<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="anomalous" value="2.25962,2.02366,010,1 1 1 1 1 0 1 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="195.181.128.180" src_port="46010"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.56812,3.11936,504,1 1 1 1 1 1 1 0 0 1 1 1,ptmpla">
        <slice>
            <filter src_ip="133.228.75.100" dst_ip="3.157.181.165" dst_port="443"/>
            <filter src_ip="133.228.75.100" dst_ip="52.135.205.210" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.49035,3.07921,999,1 1 0 1 1 1 1 0 0 1 1 1,ntscUDPOther">
        <slice>
            <filter src_ip="5.73.45.199" dst_port="389"/>
            <filter src_ip="203.77.86.61" src_port="1901" dst_port="1900"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.25962,2.02366,010,1 1 1 1 1 0 1 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="195.150.86.179" src_port="46430"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.02717,1.96153,999,1 1 1 1 1 0 0 0 0 1 1 1,ntscUDPOther">
        <slice>
            <filter src_ip="51.176.153.11" src_port="9090" dst_port="5060"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.34456,3.03874,504,1 1 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.26.229.165" src_port="443"/>
            <filter src_ip="18.179.234.1" dst_ip="163.26.112.94" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.07109,1.93451,999,1 1 1 1 0 0 1 0 0 1 1 1,ntscUDPOther">
        <slice>
            <filter src_ip="60.111.108.89" src_port="56071" dst_port="123"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.02717,1.96153,999,1 1 1 1 1 0 0 0 0 1 1 1,ntscUDPOther">
        <slice>
            <filter src_ip="103.142.140.184" src_port="5290" dst_port="5071"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.02717,1.96153,010,1 1 1 1 1 0 0 0 0 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="125.160.218.66" dst_port="1302"/>
            <filter src_ip="125.160.218.66" dst_port="5900"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.56812,3.11936,011,1 1 1 1 1 1 1 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="121.36.163.221" dst_port="6379"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.13472,1.9612,504,1 1 0 1 1 0 1 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="52.107.253.9" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.23805,3.02928,504,0 0 0 1 1 1 0 0 0 1 1 1,mptpla">
        <slice>
            <filter dst_ip="163.26.24.107" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.38843,3.06988,999,0 0 0 1 1 1 1 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="203.77.78.230"/>
            <filter src_ip="175.130.159.242" dst_ip="203.77.71.120" dst_port="2222"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.03963,1.93585,999,1 0 0 1 1 0 1 0 0 1 1 1,mptpla">
        <slice>
            <filter src_ip="203.77.71.101" dst_ip="52.30.78.89" src_port="1194"/>
            <filter src_ip="78.120.43.21" dst_ip="52.30.78.89" src_port="1194"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="7.4479,6.16346,999,1 0 0 0 0 0 1 1 1 1 1 0,mptpla">
        <slice>
            <filter src_ip="52.30.78.89" dst_ip="78.120.43.21" dst_port="1194"/>
            <filter src_ip="95.67.206.153" dst_ip="78.120.43.21" dst_port="1194"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="7.36907,6.1734,999,0 0 0 0 0 0 1 1 1 0 0 0,alphfl">
        <slice>
            <filter src_ip="46.95.239.3" dst_ip="203.77.71.101" dst_port="1194"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596862846"/>
    </anomaly>
    <anomaly type="anomalous" value="3.42564,3.07942,504,1 1 1 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.26.112.94" src_port="443"/>
            <filter src_ip="203.77.86.61" src_port="48919" dst_port="29809"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.01183,1.92389,010,1 1 1 1 1 0 1 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="185.158.206.140" src_port="40704"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.02717,1.96153,503,1 1 1 1 1 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_port="80"/>
            <filter src_ip="23.36.138.181" dst_ip="163.26.20.67" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="58.33.8.163" dst_port="8088"/>
            <filter src_ip="58.33.8.163" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1596863171"/>
        <to usec="0" sec="1596863357"/>
    </anomaly>
    <anomaly type="suspicious" value="1.70422,1.80645,999,1 1 0 0 0 0 0 0 0 1 1 1,ipv4gretun">
        <slice>
            <filter src_ip="206.0.250.13" dst_ip="203.77.73.16"/>
            <filter src_ip="204.65.223.225" dst_ip="203.77.73.16"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="154.75.113.1" dst_port="8291"/>
            <filter src_ip="154.75.113.1" dst_port="22"/>
        </slice>
        <from usec="0" sec="1596862894"/>
        <to usec="0" sec="1596862908"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="123.78.93.122" dst_port="8291"/>
            <filter src_ip="123.78.93.122" dst_port="8728"/>
            <filter src_ip="123.78.93.122" dst_port="22"/>
        </slice>
        <from usec="0" sec="1596863648"/>
        <to usec="0" sec="1596863659"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="218.195.162.162" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596863302"/>
        <to usec="0" sec="1596863304"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="118.4.73.18" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596862968"/>
