<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="notice" value="0.764995,1.68879,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="38.98.226.153" dst_ip="163.26.2.181" src_port="80" dst_port="63793" proto="tcp"/>
        </slice>
        <from usec="0" sec="1596863439"/>
        <to usec="0" sec="1596863440"/>
    </anomaly>
    <anomaly type="notice" value="0.764995,1.68879,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="114.30.52.209" dst_ip="163.26.231.150" src_port="9000" dst_port="49649" proto="udp"/>
        </slice>
        <from usec="0" sec="1596863235"/>
        <to usec="0" sec="1596863554"/>
    </anomaly>
    <anomaly type="notice" value="0.764995,1.68879,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.244.127.151" dst_ip="126.200.78.249" src_port="443" dst_port="26923" proto="tcp"/>
        </slice>
        <from usec="0" sec="1596863572"/>
        <to usec="0" sec="1596863574"/>
    </anomaly>
    <anomaly type="notice" value="0.764995,1.68879,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.244.127.12" dst_ip="13.84.133.149" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1596862987"/>
        <to usec="0" sec="1596863631"/>
    </anomaly>
    <anomaly type="notice" value="0.764995,1.68879,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.26.120.17" dst_ip="123.178.201.125" src_port="2222" proto="tcp"/>
        </slice>
        <from usec="0" sec="1596863170"/>
        <to usec="0" sec="1596863172"/>
    </anomaly>
    <anomaly type="notice" value="0.764995,1.68879,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="32.228.254.195" dst_ip="203.77.72.29" dst_port="53"/>
        </slice>
        <from usec="0" sec="1596863558"/>
        <to usec="0" sec="1596863572"/>
    </anomaly>
    <anomaly type="notice" value="0.764995,1.68879,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="174.36.58.0"/>
        </slice>
        <from usec="0" sec="1596863531"/>
        <to usec="0" sec="1596863532"/>
    </anomaly>
    <anomaly type="notice" value="0.764995,1.68879,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="197.133.162.206" dst_port="445" proto="tcp"/>
        </slice>
        <from usec="0" sec="1596863193"/>
        <to usec="0" sec="1596863199"/>
    </anomaly>
    <anomaly type="notice" value="0.764995,1.68879,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="118.182.98.171" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1596862987"/>
        <to usec="0" sec="1596862997"/>
    </anomaly>
    <anomaly type="notice" value="0.764995,1.68879,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="124.116.97.211" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1596862931"/>
        <to usec="0" sec="1596862936"/>
    </anomaly>
    <anomaly type="notice" value="0.764995,1.68879,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="38.98.226.151" dst_ip="163.26.6.117" src_port="80" dst_port="55105" proto="tcp"/>
        </slice>
        <from usec="0" sec="1596863184"/>
        <to usec="0" sec="1596863185"/>
    </anomaly>
    <anomaly type="notice" value="0.764995,1.68879,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="91.234.100.234"/>
        </slice>
        <from usec="0" sec="1596863167"/>
        <to usec="0" sec="1596863169"/>
    </anomaly>
    <anomaly type="notice" value="0.764995,1.68879,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="103.142.140.184"/>
        </slice>
        <from usec="0" sec="1596863603"/>
        <to usec="0" sec="1596863605"/>
    </anomaly>
    <anomaly type="notice" value="0.991042,1.71778,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="110.93.124.67" src_port="20001" dst_port="445"/>
        </slice>
        <from usec="0" sec="1596863058"/>
        <to usec="0" sec="1596863431"/>
    </anomaly>
    <anomaly type="notice" value="0.991042,1.71778,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="52.30.78.89" dst_port="4899"/>
        </slice>
        <from usec="0" sec="1596863360"/>
        <to usec="0" sec="1596863361"/>
    </anomaly>
    <anomaly type="notice" value="0.823408,1.72978,010,0 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="197.133.162.206" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1596863196"/>
        <to usec="0" sec="1596863199"/>
    </anomaly>
    <anomaly type="notice" value="0.991042,1.71778,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="203.43.80.180" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596863014"/>
        <to usec="0" sec="1596863022"/>
    </anomaly>
    <anomaly type="notice" value="0.991042,1.71778,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="27.146.78.31" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596863270"/>
        <to usec="0" sec="1596863271"/>
    </anomaly>
    <anomaly type="notice" value="0.991042,1.71778,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="58.56.58.131" dst_port="445"/>
        </slice>
        <from usec="0" sec="1596863115"/>
        <to usec="0" sec="1596863116"/>
    </anomaly>
    <anomaly type="notice" value="0.991042,1.71778,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="183.28.63.137" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596862810"/>
        <to usec="0" sec="1596862812"/>
    </anomaly>
    <anomaly type="notice" value="0.991042,1.71778,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="59.86.253.133" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596863629"/>
        <to usec="0" sec="1596863637"/>
    </anomaly>
    <anomaly type="notice" value="0.991042,1.71778,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="27.35.77.168" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596862987"/>
        <to usec="0" sec="1596862991"/>
    </anomaly>
    <anomaly type="notice" value="0.823408,1.72978,010,0 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="112.106.4.106" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596862849"/>
        <to usec="0" sec="1596862850"/>
    </anomaly>
    <anomaly type="notice" value="0.991042,1.71778,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="103.206.203.175" dst_port="445"/>
        </slice>
        <from usec="0" sec="1596863570"/>
        <to usec="0" sec="1596863572"/>
    </anomaly>
    <anomaly type="notice" value="0.991042,1.71778,999,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="37.244.76.92" src_port="3389"/>
        </slice>
        <from usec="0" sec="1596863467"/>
        <to usec="0" sec="1596863469"/>
    </anomaly>
    <anomaly type="notice" value="0.991042,1.71778,010,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="52.139.154.84" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596863172"/>
        <to usec="0" sec="1596863173"/>
    </anomaly>
    <anomaly type="notice" value="0.991042,1.71778,010,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="58.212.84.111" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596863172"/>
        <to usec="0" sec="1596863173"/>
    </anomaly>
    <anomaly type="notice" value="0.991042,1.71778,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="58.212.84.108" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596863172"/>
        <to usec="0" sec="1596863173"/>
    </anomaly>
    <anomaly type="notice" value="0.991042,1.71778,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="27.35.77.162" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596862987"/>
        <to usec="0" sec="1596862991"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="208.140.76.46"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596862895"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="78.120.43.21"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863538"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.44.249"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596862906"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.26.78.207"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596862893"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.26.2.113"/>
        </slice>
        <from usec="0" sec="1596862804"/>
        <to usec="0" sec="1596862904"/>
    </anomaly>
    <anomaly type="notice" value="0.992207,1.67171,502,0 0 0 1 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="49.159.128.4" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.26.40.120" src_port="443"/>
        </slice>
        <from usec="0" sec="1596862807"/>
        <to usec="0" sec="1596863534"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.77.126.248"/>
        </slice>
        <from usec="0" sec="1596862812"/>
        <to usec="0" sec="1596862907"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="46.20.161.102"/>
        </slice>
        <from usec="0" sec="1596862813"/>
        <to usec="0" sec="1596862835"/>
    </anomaly>
    <anomaly type="notice" value="1.17078,1.78389,999,1 1 1 1 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="51.184.102.189" src_port="6083" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1596862802"/>
        <to usec="0" sec="1596863533"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863538"/>
    </anomaly>
    <anomaly type="notice" value="1.10428,1.77682,020,0 0 0 1 1 0 0 0 0 1 0 0,ttl_error">
        <slice>
            <filter src_ip="203.77.77.32"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="203.77.79.9"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596862998"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.248.226.17"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596862998"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.77.86.61" src_port="11111" dst_port="46785"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596862998"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="222.66.174.29"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596862928"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="38.98.226.155"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596862960"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="139.173.165.72"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596862996"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="223.155.6.133" dst_ip="133.248.120.35" src_port="53"/>
            <filter src_ip="223.153.58.69" dst_ip="133.248.120.35" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596862997"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="210.152.177.214"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596862998"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="64.122.63.154" dst_ip="203.77.64.99" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596862997"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="69.163.104.20"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596862998"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="54.240.249.1"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863264"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="5.192.104.248"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596862996"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="114.46.174.101"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596862998"/>
    </anomaly>
    <anomaly type="notice" value="0.7505,1.67977,004,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.44.222" dst_port="445"/>
            <filter dst_ip="202.25.44.222" dst_port="5200"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="194.67.75.34" dst_ip="133.248.98.251"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596862998"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="194.67.75.34" dst_ip="133.248.98.255"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596862996"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="119.33.87.142"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596862996"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="64.48.247.20"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596862998"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="203.77.86.61"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596862998"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="38.98.226.176" dst_ip="163.26.128.225" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596862998"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="34.229.226.145"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596862903"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="192.99.228.75"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596862998"/>
