"/>
        <to usec="0" sec="1591419888"/>
    </anomaly>
    <anomaly type="anomalous" value="1.79303,1.64427,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="221.54.152.21" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1591420251"/>
        <to usec="0" sec="1591420253"/>
    </anomaly>
    <anomaly type="anomalous" value="1.79303,1.64427,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="112.67.215.23" dst_port="445"/>
        </slice>
        <from usec="0" sec="1591420348"/>
        <to usec="0" sec="1591420350"/>
    </anomaly>
    <anomaly type="anomalous" value="1.79303,1.64427,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="218.34.192.41" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1591419925"/>
        <to usec="0" sec="1591419928"/>
    </anomaly>
    <anomaly type="anomalous" value="1.79303,1.64427,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="188.92.66.20" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1591419617"/>
        <to usec="0" sec="1591419989"/>
    </anomaly>
    <anomaly type="anomalous" value="1.79303,1.64427,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.39.14.1" dst_port="5351"/>
        </slice>
        <from usec="0" sec="1591419808"/>
        <to usec="0" sec="1591420002"/>
    </anomaly>
    <anomaly type="anomalous" value="1.79303,1.64427,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="24.119.155.237" dst_port="5351"/>
        </slice>
        <from usec="0" sec="1591420016"/>
        <to usec="0" sec="1591420432"/>
    </anomaly>
    <anomaly type="anomalous" value="1.79303,1.64427,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="188.92.68.10" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1591419671"/>
        <to usec="0" sec="1591419750"/>
    </anomaly>
    <anomaly type="anomalous" value="2.29059,1.74733,010,1 1 1 1 0 0 1 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="112.31.92.125" dst_port="1433"/>
            <filter src_ip="194.166.26.109" src_port="52105"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.49437,1.44075,999,1 1 0 1 1 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="112.31.92.125" src_port="1433"/>
            <filter dst_ip="118.101.72.138" src_port="3389"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420448"/>
    </anomaly>
    <anomaly type="anomalous" value="2.08448,1.68465,010,0 0 0 1 1 1 0 0 0 1 1 1,sntscSYN">
        <slice>
            <filter src_ip="157.253.19.212" src_port="32767" dst_port="18082"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.63395,2.03048,010,1 1 1 1 1 1 1 0 0 1 1 0,ntscSYN">
        <slice>
            <filter src_ip="46.21.138.225" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.55726,1.31987,999,0 0 0 1 1 0 0 0 0 1 1 1,ipv4gretun">
        <slice>
            <filter dst_ip="203.90.134.202"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.08448,1.68465,504,0 0 0 1 1 1 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.220.118.56" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.62285,1.44178,504,1 1 0 1 1 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="202.5.95.142" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.79762,1.67183,999,0 0 0 1 1 0 1 1 1 0 0 0,DDoSUDP">
        <slice>
            <filter dst_ip="38.169.236.219" dst_port="53"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420428"/>
    </anomaly>
    <anomaly type="anomalous" value="2.08448,1.68465,504,0 0 0 1 1 1 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.220.220.81" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.94432,2.20227,901,1 1 1 1 1 1 1 1 0 1 1 1,empty">
        <slice/>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.63215,1.61024,011,0 0 0 1 0 0 1 1 1 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="194.166.26.126" dst_port="51608"/>
            <filter dst_ip="194.166.26.105" dst_port="52078"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420411"/>
    </anomaly>
    <anomaly type="anomalous" value="1.36291,1.24094,504,0 0 0 1 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.220.222.226" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.69985,1.63757,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.90.137.86" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420456"/>
    </anomaly>
    <anomaly type="anomalous" value="1.69985,1.63757,020,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="193.119.251.227"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420456"/>
    </anomaly>
    <anomaly type="anomalous" value="1.69985,1.63757,010,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.253.66.250" dst_port="50348"/>
        </slice>
        <from usec="0" sec="1591420365"/>
        <to usec="0" sec="1591420411"/>
    </anomaly>
    <anomaly type="anomalous" value="1.69985,1.63757,999,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.90.135.200" dst_port="53"/>
        </slice>
        <from usec="0" sec="1591420365"/>
        <to usec="0" sec="1591420411"/>
    </anomaly>