        <to usec="0" sec="1596863282"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="113.238.107.21" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596863427"/>
        <to usec="0" sec="1596863428"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="119.251.165.95" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596863456"/>
        <to usec="0" sec="1596863461"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="183.80.9.245" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596863408"/>
        <to usec="0" sec="1596863410"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="116.245.77.62" dst_port="3306"/>
        </slice>
        <from usec="0" sec="1596863459"/>
        <to usec="0" sec="1596863596"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="114.216.177.52" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596863646"/>
        <to usec="0" sec="1596863658"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="112.106.26.76" dst_port="445"/>
        </slice>
        <from usec="0" sec="1596863654"/>
        <to usec="0" sec="1596863657"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="123.20.143.77" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596863590"/>
        <to usec="0" sec="1596863592"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="183.238.52.198" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596863417"/>
        <to usec="0" sec="1596863419"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="61.187.7.89" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596863412"/>
        <to usec="0" sec="1596863413"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="91.227.23.193" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1596863525"/>
        <to usec="0" sec="1596863574"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="193.111.186.62" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1596863126"/>
        <to usec="0" sec="1596863247"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="222.176.170.129" dst_port="445"/>
        </slice>
        <from usec="0" sec="1596862918"/>
        <to usec="0" sec="1596862921"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="113.0.219.3" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596863562"/>
        <to usec="0" sec="1596863563"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="221.16.19.132" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596863692"/>
        <to usec="0" sec="1596863694"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="49.148.201.132" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596863257"/>
        <to usec="0" sec="1596863262"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="218.158.139.121" dst_port="1433"/>
            <filter src_ip="218.158.139.121" dst_port="445"/>
        </slice>
        <from usec="0" sec="1596863508"/>
        <to usec="0" sec="1596863514"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="60.231.65.110" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596862853"/>
        <to usec="0" sec="1596862857"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="89.57.80.58" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596863471"/>
        <to usec="0" sec="1596863475"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="18.182.252.157" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596863672"/>
        <to usec="0" sec="1596863675"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="113.142.191.173" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596863296"/>
        <to usec="0" sec="1596863300"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="113.129.120.92" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596863287"/>
        <to usec="0" sec="1596863292"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="59.82.14.141" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596863574"/>
        <to usec="0" sec="1596863578"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="221.16.39.156" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596863388"/>
        <to usec="0" sec="1596863391"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="59.84.164.84" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596862877"/>
        <to usec="0" sec="1596862881"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="117.30.80.153" dst_port="445"/>
        </slice>
        <from usec="0" sec="1596863392"/>
        <to usec="0" sec="1596863394"/>
    </anomaly>
    <anomaly type="suspicious" value="1.57144,1.86102,502,1 1 1 1 1 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="222.66.174.49" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="113.137.123.201" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596863003"/>
        <to usec="0" sec="1596863007"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="182.101.202.200" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596863057"/>
        <to usec="0" sec="1596863059"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="106.234.73.198" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596863651"/>
        <to usec="0" sec="1596863653"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="222.189.202.27" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596862857"/>
        <to usec="0" sec="1596862858"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="123.72.139.231" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596863155"/>
        <to usec="0" sec="1596863157"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.225.64.3" dst_port="5351"/>