    </anomaly>
    <anomaly type="notice" value="0.63477,1.67458,999,0 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter dst_ip="163.26.68.165"/>
            <filter src_ip="51.217.225.116" src_port="55262" dst_port="15041"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="178.89.221.27"/>
        </slice>
        <from usec="0" sec="1596862804"/>
        <to usec="0" sec="1596862998"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="78.120.43.21"/>
        </slice>
        <from usec="0" sec="1596862806"/>
        <to usec="0" sec="1596862998"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="51.163.154.76"/>
        </slice>
        <from usec="0" sec="1596862807"/>
        <to usec="0" sec="1596862997"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="208.132.191.57"/>
        </slice>
        <from usec="0" sec="1596862813"/>
        <to usec="0" sec="1596863535"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="5.69.91.66"/>
        </slice>
        <from usec="0" sec="1596862815"/>
        <to usec="0" sec="1596862998"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="40.253.164.25"/>
        </slice>
        <from usec="0" sec="1596862818"/>
        <to usec="0" sec="1596862851"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,020,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter dst_ip="163.26.0.102"/>
        </slice>
        <from usec="0" sec="1596862824"/>
        <to usec="0" sec="1596862862"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="148.151.88.11"/>
        </slice>
        <from usec="0" sec="1596862841"/>
        <to usec="0" sec="1596862978"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="14.255.168.50"/>
        </slice>
        <from usec="0" sec="1596862854"/>
        <to usec="0" sec="1596862985"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="126.232.27.91"/>
        </slice>
        <from usec="0" sec="1596862883"/>
        <to usec="0" sec="1596862953"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="163.27.6.81"/>
        </slice>
        <from usec="0" sec="1596862932"/>
        <to usec="0" sec="1596862982"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="126.37.47.145"/>
        </slice>
        <from usec="0" sec="1596862953"/>
        <to usec="0" sec="1596862961"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="185.250.0.140"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863088"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="31.251.43.125"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863006"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="106.179.82.52"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863085"/>
    </anomaly>
    <anomaly type="notice" value="1.17078,1.78389,999,1 1 1 1 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.225.64.6" dst_port="5351"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863689"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="139.173.87.156"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863087"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.248.93.228"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863078"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,502,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.77.70.175" dst_port="22"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863088"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.77.86.61" src_port="13416" dst_port="23"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863086"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="159.59.50.227" src_port="54584" dst_port="3172"/>
        </slice>
        <from usec="0" sec="1596862803"/>
        <to usec="0" sec="1596863087"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.248.111.224"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596863081"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="38.98.226.134" dst_port="53"/>
        </slice>
        <from usec="0" sec="1596862803"/>
        <to usec="0" sec="1596863088"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="98.253.105.63"/>
        </slice>
        <from usec="0" sec="1596862805"/>
        <to usec="0" sec="1596863086"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="185.152.56.179"/>
        </slice>
        <from usec="0" sec="1596862810"/>
        <to usec="0" sec="1596863083"/>
    </anomaly>
    <anomaly type="notice" value="0.63477,1.67458,504,0 0 0 1 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="163.26.219.199" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="139.131.45.42"/>
        </slice>
        <from usec="0" sec="1596862813"/>
        <to usec="0" sec="1596863049"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="223.153.58.69" dst_ip="133.248.92.30" src_port="53"/>
            <filter src_ip="223.155.6.133" dst_ip="133.248.92.30" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862814"/>
        <to usec="0" sec="1596863535"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="174.141.95.215"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863178"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,004,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="194.67.75.34" dst_ip="133.248.98.230"/>
            <filter src_ip="117.149.55.28" dst_ip="133.248.98.230" dst_port="445"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863177"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="175.130.159.242"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863448"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="89.57.80.58" dst_port="51853"/>
            <filter dst_ip="89.57.80.58"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863178"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="5.69.91.66" dst_ip="133.248.98.163" dst_port="22"/>
        </slice>
        <from usec="0" sec="1596862815"/>
        <to usec="0" sec="1596863536"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="187.15.8.155"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863176"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="45.71.182.244" dst_ip="133.248.98.170" dst_port="23"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863538"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="192.92.86.58"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863178"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="93.86.167.109"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863178"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.73.164.244"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863537"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="59.68.99.154" src_port="6992" dst_port="40495"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863178"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="34.249.171.187"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863173"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="106.229.18.34"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863178"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.129.8.100" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863178"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.77.78.253" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863352"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="223.155.6.133" dst_ip="133.248.207.81" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863178"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.157.152.252" src_port="6409" dst_port="56927"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863178"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="45.71.182.244" dst_ip="133.248.98.190"/>
            <filter src_ip="45.71.182.244" dst_port="23"/>
            <filter dst_ip="133.248.98.190" dst_port="23"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863538"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="123.239.237.147"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596863177"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.26.128.200" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596863178"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="49.159.87.24"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596863172"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.158.208.79"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596863161"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="52.163.14.152"/>
        </slice>
        <from usec="0" sec="1596862802"/>
        <to usec="0" sec="1596863166"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="123.185.208.193" dst_ip="133.248.211.37" dst_port="9000"/>
        </slice>
        <from usec="0" sec="1596862804"/>
        <to usec="0" sec="1596863268"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="5.69.90.103"/>
        </slice>
        <from usec="0" sec="1596862805"/>
        <to usec="0" sec="1596863177"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,011,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="157.218.16.236" src_port="80"/>
        </slice>
        <from usec="0" sec="1596862807"/>
        <to usec="0" sec="1596863008"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.158.210.0"/>
        </slice>
        <from usec="0" sec="1596862808"/>
        <to usec="0" sec="1596863172"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="5.69.90.44"/>
        </slice>
        <from usec="0" sec="1596862811"/>
        <to usec="0" sec="1596863178"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.178.179.59"/>
        </slice>
        <from usec="0" sec="1596862814"/>
        <to usec="0" sec="1596863175"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,020,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="106.201.1.9"/>
        </slice>
        <from usec="0" sec="1596862835"/>
        <to usec="0" sec="1596863177"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="185.99.28.246"/>
        </slice>
        <from usec="0" sec="1596862841"/>
        <to usec="0" sec="1596863118"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="208.143.194.175"/>
        </slice>
        <from usec="0" sec="1596862842"/>
        <to usec="0" sec="1596863030"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="149.167.37.62"/>
        </slice>
        <from usec="0" sec="1596862875"/>
        <to usec="0" sec="1596863076"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="46.232.72.75"/>
        </slice>
        <from usec="0" sec="1596862889"/>
        <to usec="0" sec="1596863101"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="207.163.4.29" dst_port="2379"/>
        </slice>
        <from usec="0" sec="1596862987"/>
        <to usec="0" sec="1596863178"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="54.233.10.218"/>
        </slice>
        <from usec="0" sec="1596862998"/>
        <to usec="0" sec="1596863000"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="167.119.15.84"/>
        </slice>
        <from usec="0" sec="1596863036"/>
        <to usec="0" sec="1596863178"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="18.214.202.27"/>
        </slice>
        <from usec="0" sec="1596863078"/>
        <to usec="0" sec="1596863125"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="60.154.13.36"/>
        </slice>
        <from usec="0" sec="1596863081"/>
        <to usec="0" sec="1596863104"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="34.226.85.18"/>
        </slice>
        <from usec="0" sec="1596863094"/>
        <to usec="0" sec="1596863114"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="34.225.9.147"/>
        </slice>
        <from usec="0" sec="1596863097"/>
        <to usec="0" sec="1596863110"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="194.67.75.34" dst_ip="133.248.98.249"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863268"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="193.32.161.138" src_port="56824" dst_port="51534"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863268"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="8.118.137.55" dst_ip="133.248.116.212" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863268"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPICterp">
        <slice>