    <anomaly type="anomalous" value="1.63215,1.61024,999,0 0 0 1 0 0 1 1 1 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.235.4.136" dst_ip="41.108.110.237"/>
            <filter src_ip="133.235.4.136" dst_ip="41.108.110.232"/>
            <filter src_ip="133.235.4.136" dst_ip="41.108.91.204"/>
            <filter src_ip="133.235.4.136" dst_ip="41.108.91.200"/>
            <filter src_ip="133.235.4.136" src_port="53"/>
            <filter src_ip="133.235.4.252" src_port="53"/>
            <filter dst_ip="41.108.110.237" src_port="53"/>
            <filter dst_ip="41.108.110.232" src_port="53"/>
            <filter dst_ip="41.108.91.204" src_port="53"/>
            <filter dst_ip="41.108.91.200" src_port="53"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420411"/>
    </anomaly>
    <anomaly type="anomalous" value="1.63215,1.61024,999,0 0 0 1 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.90.135.206" dst_port="53"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420411"/>
    </anomaly>
    <anomaly type="anomalous" value="1.69985,1.63757,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.220.177.88" src_port="53"/>
        </slice>
        <from usec="0" sec="1591420365"/>
        <to usec="0" sec="1591420411"/>
    </anomaly>
    <anomaly type="anomalous" value="1.69985,1.63757,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.220.176.189" src_port="53"/>
        </slice>
        <from usec="0" sec="1591420365"/>
        <to usec="0" sec="1591420411"/>
    </anomaly>
    <anomaly type="anomalous" value="1.69985,1.63757,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.220.177.101" src_port="53"/>
        </slice>
        <from usec="0" sec="1591420365"/>
        <to usec="0" sec="1591420411"/>
    </anomaly>
    <anomaly type="anomalous" value="1.69985,1.63757,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.220.176.158" src_port="53"/>
        </slice>
        <from usec="0" sec="1591420365"/>
        <to usec="0" sec="1591420411"/>
    </anomaly>
    <anomaly type="anomalous" value="1.69985,1.63757,020,0 0 0 0 0 0 1 1 1 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="194.166.26.154" dst_port="52092"/>
            <filter dst_ip="194.166.26.154"/>
        </slice>
        <from usec="0" sec="1591420365"/>
        <to usec="0" sec="1591420411"/>
    </anomaly>
    <anomaly type="anomalous" value="1.69985,1.63757,020,0 0 0 0 0 0 1 1 1 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="194.166.30.152" dst_port="52149"/>
            <filter dst_ip="194.166.30.152"/>
        </slice>
        <from usec="0" sec="1591420365"/>
        <to usec="0" sec="1591420411"/>
    </anomaly>
    <anomaly type="anomalous" value="1.63215,1.61024,999,0 0 0 1 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.90.137.116" src_port="6881" dst_port="49995"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420411"/>
    </anomaly>
    <anomaly type="anomalous" value="1.79762,1.67183,901,0 0 0 1 1 0 1 1 1 0 0 0,empty">
        <slice/>
        <from usec="0" sec="1591419603"/>
        <to usec="0" sec="1591420456"/>
    </anomaly>
    <anomaly type="anomalous" value="1.69985,1.63757,020,0 0 0 0 0 0 1 1 1 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="194.166.26.127" dst_port="51621"/>
            <filter dst_ip="194.166.26.127"/>
        </slice>
        <from usec="0" sec="1591420365"/>
        <to usec="0" sec="1591420411"/>
    </anomaly>
    <anomaly type="anomalous" value="1.81384,1.63848,010,0 0 0 0 0 0 1 1 1 1 0 0,poscaSYN">
        <slice>
            <filter src_ip="165.161.246.105" dst_ip="163.220.158.20" src_port="32766"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.69985,1.63757,010,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.253.65.194" dst_port="50348"/>
        </slice>
        <from usec="0" sec="1591420365"/>
        <to usec="0" sec="1591420411"/>
    </anomaly>
    <anomaly type="anomalous" value="1.69985,1.63757,010,0 0 0 0 0 0 1 1 1 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="165.161.252.13" dst_ip="133.253.225.252" src_port="32766"/>
        </slice>
        <from usec="0" sec="1591420365"/>
        <to usec="0" sec="1591420411"/>
    </anomaly>
    <anomaly type="anomalous" value="1.69985,1.63757,010,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.253.65.187" dst_port="50356"/>
        </slice>
        <from usec="0" sec="1591420365"/>
        <to usec="0" sec="1591420411"/>
    </anomaly>
    <anomaly type="anomalous" value="1.63215,1.61024,999,0 0 0 1 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="133.118.1.1" dst_port="53"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420427"/>
    </anomaly>
    <anomaly type="anomalous" value="1.69985,1.63757,999,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.90.142.63" dst_port="53"/>
        </slice>
        <from usec="0" sec="1591420365"/>
        <to usec="0" sec="1591420411"/>
    </anomaly>
    <anomaly type="anomalous" value="1.69985,1.63757,502,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="218.34.127.83" src_port="22"/>