        </slice>
        <from usec="0" sec="1596863058"/>
        <to usec="0" sec="1596863641"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.225.64.7" dst_port="5351"/>
        </slice>
        <from usec="0" sec="1596863021"/>
        <to usec="0" sec="1596863634"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="58.18.3.171" src_port="1433"/>
        </slice>
        <from usec="0" sec="1596862973"/>
        <to usec="0" sec="1596862979"/>
    </anomaly>
    <anomaly type="suspicious" value="1.85829,1.87407,999,1 1 1 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.26.6.86"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.54751,1.76588,504,1 1 1 0 0 0 0 0 0 1 1 0,mptpla">
        <slice>
            <filter src_ip="163.26.68.106" dst_ip="23.111.54.226" dst_port="443"/>
            <filter src_ip="163.26.132.95" dst_ip="23.111.54.226" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="82.120.63.146" dst_port="8291"/>
            <filter src_ip="82.120.63.146" dst_port="8728"/>
            <filter src_ip="82.120.63.146" dst_port="22"/>
        </slice>
        <from usec="0" sec="1596863377"/>
        <to usec="0" sec="1596863390"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.201.129.235" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1596862945"/>
        <to usec="0" sec="1596863426"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="188.7.234.95" src_port="5066" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1596863160"/>
        <to usec="0" sec="1596863161"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="51.176.246.254" src_port="4040" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1596863060"/>
        <to usec="0" sec="1596863265"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="84.27.241.125" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596863624"/>
        <to usec="0" sec="1596863629"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="27.62.20.242" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596863056"/>
        <to usec="0" sec="1596863058"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="202.78.65.59" dst_port="445"/>
        </slice>
        <from usec="0" sec="1596863484"/>
        <to usec="0" sec="1596863486"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="124.4.26.71" dst_port="445"/>
        </slice>
        <from usec="0" sec="1596863233"/>
        <to usec="0" sec="1596863236"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="112.66.11.20" dst_port="8291"/>
            <filter src_ip="112.66.11.20" dst_port="8728"/>
            <filter src_ip="112.66.11.20" dst_port="22"/>
        </slice>
        <from usec="0" sec="1596863529"/>
        <to usec="0" sec="1596863539"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="116.21.135.156" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596863216"/>
        <to usec="0" sec="1596863217"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="118.179.201.161" dst_port="8291"/>
            <filter src_ip="118.179.201.161" dst_port="8728"/>
            <filter src_ip="118.179.201.161" dst_port="22"/>
        </slice>
        <from usec="0" sec="1596863271"/>
        <to usec="0" sec="1596863281"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="112.10.187.183" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596863608"/>
        <to usec="0" sec="1596863611"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="61.190.39.122" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596863233"/>
        <to usec="0" sec="1596863235"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="49.221.224.199" dst_port="445"/>
        </slice>
        <from usec="0" sec="1596863591"/>
        <to usec="0" sec="1596863593"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="182.236.25.211" dst_port="8291"/>
            <filter src_ip="182.236.25.211" dst_port="8728"/>
            <filter src_ip="182.236.25.211" dst_port="22"/>
        </slice>
        <from usec="0" sec="1596862949"/>
        <to usec="0" sec="1596862968"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="42.227.31.19" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596863016"/>
        <to usec="0" sec="1596863022"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="118.15.179.240" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596862981"/>
        <to usec="0" sec="1596862982"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="221.153.225.132" src_port="1433"/>
        </slice>
        <from usec="0" sec="1596863537"/>
        <to usec="0" sec="1596863539"/>
    </anomaly>
    <anomaly type="suspicious" value="1.79748,1.82989,503,1 1 1 1 0 0 1 0 0 1 1 0,mptmp">
        <slice>
            <filter dst_ip="202.248.238.97" dst_port="53"/>
            <filter src_ip="32.228.254.195" dst_ip="202.248.194.48" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.28566,1.76367,503,1 1 1 1 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="77.11.110.4" dst_port="80"/>
            <filter src_ip="77.11.110.4" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="115.62.228.201" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596863125"/>
        <to usec="0" sec="1596863126"/>
    </anomaly>
    <anomaly type="suspicious" value="1.7467,1.85844,999,1 1 1 1 1 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter dst_ip="194.197.54.145" src_port="2525"/>