            <filter dst_ip="37.99.96.229"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863448"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="163.26.24.106"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863537"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="109.197.4.210"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863265"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="172.176.33.200"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863268"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="178.89.221.245"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596863263"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="223.155.6.133" dst_ip="133.248.194.36" src_port="53"/>
            <filter src_ip="223.153.58.69" dst_ip="133.248.194.36" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596863267"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="223.155.6.133" dst_ip="163.26.5.152" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862802"/>
        <to usec="0" sec="1596863264"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="52.248.201.74"/>
        </slice>
        <from usec="0" sec="1596862810"/>
        <to usec="0" sec="1596863224"/>
    </anomaly>
    <anomaly type="notice" value="0.7505,1.67977,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter src_ip="133.215.62.84" dst_ip="13.84.73.73" dst_port="443"/>
            <filter src_ip="202.244.127.12" dst_ip="13.84.73.73" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.08591,1.80825,504,0 0 0 1 0 0 0 0 0 0 0 1,mptmp">
        <slice>
            <filter dst_ip="203.77.78.38" src_port="443"/>
            <filter dst_ip="163.26.65.205" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="154.130.122.121"/>
        </slice>
        <from usec="0" sec="1596862833"/>
        <to usec="0" sec="1596863246"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="66.208.39.5"/>
        </slice>
        <from usec="0" sec="1596862855"/>
        <to usec="0" sec="1596863254"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="8.255.48.13"/>
        </slice>
        <from usec="0" sec="1596863237"/>
        <to usec="0" sec="1596863268"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="37.176.5.56" src_port="14140" dst_port="23"/>
            <filter src_ip="37.176.5.56" src_port="2361" dst_port="23"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863358"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="8.118.137.55" dst_ip="133.248.123.53" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863355"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="191.108.165.32"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863353"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.26.128.193" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863347"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="66.54.180.196"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863538"/>
    </anomaly>
    <anomaly type="notice" value="0.992207,1.67171,504,0 0 0 1 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter dst_ip="162.124.163.165" dst_port="443"/>
            <filter dst_ip="162.124.163.175" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="114.45.161.97" dst_port="9530"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863358"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="133.228.126.218" src_port="22722" dst_port="8888"/>
            <filter src_ip="133.228.126.218" src_port="6270" dst_port="8888"/>
            <filter src_ip="133.228.126.218" src_port="2851" dst_port="8888"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863358"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="223.153.58.69" dst_ip="133.248.111.206" src_port="53"/>
            <filter src_ip="223.155.6.133" dst_ip="133.248.111.206" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596863358"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="173.40.225.36"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596863358"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="223.155.6.133" dst_ip="133.248.88.232" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596863537"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="1.164.26.79" src_port="56495" dst_port="9530"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596863357"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="223.155.6.133" dst_ip="133.248.125.44" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596863537"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="114.44.135.81"/>
        </slice>
        <from usec="0" sec="1596862802"/>
        <to usec="0" sec="1596863357"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.26.4.111" dst_port="33434"/>
            <filter src_ip="163.26.4.111" dst_port="5004"/>
            <filter src_ip="163.26.4.111" dst_port="443"/>
        </slice>
        <from usec="0" sec="1596862803"/>
        <to usec="0" sec="1596863358"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="114.47.16.167"/>
        </slice>
        <from usec="0" sec="1596862803"/>
        <to usec="0" sec="1596863357"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="146.79.243.62"/>
        </slice>
        <from usec="0" sec="1596862803"/>
        <to usec="0" sec="1596863356"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="212.159.221.242"/>
        </slice>
        <from usec="0" sec="1596862804"/>
        <to usec="0" sec="1596863343"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="71.250.240.32"/>
        </slice>
        <from usec="0" sec="1596862804"/>
        <to usec="0" sec="1596863358"/>
    </anomaly>
    <anomaly type="notice" value="1.05698,1.76735,010,0 0 0 1 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="195.181.129.186" src_port="43228" dst_port="8081"/>
        </slice>
        <from usec="0" sec="1596862847"/>
        <to usec="0" sec="1596863527"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="168.124.62.158" dst_ip="133.248.212.172" src_port="53"/>
            <filter src_ip="168.124.192.190" dst_ip="133.248.212.172" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862805"/>
        <to usec="0" sec="1596863356"/>
    </anomaly>
    <anomaly type="notice" value="0.992207,1.67171,010,0 0 0 1 0 0 0 0 0 1 1 0,sntscSYN">
        <slice>
            <filter src_ip="181.242.235.110" dst_port="445"/>
            <filter src_ip="212.163.182.188" dst_port="445"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="203.77.86.61"/>
        </slice>
        <from usec="0" sec="1596862807"/>
        <to usec="0" sec="1596863294"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="120.183.19.255"/>
        </slice>
        <from usec="0" sec="1596862807"/>
        <to usec="0" sec="1596863358"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="203.77.70.24" src_port="443"/>
            <filter src_ip="46.10.6.82" dst_ip="203.77.70.24" dst_port="22"/>
        </slice>
        <from usec="0" sec="1596862808"/>
        <to usec="0" sec="1596863338"/>
    </anomaly>
    <anomaly type="notice" value="0.991042,1.71778,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="58.212.84.115" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596863172"/>
        <to usec="0" sec="1596863173"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="180.106.25.70"/>
        </slice>
        <from usec="0" sec="1596862810"/>
        <to usec="0" sec="1596863355"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="78.120.43.21" src_port="3389"/>
            <filter dst_ip="134.195.244.150" src_port="3389"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863533"/>
    </anomaly>
    <anomaly type="notice" value="0.992207,1.67171,011,0 0 0 1 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="222.66.85.12" src_port="8118"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="54.233.179.116"/>
        </slice>
        <from usec="0" sec="1596862819"/>
        <to usec="0" sec="1596863329"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="164.125.134.131"/>
        </slice>
        <from usec="0" sec="1596862830"/>
        <to usec="0" sec="1596863339"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,502,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="126.255.183.39"/>
        </slice>
        <from usec="0" sec="1596862839"/>
        <to usec="0" sec="1596863437"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="91.134.123.93"/>
        </slice>
        <from usec="0" sec="1596862851"/>
        <to usec="0" sec="1596863272"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,502,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="222.66.182.104" src_port="22"/>
        </slice>
        <from usec="0" sec="1596862946"/>
        <to usec="0" sec="1596863358"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="96.43.125.188"/>
        </slice>
        <from usec="0" sec="1596863361"/>
        <to usec="0" sec="1596863627"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,502,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="218.133.190.223" src_port="22"/>
        </slice>
        <from usec="0" sec="1596862804"/>
        <to usec="0" sec="1596863355"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,502,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="218.133.190.220" src_port="22"/>
        </slice>
        <from usec="0" sec="1596863055"/>
        <to usec="0" sec="1596863245"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="221.238.164.225"/>
        </slice>
        <from usec="0" sec="1596863122"/>
        <to usec="0" sec="1596863236"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="34.235.38.161"/>
        </slice>
        <from usec="0" sec="1596863150"/>
        <to usec="0" sec="1596863274"/>
    </anomaly>
    <anomaly type="notice" value="0.968113,1.79689,504,0 0 0 1 1 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="163.26.132.95" dst_port="443"/>
            <filter dst_ip="13.84.146.240" dst_port="443"/>
        </slice>
        <from usec="0" sec="1596862802"/>
        <to usec="0" sec="1596863537"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="45.152.43.115"/>
        </slice>
        <from usec="0" sec="1596863265"/>
        <to usec="0" sec="1596863497"/>
    </anomaly>
    <anomaly type="notice" value="0.968113,1.79689,999,0 0 0 1 1 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="194.67.75.34" dst_ip="133.248.98.245"/>
            <filter src_ip="194.67.75.34" dst_ip="133.248.98.238"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863358"/>
    </anomaly>
    <anomaly type="notice" value="0.651844,1.68363,004,1 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="194.67.75.34" dst_ip="133.248.98.234"/>
            <filter src_ip="117.149.55.28" dst_ip="133.248.98.234" dst_port="445"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863447"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="117.178.142.155"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863433"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="106.179.88.57" src_port="58914"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863448"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="223.155.6.133" dst_ip="133.248.110.232" src_port="53"/>
            <filter src_ip="223.153.58.69" dst_ip="133.248.110.232" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863446"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="195.181.129.186" src_port="8983" dst_port="58988"/>
            <filter dst_ip="195.181.129.186" src_port="8081" dst_port="43228"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863538"/>
    </anomaly>
    <anomaly type="notice" value="0.764995,1.68879,010,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="77.11.110.4" src_port="443"/>
        </slice>
        <from usec="0" sec="1596862984"/>
        <to usec="0" sec="1596863368"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="103.93.220.225"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863447"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="128.24.173.138"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863447"/>
    </anomaly>
    <anomaly type="notice" value="0.63477,1.67458,503,0 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="133.228.147.237" dst_port="80"/>