        </slice>
        <from usec="0" sec="1591420365"/>
        <to usec="0" sec="1591420411"/>
    </anomaly>
    <anomaly type="anomalous" value="1.69985,1.63757,010,0 0 0 0 0 0 1 1 1 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="133.253.206.27" src_port="80"/>
        </slice>
        <from usec="0" sec="1591420365"/>
        <to usec="0" sec="1591420411"/>
    </anomaly>
    <anomaly type="anomalous" value="1.69985,1.63757,010,0 0 0 0 0 0 1 1 1 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="167.56.136.237" dst_ip="203.90.129.134" src_port="32766"/>
        </slice>
        <from usec="0" sec="1591420365"/>
        <to usec="0" sec="1591420411"/>
    </anomaly>
    <anomaly type="anomalous" value="1.69985,1.63757,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.220.239.18" dst_port="53"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420456"/>
    </anomaly>
    <anomaly type="anomalous" value="2.62689,2.04238,020,0 0 0 1 1 1 1 1 1 1 1 1,ntscICecrqICecrqdurmterp">
        <slice>
            <filter dst_ip="203.90.141.141"/>
            <filter dst_ip="203.90.141.141"/>
            <filter dst_ip="203.90.130.134"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.27608,1.23029,504,0 0 0 1 1 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="23.197.41.69" dst_ip="163.220.220.35" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.49437,1.44075,010,1 1 0 1 1 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="133.253.215.135"/>
            <filter dst_ip="163.220.49.32"/>
            <filter src_ip="114.83.245.41" dst_ip="133.253.90.19" src_port="60000"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420424"/>
    </anomaly>
    <anomaly type="anomalous" value="2.08448,1.68465,011,0 0 0 1 1 1 0 0 0 1 1 1,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="194.166.26.140" dst_port="51697"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.20304,1.73091,504,0 0 0 1 1 1 1 0 0 1 1 1,mptmp">
        <slice>
            <filter src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.08448,1.68465,504,0 0 0 1 1 1 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="203.90.143.18" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.08448,1.68465,503,0 0 0 1 1 1 0 0 0 1 1 1,ptmpHTTP">
        <slice>
            <filter src_ip="203.90.131.87" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.36291,1.24094,999,0 0 0 1 0 0 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="203.90.141.187"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.36291,1.24094,504,0 0 0 1 0 0 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="202.5.90.97" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.2495,1.75707,503,1 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="203.90.139.81" src_port="80"/>
            <filter src_ip="203.90.134.80" dst_ip="203.90.148.35"/>
            <filter src_ip="203.90.134.80" src_port="80"/>
            <filter dst_ip="203.90.148.35" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.53813,1.30304,504,0 0 0 1 0 0 1 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.220.140.225" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.55726,1.31987,504,0 0 0 1 1 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.220.220.232" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.55726,1.31987,504,0 0 0 1 1 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.220.90.86"/>
            <filter dst_ip="163.220.221.196" src_port="443"/>
            <filter dst_ip="163.220.222.109" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.36291,1.24094,504,0 0 0 1 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.220.122.85" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.53087,1.32772,502,1 0 0 1 1 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_port="22"/>
            <filter src_ip="202.11.24.38" src_port="111"/>
            <filter src_ip="202.11.24.38" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.27608,1.23029,999,0 0 0 1 1 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="203.90.143.97"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.98067,1.52051,503,1 1 0 1 0 0 1 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="203.90.139.81" dst_port="80"/>
            <filter dst_ip="203.90.134.80" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.29059,1.74733,010,1 1 1 1 0 0 1 0 0 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="94.242.160.62" src_port="40407" dst_port="6008"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.4433,1.27621,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="203.90.131.30" dst_port="25"/>
            <filter src_ip="172.113.204.18" dst_ip="203.90.131.30" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.99556,1.53496,999,1 1 0 1 1 0 0 0 0 1 1 1,ipv4gretun">
        <slice>
            <filter src_ip="203.90.134.202" dst_ip="206.34.23.126"/>