            <filter dst_ip="110.211.144.34" src_port="3389"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.81464,1.86942,010,1 1 1 1 0 0 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="203.77.86.61" src_port="49317"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.53202,1.774,503,1 0 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="203.77.69.64" src_port="80"/>
            <filter src_ip="203.77.73.168" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.49481,1.76094,010,1 1 1 1 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter dst_port="22"/>
            <filter src_ip="31.134.192.152" dst_port="1433"/>
            <filter src_ip="31.134.192.152" dst_port="445"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.81464,1.86942,999,1 1 1 1 0 0 0 0 0 1 1 1,ipv4gretun">
        <slice>
            <filter src_ip="203.77.73.16" dst_ip="206.0.250.13"/>
            <filter src_ip="203.77.73.16" dst_ip="204.65.223.225"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.28566,1.76367,010,1 1 1 1 0 0 0 0 0 1 0 0,ntscSYN">
        <slice>
            <filter src_ip="162.243.128.208" dst_port="27019"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.52665,1.89081,999,0 1 0 1 1 0 1 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="89.57.95.86" dst_port="30301"/>
        </slice>
        <from usec="0" sec="1596862811"/>
        <to usec="0" sec="1596863656"/>
    </anomaly>
    <anomaly type="suspicious" value="1.82854,1.84246,020,1 0 0 1 0 0 1 0 0 1 1 1,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="203.77.86.61"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.35864,1.69394,504,1 1 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="202.244.124.50" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.69099,1.88184,504,0 0 0 1 1 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.26.239.130" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="218.134.71.76" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596863393"/>
        <to usec="0" sec="1596863394"/>
    </anomaly>
    <anomaly type="suspicious" value="1.81464,1.86942,999,1 1 1 1 0 0 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="170.47.81.15" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="87.195.50.18" dst_port="22"/>
        </slice>
        <from usec="0" sec="1596863439"/>
        <to usec="0" sec="1596863700"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="132.101.98.156" dst_port="8291"/>
            <filter src_ip="132.101.98.156" dst_port="22"/>
            <filter src_ip="132.101.98.156" dst_port="8728"/>
        </slice>
        <from usec="0" sec="1596863378"/>
        <to usec="0" sec="1596863388"/>
    </anomaly>
    <anomaly type="suspicious" value="1.24889,1.75192,999,0 0 0 0 0 0 1 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.248.194.56" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.39058,1.86451,010,0 0 0 1 1 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="89.57.82.91" dst_port="85"/>
        </slice>
        <from usec="0" sec="1596862839"/>
        <to usec="0" sec="1596863618"/>
    </anomaly>
    <anomaly type="suspicious" value="1.39058,1.86451,999,0 0 0 1 1 0 1 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="203.77.86.61" src_port="1901" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863609"/>
    </anomaly>
    <anomaly type="suspicious" value="1.39058,1.86451,010,0 0 0 1 1 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="51.81.53.26" src_port="32767" dst_port="8545"/>
        </slice>
        <from usec="0" sec="1596862828"/>
        <to usec="0" sec="1596863627"/>
    </anomaly>
    <anomaly type="suspicious" value="1.39058,1.86451,999,0 0 0 1 1 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.77.71.49" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863656"/>
    </anomaly>
    <anomaly type="suspicious" value="1.36524,1.74007,999,1 0 0 0 0 0 1 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="203.77.66.152" dst_ip="69.166.196.53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.40746,1.74419,052,0 0 0 1 0 0 1 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="133.228.157.35" src_port="22"/>
            <filter dst_ip="203.77.86.61" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.13518,1.6593,999,1 0 0 1 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="194.67.75.34"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.24889,1.75192,504,0 0 0 0 0 0 1 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.26.235.126" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.34201,1.77412,503,0 0 0 1 1 0 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.77.69.70"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.42931,1.78562,504,0 0 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="133.228.249.47" src_port="443"/>
            <filter src_ip="163.26.180.218" src_port="443"/>
            <filter src_ip="133.228.249.47" dst_ip="132.24.253.66" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.18297,1.74694,010,0 0 0 1 0 0 1 0 0 1 0 0,poscaSYN">
        <slice>
            <filter src_ip="161.220.160.21" dst_ip="133.109.231.114" src_port="32766"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.24889,1.75192,999,0 0 0 0 0 0 1 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="116.79.87.152" dst_ip="133.248.229.167"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.67256,1.84257,010,0 0 0 1 1 0 1 0 0 1 1 0,ntscSYN">
        <slice>
            <filter src_ip="162.243.128.208" dst_port="27019"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.34201,1.77412,504,0 0 0 1 1 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter dst_ip="163.26.230.176"/>