            <filter dst_ip="38.98.226.153" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="168.124.192.190" dst_ip="133.248.234.181" src_port="53"/>
            <filter src_ip="168.124.62.158" dst_ip="133.248.234.181" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863442"/>
    </anomaly>
    <anomaly type="notice" value="1.10428,1.77682,999,0 0 0 1 1 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.26.129.31" src_port="53"/>
            <filter dst_ip="163.26.129.49" src_port="53"/>
            <filter dst_ip="163.26.129.30" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="168.124.62.158" dst_ip="133.248.219.77" src_port="53"/>
            <filter src_ip="168.124.192.190" dst_ip="133.248.219.77" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863448"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="198.38.31.158" src_port="51326" dst_port="29250"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863447"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="177.21.31.16"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863447"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.109.166.225"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863443"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="71.250.240.95"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863448"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="180.138.129.197"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596863533"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="202.138.126.177"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596863448"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="203.77.86.61"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596863535"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="218.80.211.165" src_port="647" dst_port="23"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596863443"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="121.62.185.59"/>
        </slice>
        <from usec="0" sec="1596862802"/>
        <to usec="0" sec="1596863445"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="180.138.129.158"/>
        </slice>
        <from usec="0" sec="1596862802"/>
        <to usec="0" sec="1596863447"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="164.55.40.138"/>
        </slice>
        <from usec="0" sec="1596862802"/>
        <to usec="0" sec="1596863444"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="202.248.217.254"/>
            <filter dst_ip="23.101.75.41"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863432"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.248.98.74"/>
        </slice>
        <from usec="0" sec="1596862803"/>
        <to usec="0" sec="1596863445"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="182.116.155.228"/>
        </slice>
        <from usec="0" sec="1596862803"/>
        <to usec="0" sec="1596863410"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="180.138.129.184" dst_port="8789"/>
        </slice>
        <from usec="0" sec="1596862803"/>
        <to usec="0" sec="1596863537"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="218.153.106.245"/>
        </slice>
        <from usec="0" sec="1596862803"/>
        <to usec="0" sec="1596863445"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="59.57.96.192"/>
        </slice>
        <from usec="0" sec="1596862803"/>
        <to usec="0" sec="1596863447"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="168.124.62.158" dst_ip="133.248.215.9" src_port="53"/>
            <filter src_ip="168.124.192.190" dst_ip="133.248.215.9" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862804"/>
        <to usec="0" sec="1596863448"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="223.155.6.133" dst_ip="163.26.64.170" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862804"/>
        <to usec="0" sec="1596863448"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="203.208.190.102" dst_ip="203.77.66.195" src_port="53"/>
            <filter src_ip="203.208.190.103" dst_ip="203.77.66.195" src_port="53"/>
            <filter src_ip="202.11.46.177" dst_ip="203.77.66.195" dst_port="53"/>
        </slice>
        <from usec="0" sec="1596862805"/>
        <to usec="0" sec="1596863442"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="133.248.200.145"/>
        </slice>
        <from usec="0" sec="1596862806"/>
        <to usec="0" sec="1596863438"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="106.229.159.57"/>
        </slice>
        <from usec="0" sec="1596862806"/>
        <to usec="0" sec="1596863435"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="173.193.94.207"/>
        </slice>
        <from usec="0" sec="1596862807"/>
        <to usec="0" sec="1596863432"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="36.28.199.31"/>
        </slice>
        <from usec="0" sec="1596862807"/>
        <to usec="0" sec="1596863443"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="71.227.132.111"/>
        </slice>
        <from usec="0" sec="1596862809"/>
        <to usec="0" sec="1596863439"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="180.138.129.99"/>
        </slice>
        <from usec="0" sec="1596862810"/>
        <to usec="0" sec="1596863448"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="168.124.62.158" dst_ip="133.248.212.174" src_port="53"/>
            <filter src_ip="168.124.192.190" dst_ip="133.248.212.174" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862810"/>
        <to usec="0" sec="1596863445"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,502,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.77.79.115" dst_port="22"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863445"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="192.92.86.254"/>
        </slice>
        <from usec="0" sec="1596862811"/>
        <to usec="0" sec="1596863446"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.248.201.224"/>
        </slice>
        <from usec="0" sec="1596862816"/>
        <to usec="0" sec="1596863435"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="184.119.233.127" dst_ip="203.77.64.147" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862833"/>
        <to usec="0" sec="1596863444"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="213.25.253.16"/>
        </slice>
        <from usec="0" sec="1596862834"/>
        <to usec="0" sec="1596863447"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="163.26.173.136" src_port="80"/>
            <filter src_ip="163.26.173.136" src_port="443"/>
            <filter dst_ip="40.253.164.233" src_port="80"/>
            <filter dst_ip="40.253.164.233" src_port="443"/>
        </slice>
        <from usec="0" sec="1596862837"/>
        <to usec="0" sec="1596863433"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="198.137.59.50"/>
        </slice>
        <from usec="0" sec="1596863027"/>
        <to usec="0" sec="1596863435"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="175.8.142.251"/>
        </slice>
        <from usec="0" sec="1596863047"/>
        <to usec="0" sec="1596863428"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="3.28.105.138"/>
        </slice>
        <from usec="0" sec="1596863052"/>
        <to usec="0" sec="1596863269"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="3.32.166.128"/>
        </slice>
        <from usec="0" sec="1596863351"/>
        <to usec="0" sec="1596863364"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="222.66.74.86"/>
        </slice>
        <from usec="0" sec="1596863413"/>
        <to usec="0" sec="1596863447"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="72.73.245.78"/>
        </slice>
        <from usec="0" sec="1596863427"/>
        <to usec="0" sec="1596863448"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863538"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter dst_ip="104.126.17.135"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863538"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="182.19.79.110"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863538"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="47.14.205.82"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863536"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="78.120.43.21"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863481"/>
    </anomaly>
    <anomaly type="notice" value="0.992207,1.67171,020,0 0 0 1 0 0 0 0 0 1 1 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="125.160.218.66"/>
            <filter dst_ip="94.85.28.135" dst_port="40416"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,020,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="194.20.115.105"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863538"/>
    </anomaly>
    <anomaly type="notice" value="1.05073,1.69164,999,1 1 0 1 0 0 0 0 0 1 0 0,heavy_hitter">
        <slice>
            <filter src_ip="194.67.75.34" dst_ip="133.248.98.242"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,502,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.77.73.36" dst_port="22"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863538"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="71.250.241.185"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863538"/>
    </anomaly>
    <anomaly type="notice" value="0.63477,1.67458,010,0 0 0 1 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="193.28.5.224" src_port="34131" dst_port="44739"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="3.247.201.3"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863528"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="107.6.104.98"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863484"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="223.155.6.133" dst_ip="133.248.214.171" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863531"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="185.197.208.107" src_port="57377" dst_port="80"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863538"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,502,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="138.91.218.75"/>
            <filter src_ip="133.228.112.13" src_port="22"/>
            <filter src_ip="133.228.112.13"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863538"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.26.16.144" dst_port="443"/>
            <filter src_ip="163.26.16.144" dst_ip="91.234.100.106" dst_port="80"/>
        </slice>
        <from usec="0" sec="1596862815"/>
        <to usec="0" sec="1596863518"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.77.74.44" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863536"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="61.220.231.77"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863538"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.26.128.204" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863538"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICecrqICecrqdurmterp">
        <slice>
            <filter dst_ip="46.229.5.89"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863538"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="92.165.110.128"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863538"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="82.145.98.152"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863538"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="177.156.60.57"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863535"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,020,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.26.94.97"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863531"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="106.228.221.171"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863536"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="5.69.91.74"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863536"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="106.228.213.193"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863508"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="121.159.172.224"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596863538"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="71.250.240.193"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596863532"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="168.124.192.190" dst_ip="133.248.218.193" src_port="53"/>