            <filter src_ip="203.90.134.202" dst_ip="204.147.209.156"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.81841,1.42686,999,1 0 0 0 0 0 1 0 0 1 1 1,empty">
        <slice>
            <filter src_ip="103.154.252.115" src_port="40424" dst_port="69"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.4433,1.27621,503,0 0 0 0 0 0 0 0 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="163.220.225.219"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.36291,1.24094,504,0 0 0 1 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.220.6.176" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.4433,1.27621,504,0 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="13.152.131.33" dst_ip="163.220.19.88" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.10072,1.69505,999,0 0 0 1 0 0 1 1 1 1 1 1,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.90.135.216" dst_port="53"/>
            <filter dst_ip="203.90.135.200" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.23171,1.75366,503,0 0 0 1 1 0 1 1 1 1 1 1,mptmp">
        <slice>
            <filter dst_ip="40.169.70.90" dst_port="443"/>
            <filter dst_ip="38.169.236.226" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.4433,1.27621,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.220.222.177" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.4706,1.98566,999,0 0 0 1 1 1 1 1 1 1 1 0,mptmp">
        <slice>
            <filter dst_ip="163.220.221.40"/>
            <filter dst_ip="163.220.3.165" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.55726,1.31987,999,0 0 0 1 1 0 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="203.90.129.186" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.08448,1.68465,503,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.220.119.15"/>
            <filter src_ip="38.169.236.224" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.36291,1.24094,503,0 0 0 1 0 0 0 0 0 1 1 1,mptplaHTTP">
        <slice>
            <filter dst_ip="163.220.220.105" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.2495,1.75707,999,1 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="203.90.141.156"/>
            <filter dst_ip="203.90.141.156"/>
            <filter dst_ip="203.90.141.168"/>
            <filter dst_ip="203.90.141.168"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.4433,1.27621,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.220.223.187" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.08448,1.68465,504,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="162.18.178.22" dst_port="443"/>
            <filter dst_ip="13.235.135.244" dst_port="443"/>
            <filter dst_ip="162.18.178.24" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.4433,1.27621,503,0 0 0 0 0 0 0 0 0 1 1 1,alphflHTTP">
        <slice>
            <filter src_ip="23.4.172.139" dst_ip="133.118.11.1" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.4433,1.27621,999,0 0 0 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.220.221.30"/>
            <filter dst_ip="163.220.220.125" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.36291,1.24094,504,0 0 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.36291,1.24094,504,0 0 0 1 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.220.222.200" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.36291,1.24094,504,0 0 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.220.113.200" src_port="443"/>
            <filter dst_ip="163.220.221.198" src_port="443"/>
            <filter dst_ip="163.220.113.49" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.08448,1.68465,503,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.220.119.16"/>
            <filter src_ip="38.169.236.233" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.4433,1.27621,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="46.208.154.246" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.4433,1.27621,504,0 0 0 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="119.189.213.17" src_port="443"/>
            <filter dst_ip="163.220.7.132" src_port="443"/>
            <filter dst_ip="163.220.7.180" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.08448,1.68465,504,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.33969,1.24829,010,0 0 0 0 0 0 1 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="203.90.131.85" dst_ip="24.19.44.225"/>
            <filter src_ip="203.90.131.85" src_port="80"/>
            <filter src_ip="203.90.131.85" src_port="443"/>
            <filter dst_ip="24.19.44.225" src_port="80"/>
            <filter dst_ip="24.19.44.225" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.58237,1.40291,020,0 0 0 1 0 0 1 1 0 1 1 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="89.21.176.14"/>
            <filter dst_ip="80.162.181.132"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.36291,1.24094,504,0 0 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="163.220.175.189" dst_port="443"/>
            <filter src_ip="163.220.97.15" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