            <filter dst_ip="163.26.2.152" src_port="443"/>
            <filter dst_ip="163.26.103.23" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.24889,1.75192,504,0 0 0 0 0 0 1 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="104.141.8.104" dst_ip="163.26.68.133" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23736,1.78876,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="203.77.86.61" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596863066"/>
        <to usec="0" sec="1596863068"/>
    </anomaly>
    <anomaly type="suspicious" value="1.24889,1.75192,010,0 0 0 0 0 0 1 0 0 1 0 0,poscaSYN">
        <slice>
            <filter src_ip="161.220.89.10" dst_ip="203.77.77.254" src_port="32766"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.48433,1.79049,502,0 0 0 0 0 0 0 0 0 1 1 1,mptpla">
        <slice>
            <filter src_ip="203.77.72.27" dst_ip="203.77.86.61" src_port="53"/>
            <filter src_ip="203.77.78.203" dst_ip="203.77.86.61" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.48433,1.79049,999,0 0 0 0 0 0 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="163.26.6.86"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.48433,1.79049,504,0 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="104.204.139.90" dst_ip="163.26.64.208" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.48433,1.79049,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.26.117.36" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.48433,1.79049,504,0 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="174.34.77.5" dst_ip="163.26.87.102" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.42931,1.78562,504,0 0 0 1 0 0 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="163.26.20.67" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.76114,1.83131,999,1 0 0 1 1 0 1 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="78.120.43.21" dst_ip="95.67.206.153"/>
            <filter src_ip="203.77.71.101" dst_ip="95.67.206.153"/>
            <filter src_ip="203.77.71.101" src_port="1194"/>
            <filter dst_ip="95.67.206.153" src_port="1194"/>
            <filter src_ip="78.120.43.21" dst_ip="52.30.78.89" src_port="1194"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.69099,1.88184,504,0 0 0 1 1 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.26.58.61" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.69099,1.88184,504,0 0 0 1 1 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.26.1.201" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.42931,1.78562,504,0 0 0 1 0 0 0 0 0 1 1 1,ptmpla">
        <slice>
            <filter src_ip="78.120.43.21" dst_ip="163.26.58.29" src_port="443" dst_port="60163"/>
            <filter src_ip="78.120.43.21" dst_ip="163.26.58.29" src_port="443" dst_port="60162"/>
            <filter src_ip="78.120.43.21" dst_ip="163.26.58.29" src_port="443" dst_port="60161"/>
            <filter src_ip="78.120.43.21" dst_ip="163.26.230.53" src_port="443" dst_port="59225"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.28206,1.80162,503,1 0 0 0 0 0 0 0 0 0 0 1,ptmpHTTP">
        <slice>
            <filter src_ip="38.98.226.152" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.88694,1.89703,504,1 1 0 1 1 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.26.14.18" src_port="443"/>
            <filter dst_ip="163.26.3.85" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.48433,1.79049,504,0 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="92.188.57.84" dst_ip="163.26.228.84" src_port="443" dst_port="53363"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.42931,1.78562,504,0 0 0 1 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.26.229.192" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.48433,1.79049,504,0 0 0 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.26.228.229" src_port="443"/>
            <filter dst_ip="163.26.17.142" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.48433,1.79049,504,0 0 0 0 0 0 0 0 0 1 1 1,mptpla">
        <slice>
            <filter dst_ip="163.26.1.18" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.42931,1.78562,011,0 0 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="195.181.128.180" dst_port="46010"/>
            <filter dst_ip="92.188.57.82" dst_port="56038"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.48433,1.79049,503,0 0 0 0 0 0 0 0 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="203.77.73.168" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.42931,1.78562,504,0 0 0 1 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="203.77.66.45"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.81464,1.86942,999,1 1 1 1 0 0 0 0 0 1 1 1,ntscUDPOther">
        <slice>
            <filter src_ip="192.19.126.244" src_port="5080" dst_port="5090"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.53202,1.774,503,1 0 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="203.77.69.64" dst_port="80"/>
            <filter dst_ip="203.77.73.168" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.48433,1.79049,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="203.77.81.134"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.48433,1.79049,999,0 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="183.9.171.191" dst_ip="133.248.192.1" dst_port="1431"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.48433,1.79049,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.26.21.91" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