            <filter src_ip="168.124.62.158" dst_ip="133.248.218.193" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596863537"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="45.59.242.114"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596863516"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="202.96.64.91" dst_ip="133.248.204.29" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596863537"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="216.200.45.48"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596863531"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="37.221.1.99"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596863517"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="223.155.6.133" dst_ip="133.248.104.182" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596863534"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="168.124.192.190" dst_ip="133.248.210.180" src_port="53"/>
            <filter src_ip="168.124.62.158" dst_ip="133.248.210.180" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596863538"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.26.178.129" src_port="53" dst_port="44391"/>
            <filter dst_ip="163.26.178.129" src_port="53" dst_port="29788"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596863525"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="223.155.6.133" dst_ip="133.248.115.212" src_port="53"/>
            <filter src_ip="223.153.58.69" dst_ip="133.248.115.212" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596863537"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="199.224.227.215"/>
        </slice>
        <from usec="0" sec="1596862802"/>
        <to usec="0" sec="1596863525"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="154.133.150.100"/>
        </slice>
        <from usec="0" sec="1596862802"/>
        <to usec="0" sec="1596863527"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="168.124.62.158" dst_ip="41.104.164.1" src_port="53"/>
            <filter src_ip="168.124.192.190" dst_ip="41.104.164.1" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862802"/>
        <to usec="0" sec="1596863538"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="168.124.192.190" dst_ip="106.237.213.254" src_port="53"/>
            <filter src_ip="168.124.62.158" dst_ip="106.237.213.254" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862802"/>
        <to usec="0" sec="1596863529"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="15.59.160.10"/>
        </slice>
        <from usec="0" sec="1596862802"/>
        <to usec="0" sec="1596863537"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="125.128.58.234" src_port="58698" dst_port="27344"/>
        </slice>
        <from usec="0" sec="1596862802"/>
        <to usec="0" sec="1596863538"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="71.250.240.232"/>
        </slice>
        <from usec="0" sec="1596862802"/>
        <to usec="0" sec="1596863537"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="177.39.203.158"/>
        </slice>
        <from usec="0" sec="1596862802"/>
        <to usec="0" sec="1596863509"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.77.86.61"/>
        </slice>
        <from usec="0" sec="1596862803"/>
        <to usec="0" sec="1596863534"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="8.118.137.55" dst_ip="133.248.116.150" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862803"/>
        <to usec="0" sec="1596863538"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="168.124.62.158" dst_ip="133.248.196.173" src_port="53"/>
            <filter src_ip="168.124.192.190" dst_ip="133.248.196.173" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862803"/>
        <to usec="0" sec="1596863529"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="175.73.236.31" src_port="39785" dst_port="23"/>
            <filter src_ip="175.73.236.31" src_port="34248" dst_port="23"/>
        </slice>
        <from usec="0" sec="1596862803"/>
        <to usec="0" sec="1596863535"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="168.124.62.158" dst_ip="133.248.214.49" src_port="53"/>
            <filter src_ip="168.124.192.190" dst_ip="133.248.214.49" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862803"/>
        <to usec="0" sec="1596863536"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="70.177.197.246"/>
        </slice>
        <from usec="0" sec="1596862803"/>
        <to usec="0" sec="1596863532"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="168.124.192.190" dst_ip="133.248.203.22" src_port="53"/>
            <filter src_ip="168.124.62.158" dst_ip="133.248.203.22" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862803"/>
        <to usec="0" sec="1596863536"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="168.124.62.158" dst_ip="133.248.229.113" src_port="53"/>
            <filter src_ip="168.124.192.190" dst_ip="133.248.229.113" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862803"/>
        <to usec="0" sec="1596863537"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="94.53.184.202"/>
        </slice>
        <from usec="0" sec="1596862803"/>
        <to usec="0" sec="1596863538"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="192.79.52.149" dst_port="53"/>
        </slice>
        <from usec="0" sec="1596862803"/>
        <to usec="0" sec="1596863532"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="36.155.154.135"/>
        </slice>
        <from usec="0" sec="1596862804"/>
        <to usec="0" sec="1596863538"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="168.124.192.190" dst_ip="133.248.212.213" src_port="53"/>
            <filter src_ip="168.124.62.158" dst_ip="133.248.212.213" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862804"/>
        <to usec="0" sec="1596863617"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="223.155.6.133" dst_ip="213.199.7.9" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862804"/>
        <to usec="0" sec="1596863538"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="54.252.10.225"/>
        </slice>
        <from usec="0" sec="1596862804"/>
        <to usec="0" sec="1596863531"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="94.231.221.89" src_port="63580" dst_port="9530"/>
            <filter src_ip="94.231.221.89" src_port="1615" dst_port="9530"/>
        </slice>
        <from usec="0" sec="1596862804"/>
        <to usec="0" sec="1596863535"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="210.105.163.175"/>
        </slice>
        <from usec="0" sec="1596862805"/>
        <to usec="0" sec="1596863537"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="168.124.192.190" dst_ip="133.248.210.205" src_port="53"/>
            <filter src_ip="168.124.62.158" dst_ip="133.248.210.205" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862805"/>
        <to usec="0" sec="1596863531"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="59.125.213.29"/>
        </slice>
        <from usec="0" sec="1596862806"/>
        <to usec="0" sec="1596863536"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="71.250.240.192" src_port="3790" dst_port="3790"/>
        </slice>
        <from usec="0" sec="1596862806"/>
        <to usec="0" sec="1596863536"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,020,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.26.209.193"/>
        </slice>
        <from usec="0" sec="1596862806"/>
        <to usec="0" sec="1596863527"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="146.185.110.73" src_port="3790" dst_port="3790"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596863530"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="31.104.173.76"/>
        </slice>
        <from usec="0" sec="1596862806"/>
        <to usec="0" sec="1596863528"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="87.195.50.63"/>
        </slice>
        <from usec="0" sec="1596862807"/>
        <to usec="0" sec="1596863538"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="51.77.199.226"/>
        </slice>
        <from usec="0" sec="1596862808"/>
        <to usec="0" sec="1596863519"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,020,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.26.34.129"/>
        </slice>
        <from usec="0" sec="1596862809"/>
        <to usec="0" sec="1596863538"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="8.118.137.55" dst_ip="133.248.92.159" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862809"/>
        <to usec="0" sec="1596863532"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="49.27.82.8"/>
        </slice>
        <from usec="0" sec="1596862809"/>
        <to usec="0" sec="1596863522"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="163.26.128.199" dst_port="53"/>
            <filter src_ip="163.26.128.192" dst_port="53"/>
            <filter dst_ip="104.163.37.207" dst_port="53"/>
        </slice>
        <from usec="0" sec="1596862802"/>
        <to usec="0" sec="1596863537"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.178.155.18"/>
        </slice>
        <from usec="0" sec="1596862809"/>
        <to usec="0" sec="1596863536"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="168.124.62.158" dst_ip="133.248.197.145" src_port="53"/>
            <filter src_ip="168.124.192.190" dst_ip="133.248.197.145" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862811"/>
        <to usec="0" sec="1596863534"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="128.2.17.8"/>
        </slice>
        <from usec="0" sec="1596862812"/>
        <to usec="0" sec="1596863533"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="203.77.86.61"/>
        </slice>
        <from usec="0" sec="1596862812"/>
        <to usec="0" sec="1596863537"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="52.22.205.232"/>
        </slice>
        <from usec="0" sec="1596862812"/>
        <to usec="0" sec="1596863528"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="49.251.26.191"/>
        </slice>
        <from usec="0" sec="1596862812"/>
        <to usec="0" sec="1596863508"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="96.52.96.38"/>
        </slice>
        <from usec="0" sec="1596862813"/>
        <to usec="0" sec="1596863535"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="106.201.248.253"/>
        </slice>
        <from usec="0" sec="1596862814"/>
        <to usec="0" sec="1596863538"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="202.96.64.91" dst_ip="133.248.196.28" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862816"/>
        <to usec="0" sec="1596863526"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="180.69.10.58"/>
        </slice>
        <from usec="0" sec="1596862816"/>
        <to usec="0" sec="1596863534"/>
    </anomaly>
    <anomaly type="notice" value="0.991042,1.71778,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="27.35.77.166" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596862987"/>
        <to usec="0" sec="1596862991"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,004,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="82.16.208.209"/>
        </slice>
        <from usec="0" sec="1596862820"/>
        <to usec="0" sec="1596863538"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPICterp">
        <slice>
            <filter dst_ip="65.177.106.118"/>
        </slice>
        <from usec="0" sec="1596862823"/>
        <to usec="0" sec="1596863530"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="54.235.145.33"/>
        </slice>
        <from usec="0" sec="1596862827"/>
        <to usec="0" sec="1596863531"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="115.147.85.167"/>
        </slice>
        <from usec="0" sec="1596862828"/>
        <to usec="0" sec="1596863487"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="200.88.92.126"/>
        </slice>
        <from usec="0" sec="1596862835"/>
        <to usec="0" sec="1596863525"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="218.156.234.130"/>
        </slice>
        <from usec="0" sec="1596862835"/>
        <to usec="0" sec="1596863471"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="149.233.254.172"/>
        </slice>
        <from usec="0" sec="1596862836"/>
        <to usec="0" sec="1596863516"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="210.101.182.74"/>
        </slice>
        <from usec="0" sec="1596862841"/>
        <to usec="0" sec="1596863432"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="68.72.220.10"/>
        </slice>
        <from usec="0" sec="1596862854"/>
        <to usec="0" sec="1596863498"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="78.120.43.21"/>
        </slice>
        <from usec="0" sec="1596862861"/>
        <to usec="0" sec="1596863506"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="104.126.18.54"/>
        </slice>
        <from usec="0" sec="1596862942"/>
        <to usec="0" sec="1596863453"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="154.130.113.54"/>
        </slice>
        <from usec="0" sec="1596862952"/>
        <to usec="0" sec="1596863477"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="13.228.210.71"/>
        </slice>
        <from usec="0" sec="1596863042"/>
        <to usec="0" sec="1596863482"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="60.133.7.64"/>
        </slice>
        <from usec="0" sec="1596863098"/>
        <to usec="0" sec="1596863538"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="49.26.169.224"/>
        </slice>
        <from usec="0" sec="1596863206"/>
        <to usec="0" sec="1596863507"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="122.87.151.210"/>
        </slice>
        <from usec="0" sec="1596863281"/>
        <to usec="0" sec="1596863390"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="216.201.66.221"/>
        </slice>
        <from usec="0" sec="1596863310"/>
        <to usec="0" sec="1596863509"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="203.77.86.61"/>
        </slice>
        <from usec="0" sec="1596863359"/>
        <to usec="0" sec="1596863512"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="126.241.208.117"/>
        </slice>
        <from usec="0" sec="1596863420"/>
        <to usec="0" sec="1596863459"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="110.92.64.246"/>
        </slice>
        <from usec="0" sec="1596863427"/>
        <to usec="0" sec="1596863487"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="17.168.189.230"/>
        </slice>
        <from usec="0" sec="1596863427"/>
        <to usec="0" sec="1596863471"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPICterp">
        <slice>
            <filter dst_ip="123.233.65.7"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863628"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="89.57.91.131" src_port="53"/>
            <filter dst_ip="89.57.91.131"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596862998"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="106.228.101.226"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863628"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="34.236.77.81"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863628"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="223.155.6.133" dst_ip="133.248.102.48" src_port="53"/>
            <filter src_ip="223.153.58.69" dst_ip="133.248.102.48" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863626"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="223.153.58.69" dst_ip="133.248.116.31" src_port="53"/>
            <filter src_ip="223.155.6.133" dst_ip="133.248.116.31" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863628"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="106.228.148.251"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596863627"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="202.96.64.91" dst_ip="133.248.194.28" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596863627"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="192.92.86.112"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596863613"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="218.220.22.45" dst_ip="203.77.71.63" dst_port="80"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596863623"/>
    </anomaly>
    <anomaly type="notice" value="0.992207,1.67171,502,0 0 0 1 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="133.248.98.162" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="17.242.104.4" dst_ip="163.26.117.36" src_port="443"/>
        </slice>
        <from usec="0" sec="1596862834"/>
        <to usec="0" sec="1596863306"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.213.95.236"/>
        </slice>
        <from usec="0" sec="1596862805"/>
        <to usec="0" sec="1596863627"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="69.166.196.53"/>
        </slice>
        <from usec="0" sec="1596862805"/>
        <to usec="0" sec="1596863618"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="171.115.68.193" dst_ip="133.248.236.20"/>
            <filter src_ip="171.115.68.228" dst_ip="133.248.236.20"/>
            <filter src_ip="171.115.69.72" dst_ip="133.248.236.20"/>
        </slice>
        <from usec="0" sec="1596862805"/>
        <to usec="0" sec="1596863628"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="92.188.57.82" dst_port="443"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863536"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="168.124.192.190" dst_ip="133.248.210.204" src_port="53"/>
            <filter src_ip="168.124.62.158" dst_ip="133.248.210.204" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862806"/>
        <to usec="0" sec="1596863625"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="168.124.192.190" dst_ip="133.248.210.201" src_port="53"/>
            <filter src_ip="168.124.62.158" dst_ip="133.248.210.201" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862806"/>
        <to usec="0" sec="1596863627"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="51.77.199.226"/>
        </slice>
        <from usec="0" sec="1596862808"/>
        <to usec="0" sec="1596863620"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="192.99.55.154" dst_ip="133.248.98.160" dst_port="22"/>
        </slice>
        <from usec="0" sec="1596862813"/>
        <to usec="0" sec="1596863618"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="168.124.62.158" dst_ip="133.248.195.215" src_port="53"/>
            <filter src_ip="168.124.192.190" dst_ip="133.248.195.215" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862815"/>
        <to usec="0" sec="1596863625"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="13.84.10.171"/>
        </slice>
        <from usec="0" sec="1596862819"/>
        <to usec="0" sec="1596863617"/>
    </anomaly>
    <anomaly type="notice" value="0.651844,1.68363,010,1 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="112.106.4.106" dst_port="445"/>
            <filter src_ip="112.106.4.106" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1596862819"/>
        <to usec="0" sec="1596863617"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.26.20.181" src_port="5004"/>
            <filter dst_ip="163.26.20.181" src_port="33434"/>
        </slice>
        <from usec="0" sec="1596862820"/>
        <to usec="0" sec="1596863618"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="13.77.137.207"/>
        </slice>
        <from usec="0" sec="1596862831"/>
        <to usec="0" sec="1596863622"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="222.38.152.20"/>
        </slice>
        <from usec="0" sec="1596862839"/>
        <to usec="0" sec="1596863619"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="159.192.202.46"/>
        </slice>
        <from usec="0" sec="1596862850"/>
        <to usec="0" sec="1596863628"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="194.22.13.59"/>
        </slice>
        <from usec="0" sec="1596863198"/>
        <to usec="0" sec="1596863572"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="65.122.29.150"/>
        </slice>
        <from usec="0" sec="1596863373"/>
        <to usec="0" sec="1596863542"/>
    </anomaly>
    <anomaly type="notice" value="0.968113,1.79689,020,0 0 0 1 1 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="192.92.86.20"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596862998"/>
    </anomaly>
    <anomaly type="notice" value="0.968113,1.79689,020,0 0 0 1 1 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter src_ip="163.26.68.129" dst_ip="38.82.100.51" dst_port="22"/>
            <filter dst_ip="38.82.100.51"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863448"/>
    </anomaly>
    <anomaly type="notice" value="0.968113,1.79689,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.77.69.64" dst_ip="181.91.108.150" src_port="80" dst_port="46832"/>
        </slice>
        <from usec="0" sec="1596862894"/>
        <to usec="0" sec="1596862899"/>
    </anomaly>
    <anomaly type="notice" value="1.10428,1.77682,503,0 0 0 1 1 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="203.77.69.64" dst_ip="210.150.181.64" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.968113,1.79689,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="203.77.78.230" dst_ip="109.224.53.210" src_port="47222" dst_port="80"/>
            <filter src_ip="203.77.78.230" dst_ip="109.224.53.210" src_port="47218" dst_port="80"/>
        </slice>
        <from usec="0" sec="1596862985"/>
        <to usec="0" sec="1596862998"/>
    </anomaly>
    <anomaly type="notice" value="0.968113,1.79689,999,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="103.220.64.28" dst_ip="133.109.193.64" dst_port="33434"/>
            <filter src_ip="103.220.64.29" dst_ip="133.109.193.64" dst_port="33434"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863173"/>
    </anomaly>
    <anomaly type="notice" value="0.968113,1.79689,504,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.77.78.230" dst_ip="192.146.92.169" src_port="55614" dst_port="443"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863524"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,012,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="139.173.183.86" dst_port="8080"/>
            <filter src_ip="139.173.183.86" dst_port="8001"/>
            <filter src_ip="139.173.183.86" dst_port="8000"/>
        </slice>
        <from usec="0" sec="1596862941"/>
        <to usec="0" sec="1596863433"/>
    </anomaly>
    <anomaly type="notice" value="0.968113,1.79689,999,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="168.124.62.158" dst_ip="133.248.199.33" src_port="53"/>
            <filter src_ip="168.124.192.190" dst_ip="133.248.199.33" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862810"/>
        <to usec="0" sec="1596863347"/>
    </anomaly>
    <anomaly type="notice" value="0.968113,1.79689,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.77.72.12" dst_ip="154.248.175.21" dst_port="53"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863448"/>
    </anomaly>
    <anomaly type="notice" value="0.968113,1.79689,010,0 0 0 1 1 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="203.77.86.61" src_port="47309" dst_port="23"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863447"/>
    </anomaly>
    <anomaly type="notice" value="0.968113,1.79689,999,0 0 0 1 1 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="202.244.127.206" dst_ip="192.75.35.90" dst_port="53"/>
        </slice>
        <from usec="0" sec="1596862831"/>
        <to usec="0" sec="1596863395"/>
    </anomaly>
    <anomaly type="notice" value="1.04765,1.80173,901,0 0 0 0 1 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863538"/>
    </anomaly>
    <anomaly type="notice" value="1.04765,1.80173,901,0 0 0 0 1 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863538"/>
    </anomaly>
    <anomaly type="notice" value="1.04765,1.80173,999,0 0 0 0 1 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.228.248.13" dst_ip="149.198.2.35" src_port="587"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863538"/>
    </anomaly>
    <anomaly type="notice" value="0.968113,1.79689,504,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.26.140.166" dst_ip="54.112.168.63" src_port="59570" dst_port="443"/>
            <filter src_ip="163.26.140.166" dst_ip="54.112.168.63" src_port="59088" dst_port="443"/>
        </slice>
        <from usec="0" sec="1596862802"/>
        <to usec="0" sec="1596863536"/>
    </anomaly>
    <anomaly type="notice" value="0.968113,1.79689,504,0 0 0 1 1 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.26.48.125" src_port="443"/>
        </slice>
        <from usec="0" sec="1596862804"/>
        <to usec="0" sec="1596863538"/>
    </anomaly>
    <anomaly type="notice" value="0.968113,1.79689,504,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.26.3.85" dst_ip="52.158.242.84" dst_port="443"/>
        </slice>
        <from usec="0" sec="1596863304"/>
        <to usec="0" sec="1596863534"/>
    </anomaly>
    <anomaly type="notice" value="0.968113,1.79689,999,0 0 0 1 1 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="223.155.6.133" dst_ip="133.248.80.23" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863627"/>
    </anomaly>
    <anomaly type="notice" value="0.968113,1.79689,999,0 0 0 1 1 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="202.96.64.91" dst_ip="133.248.211.227" src_port="53"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596863616"/>
    </anomaly>
    <anomaly type="notice" value="0.968113,1.79689,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="157.109.98.249" dst_ip="156.218.254.82" dst_port="80"/>
            <filter src_ip="78.120.43.21" dst_ip="156.218.254.82" dst_port="80"/>
        </slice>
        <from usec="0" sec="1596862838"/>
        <to usec="0" sec="1596863576"/>
    </anomaly>
    <anomaly type="notice" value="0.968113,1.79689,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.228.248.13" dst_ip="92.60.174.8" src_port="587"/>
        </slice>
        <from usec="0" sec="1596862843"/>
        <to usec="0" sec="1596863622"/>
    </anomaly>
    <anomaly type="notice" value="0.968113,1.79689,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.244.127.12" dst_ip="52.5.39.78" dst_port="80"/>
        </slice>
        <from usec="0" sec="1596863391"/>
        <to usec="0" sec="1596863512"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="196.200.52.94" src_port="56265" dst_port="8000"/>
            <filter src_ip="196.200.52.94" src_port="59068" dst_port="5906"/>
            <filter src_ip="196.200.52.94" src_port="62747" dst_port="4567"/>
            <filter src_ip="113.219.179.68" src_port="47454" dst_port="3389"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863447"/>
    </anomaly>
    <anomaly type="notice" value="1.13028,1.77227,504,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.77.87.11" src_port="443"/>
            <filter src_ip="1.30.193.61" dst_ip="203.77.87.11" src_port="53"/>
        </slice>
        <from usec="0" sec="1596863025"/>
        <to usec="0" sec="1596863071"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="219.235.207.31" dst_ip="78.120.43.21" dst_port="443"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863628"/>
    </anomaly>
    <anomaly type="notice" value="1.05698,1.76735,020,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="89.57.95.125"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863533"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,502,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.248.239.57" dst_port="22"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863538"/>
    </anomaly>
    <anomaly type="notice" value="1.05698,1.76735,999,0 0 0 1 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="175.130.159.242" dst_ip="163.26.120.17" dst_port="2222"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863206"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="71.250.240.96" src_port="3790" dst_port="3790"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863447"/>
    </anomaly>
    <anomaly type="notice" value="1.13028,1.77227,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="52.30.78.89" dst_ip="203.77.71.101" dst_port="1194"/>
            <filter src_ip="95.67.206.153" dst_ip="203.77.71.101" dst_port="1194"/>
        </slice>
        <from usec="0" sec="1596863025"/>
        <to usec="0" sec="1596863656"/>
    </anomaly>
    <anomaly type="notice" value="1.13028,1.77227,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.109.192.102" dst_port="53"/>
        </slice>
        <from usec="0" sec="1596863475"/>
        <to usec="0" sec="1596863521"/>
    </anomaly>
    <anomaly type="notice" value="1.13028,1.77227,999,0 0 0 0 0 0 1 0 0 0 0 0,DDoSUDP">
        <slice>
            <filter dst_ip="38.98.226.176"/>
        </slice>
        <from usec="0" sec="1596863610"/>
        <to usec="0" sec="1596863656"/>
    </anomaly>
    <anomaly type="notice" value="1.13028,1.77227,999,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="32.228.254.195" dst_ip="203.77.72.29" dst_port="53"/>
        </slice>
        <from usec="0" sec="1596863610"/>
        <to usec="0" sec="1596863656"/>
    </anomaly>
    <anomaly type="notice" value="1.13028,1.77227,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.248.98.250"/>
        </slice>
        <from usec="0" sec="1596863610"/>
        <to usec="0" sec="1596863656"/>
    </anomaly>
    <anomaly type="notice" value="1.13028,1.77227,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.77.72.12"/>
        </slice>
        <from usec="0" sec="1596863610"/>
        <to usec="0" sec="1596863656"/>
    </anomaly>
    <anomaly type="notice" value="1.13028,1.77227,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="203.77.72.9"/>
        </slice>
        <from usec="0" sec="1596863610"/>
        <to usec="0" sec="1596863656"/>
    </anomaly>
    <anomaly type="notice" value="1.05698,1.76735,999,0 0 0 1 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.228.248.13" dst_ip="149.198.2.35" src_port="587"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863656"/>
    </anomaly>
    <anomaly type="notice" value="1.13028,1.77227,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.248.98.166"/>
        </slice>
        <from usec="0" sec="1596863610"/>
        <to usec="0" sec="1596863656"/>
    </anomaly>
    <anomaly type="notice" value="1.05698,1.76735,020,0 0 0 1 0 0 1 0 0 0 0 0,ntscICecrqICecrqdurmterp">
        <slice>
            <filter dst_ip="203.77.79.9"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863656"/>
    </anomaly>
    <anomaly type="notice" value="1.13028,1.77227,010,0 0 0 0 0 0 1 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="161.220.182.53" dst_ip="163.26.160.83" src_port="32766"/>
        </slice>
        <from usec="0" sec="1596863610"/>
        <to usec="0" sec="1596863656"/>
    </anomaly>
    <anomaly type="notice" value="1.05698,1.76735,010,0 0 0 1 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.248.97.186" dst_port="50348"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863656"/>
    </anomaly>
    <anomaly type="notice" value="1.13028,1.77227,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.77.77.221" dst_port="53"/>
        </slice>
        <from usec="0" sec="1596863610"/>
        <to usec="0" sec="1596863656"/>
    </anomaly>
    <anomaly type="notice" value="1.13028,1.77227,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.248.97.217"/>
        </slice>
        <from usec="0" sec="1596863610"/>
        <to usec="0" sec="1596863656"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="133.228.75.100" dst_port="445"/>
        </slice>
        <from usec="0" sec="1596863174"/>
        <to usec="0" sec="1596863448"/>
    </anomaly>
    <anomaly type="notice" value="0.7505,1.67977,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="104.1.134.82"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.7505,1.67977,020,0 0 0 0 0 0 0 0 0 1 0 0,ntscICec">
        <slice>
            <filter src_ip="114.85.222.216"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.7505,1.67977,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="114.30.40.160"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.63477,1.67458,504,0 0 0 1 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="117.159.159.37" dst_ip="202.248.238.97" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.7505,1.67977,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="126.81.177.63"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.63477,1.67458,999,0 0 0 1 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="126.21.215.227" dst_ip="163.26.6.86" src_port="49823" dst_port="36361"/>
            <filter src_ip="126.21.215.227" dst_ip="163.26.6.86" src_port="49822" dst_port="3010"/>
            <filter src_ip="126.21.215.227" dst_ip="163.26.6.86" src_port="49819" dst_port="40905"/>
            <filter src_ip="126.21.215.227" dst_ip="163.26.6.86" src_port="49818" dst_port="3010"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.7505,1.67977,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="151.104.255.160"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.992207,1.67171,999,0 0 0 1 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="163.26.240.71" dst_port="443"/>
            <filter dst_ip="38.98.226.135" dst_port="8883"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.63477,1.67458,504,0 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="163.26.231.150" dst_port="443"/>
            <filter dst_ip="91.234.100.113" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.63477,1.67458,010,0 0 0 1 0 0 0 0 0 1 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="163.26.1.214" dst_ip="107.173.153.101" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="2.191.101.66" dst_ip="203.77.74.143" dst_port="22"/>
        </slice>
        <from usec="0" sec="1596862803"/>
        <to usec="0" sec="1596862990"/>
    </anomaly>
    <anomaly type="notice" value="0.7505,1.67977,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="193.28.4.46"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.10428,1.77682,999,0 0 0 1 1 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="202.244.122.3" src_port="25"/>
            <filter src_ip="202.244.122.3" dst_port="8889"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.63477,1.67458,020,0 0 0 1 0 0 0 0 0 1 0 0,hostout">
        <slice>
            <filter src_ip="202.248.218.17"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.992207,1.67171,010,0 0 0 1 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter dst_ip="45.211.225.208" dst_port="43048"/>
            <filter dst_ip="185.163.37.42" src_port="25416" dst_port="41264"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.10428,1.77682,020,0 0 0 1 1 0 0 0 0 1 0 0,ttl_error">
        <slice>
            <filter src_ip="203.77.71.158"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.992207,1.67171,502,0 0 0 1 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="203.77.86.61"/>
            <filter dst_ip="203.77.78.203"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.13028,1.77227,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.77.69.64" dst_port="80"/>
        </slice>
        <from usec="0" sec="1596863610"/>
        <to usec="0" sec="1596863656"/>
    </anomaly>
    <anomaly type="notice" value="0.63477,1.67458,010,0 0 0 1 0 0 0 0 0 1 0 0,ntscSYN">
        <slice>
            <filter src_ip="37.176.5.255" dst_port="26"/>
            <filter src_port="18443" dst_port="26"/>
            <filter src_port="2524" dst_port="26"/>
            <filter src_port="38670" dst_port="26"/>
            <filter src_ip="37.176.5.255" src_port="18443" dst_port="23"/>
            <filter src_ip="37.176.5.255" src_port="2524" dst_port="23"/>
            <filter src_ip="37.176.5.255" src_port="38670" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.63477,1.67458,010,0 0 0 1 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="60.228.76.69" src_port="56506" dst_port="5119"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="133.248.98.232"/>
            <filter src_ip="196.200.52.243" src_port="64564" dst_port="2086"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863178"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="154.45.66.13" src_port="55457" dst_port="8080"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596863178"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="45.139.231.76" src_port="57777" dst_port="23"/>
            <filter src_ip="45.139.231.76" src_port="25137" dst_port="23"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596862998"/>
    </anomaly>
    <anomaly type="notice" value="0.7505,1.67977,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="117.159.159.37"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.992207,1.67171,504,0 0 0 1 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="203.77.64.53" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.7505,1.67977,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter src_ip="223.155.6.133" dst_ip="133.248.76.216" src_port="53"/>
            <filter src_ip="223.153.58.69" dst_ip="133.248.76.216" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.7505,1.67977,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter src_ip="223.153.58.69" dst_ip="133.248.115.230" src_port="53"/>
            <filter src_ip="223.155.6.133" dst_ip="133.248.115.230" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.7505,1.67977,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter src_ip="114.77.29.114" dst_ip="133.248.200.129" src_port="53"/>
            <filter src_ip="101.226.187.249" dst_ip="133.248.200.129" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.764995,1.68879,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="35.89.164.226" dst_ip="163.26.228.229" src_port="443"/>
        </slice>
        <from usec="0" sec="1596863507"/>
        <to usec="0" sec="1596863509"/>
    </anomaly>
    <anomaly type="notice" value="1.05698,1.76735,010,0 0 0 1 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="92.188.57.83" src_port="43172" dst_port="25276"/>
            <filter src_ip="92.188.57.83" src_port="43172" dst_port="25278"/>
            <filter src_ip="92.188.57.83" src_port="43172" dst_port="25277"/>
        </slice>
        <from usec="0" sec="1596862800"/>
        <to usec="0" sec="1596863517"/>
    </anomaly>
    <anomaly type="notice" value="0.7505,1.67977,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="163.26.75.156" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.63477,1.67458,504,0 0 0 1 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="104.126.17.135" dst_ip="163.26.75.196" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.7505,1.67977,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="163.26.114.205" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.7505,1.67977,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.26.114.227" src_port="443"/>
            <filter dst_ip="163.26.114.227" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.992207,1.67171,504,0 0 0 1 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.26.21.126" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.7505,1.67977,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.26.128.202" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.7505,1.67977,011,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="167.92.55.158" src_port="52869"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.7505,1.67977,010,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="179.212.64.108" src_port="81"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.7505,1.67977,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="18.211.252.243"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.13028,1.77227,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="89.57.95.86"/>
        </slice>
        <from usec="0" sec="1596863610"/>
        <to usec="0" sec="1596863656"/>
    </anomaly>
    <anomaly type="notice" value="0.63477,1.67458,999,0 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="133.228.239.84" dst_ip="185.250.0.234"/>
            <filter src_ip="133.228.239.84" src_port="5900"/>
            <filter src_ip="163.26.190.154" dst_ip="185.250.0.234"/>
            <filter src_ip="163.26.190.154" src_port="5900"/>
            <filter src_ip="202.248.217.137" dst_ip="185.250.0.234"/>
            <filter src_ip="202.248.217.137" src_port="5900"/>
            <filter dst_ip="185.250.0.234" src_port="5900"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.93135,1.66742,999,1 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="203.77.73.16" dst_ip="185.121.137.196" src_port="995" dst_port="42496"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.7505,1.67977,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter src_ip="212.154.101.99" dst_ip="203.77.69.89" dst_port="25"/>
            <filter src_ip="212.154.101.114" dst_ip="203.77.69.89" dst_port="25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.7505,1.67977,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter src_ip="1.30.193.62" dst_ip="203.77.71.90" src_port="53"/>
            <filter src_ip="1.31.129.1" dst_ip="203.77.71.90" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="167.179.63.223" dst_ip="203.77.73.168" dst_port="80"/>
            <filter src_ip="167.179.63.223" dst_ip="203.77.69.64" dst_port="80"/>
        </slice>
        <from usec="0" sec="1596862812"/>
        <to usec="0" sec="1596863588"/>
    </anomaly>
    <anomaly type="notice" value="0.63477,1.67458,502,0 0 0 1 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="203.77.79.174" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.7505,1.67977,502,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="203.77.79.90" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.63477,1.67458,502,0 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="133.228.2.183" src_port="22"/>
            <filter src_ip="203.77.86.61" src_port="22"/>
            <filter dst_ip="2.24.91.100" src_port="445"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.7505,1.67977,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="45.152.43.15"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.63477,1.67458,504,0 0 0 1 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="202.244.127.12" dst_ip="52.163.52.186" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.7505,1.67977,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="74.8.17.187"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.7505,1.67977,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="91.191.44.165"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.7505,1.67977,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="91.188.32.33"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.7505,1.67977,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="91.188.32.218"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.7505,1.67977,010,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="93.86.161.53" src_port="2302" dst_port="48916"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.06995,1.67691,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="104.204.136.189" dst_ip="163.26.3.85" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.968113,1.79689,004,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="202.25.45.58" dst_port="445"/>
        </slice>
        <from usec="0" sec="1596862801"/>
        <to usec="0" sec="1596863628"/>
    </anomaly>
    <anomaly type="notice" value="0.992207,1.67171,999,0 0 0 1 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="101.226.187.249" dst_ip="133.248.200.144" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="92.202.127.38" src_port="54314" dst_port="2483"/>
        </slice>
        <from usec="0" sec="1596863194"/>
        <to usec="0" sec="1596863294"/>
    </anomaly>
    <anomaly type="notice" value="1.06995,1.67691,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="13.237.200.237" dst_ip="163.26.5.161" src_port="80" dst_port="56348"/>
            <filter src_ip="13.237.200.237" dst_ip="163.26.5.161" src_port="80" dst_port="56339"/>
            <filter src_ip="13.237.200.237" dst_ip="163.26.229.173" src_port="443" dst_port="53549"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.06995,1.67691,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="162.135.137.20" dst_ip="163.26.114.228" src_port="443" dst_port="52935"/>
            <filter src_ip="162.135.137.20" dst_ip="163.26.114.228" src_port="443" dst_port="52531"/>
            <filter src_ip="162.135.137.20" dst_ip="163.26.96.37" src_port="443" dst_port="55017"/>
            <filter src_ip="162.135.137.20" dst_ip="163.26.58.202" src_port="443" dst_port="59753"/>
            <filter src_ip="162.135.137.20" dst_ip="163.26.103.77" src_port="443" dst_port="62527"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.838021,1.69303,504,0 0 0 1 0 0 0 0 0 0 1 0,mptmp">
        <slice>
            <filter src_ip="163.26.231.150" dst_ip="114.30.39.193"/>
            <filter src_ip="163.26.231.150" dst_port="443"/>
            <filter dst_ip="114.30.39.193" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.06995,1.67691,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="17.255.82.133" dst_ip="163.26.97.124" src_port="443" dst_port="64975"/>
            <filter src_ip="17.255.82.133" dst_ip="163.26.97.110" src_port="443" dst_port="57395"/>
            <filter src_ip="17.255.82.133" dst_ip="203.77.78.31" src_port="443" dst_port="50107"/>
            <filter src_ip="17.255.82.133" dst_ip="203.77.87.11" src_port="443" dst_port="54466"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.06995,1.67691,020,0 0 0 0 0 0 0 0 0 1 1 0,ntscICec">
        <slice>
            <filter src_ip="47.9.42.123"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.06995,1.67691,999,0 0 0 0 0 0 0 0 0 1 1 0,ptpposcaUDP">
        <slice>
            <filter src_ip="163.26.235.201" dst_ip="126.208.41.196" src_port="8610"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.838021,1.69303,504,0 0 0 1 0 0 0 0 0 0 1 0,mptp">
        <slice>
            <filter dst_ip="13.84.146.82" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.06995,1.67691,999,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.26.239.248" src_port="5004"/>
            <filter dst_ip="163.26.239.248" src_port="33434"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.10428,1.77682,999,0 0 0 1 1 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter dst_ip="133.248.76.164"/>
            <filter dst_ip="163.26.146.231"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.968113,1.79689,010,0 0 0 1 1 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.248.213.35"/>
        </slice>
        <from usec="0" sec="1596862803"/>
        <to usec="0" sec="1596863534"/>
    </anomaly>
    <anomaly type="notice" value="1.06995,1.67691,010,0 0 0 0 0 0 0 0 0 1 1 0,mptpla">
        <slice>
            <filter src_ip="202.25.40.221" dst_ip="167.161.162.175" src_port="23"/>
            <filter src_ip="202.25.40.218" dst_ip="167.161.162.175" src_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,010,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="89.92.31.254" dst_ip="163.26.184.115" src_port="21963" dst_port="23"/>
            <filter src_ip="89.92.31.254" dst_ip="133.109.223.81" src_port="21963" dst_port="23"/>
        </slice>
        <from usec="0" sec="1596863248"/>
        <to usec="0" sec="1596863297"/>
    </anomaly>
    <anomaly type="notice" value="0.63477,1.67458,503,0 0 0 1 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="149.225.218.126" dst_ip="203.77.73.168" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.992207,1.67171,504,0 0 0 1 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="203.77.78.38" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.06995,1.67691,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="133.228.249.105" dst_ip="54.227.67.74" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.06995,1.67691,011,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="203.77.86.61" src_port="8545" dst_port="32767"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.7505,1.67977,010,0 0 0 0 0 0 0 0 0 1 0 0,ntscSYN">
        <slice>
            <filter src_ip="92.188.57.83" src_port="53515"/>
            <filter src_ip="92.188.57.83" src_port="43172" dst_port="25277"/>
            <filter src_ip="92.188.57.83" src_port="43172" dst_port="25276"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.347474,1.69586,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="17.255.82.177" dst_ip="163.26.117.29" src_port="443" dst_port="50114"/>
            <filter src_ip="17.255.82.177" dst_ip="163.26.229.192" src_port="443" dst_port="56514"/>
        </slice>
        <from usec="0" sec="1596863212"/>
        <to usec="0" sec="1596863371"/>
    </anomaly>
</admd:annotation>
