<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="suspicious" value="1.00281,1.15222,999,1 1 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="163.34.160.83"/>
            <filter dst_ip="54.253.5.29" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.786408,1.14324,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.34.160.52" dst_ip="18.72.131.198" dst_port="443"/>
        </slice>
        <from usec="0" sec="1612242824"/>
        <to usec="0" sec="1612242856"/>
    </anomaly>
    <anomaly type="suspicious" value="0.786408,1.14324,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.34.242.198" dst_ip="198.61.54.243" src_port="56365" dst_port="8801"/>
        </slice>
        <from usec="0" sec="1612242560"/>
        <to usec="0" sec="1612242808"/>
    </anomaly>
    <anomaly type="suspicious" value="0.786408,1.14324,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.34.126.245" dst_ip="114.130.61.64" src_port="58505" dst_port="9000"/>
        </slice>
        <from usec="0" sec="1612242180"/>
        <to usec="0" sec="1612242874"/>
    </anomaly>
    <anomaly type="suspicious" value="0.786408,1.14324,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.34.207.146" dst_ip="126.39.222.147" src_port="52408" dst_port="63302"/>
        </slice>
        <from usec="0" sec="1612242530"/>
        <to usec="0" sec="1612242778"/>
    </anomaly>
    <anomaly type="suspicious" value="0.786408,1.14324,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="150.197.243.50" dst_ip="8.57.94.136" src_port="49979" dst_port="80"/>
        </slice>
        <from usec="0" sec="1612242512"/>
        <to usec="0" sec="1612242519"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20445,1.30931,504,0 1 1 1 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="18.77.81.211" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.786408,1.14324,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.34.125.191" dst_ip="31.230.75.123" src_port="59343" dst_port="443"/>
        </slice>
        <from usec="0" sec="1612242704"/>
        <to usec="0" sec="1612242823"/>
    </anomaly>
    <anomaly type="suspicious" value="0.786408,1.14324,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.55.171.207" dst_port="443"/>
        </slice>
        <from usec="0" sec="1612242500"/>
        <to usec="0" sec="1612242895"/>
    </anomaly>
    <anomaly type="suspicious" value="0.786408,1.14324,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.178.185.214" dst_ip="52.48.71.170" src_port="45729" dst_port="3480"/>
        </slice>
        <from usec="0" sec="1612242534"/>
        <to usec="0" sec="1612242877"/>
    </anomaly>
    <anomaly type="suspicious" value="0.786408,1.14324,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.34.126.43" dst_ip="150.197.240.230" src_port="54154" dst_port="9000"/>
        </slice>
        <from usec="0" sec="1612242285"/>
        <to usec="0" sec="1612242873"/>
    </anomaly>
    <anomaly type="suspicious" value="0.786408,1.14324,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.34.124.161" dst_ip="18.72.131.193" src_port="56746" dst_port="57654"/>
        </slice>
        <from usec="0" sec="1612242661"/>
        <to usec="0" sec="1612242673"/>
    </anomaly>
    <anomaly type="suspicious" value="0.786408,1.14324,999,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="192.206.41.225" src_port="5631"/>
        </slice>
        <from usec="0" sec="1612242662"/>
        <to usec="0" sec="1612242673"/>
    </anomaly>
    <anomaly type="suspicious" value="0.786408,1.14324,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.34.125.103" dst_ip="180.85.48.105" dst_port="443"/>
        </slice>
        <from usec="0" sec="1612242512"/>
        <to usec="0" sec="1612242513"/>
    </anomaly>
    <anomaly type="suspicious" value="1.21766,1.32878,504,1 1 0 0 0 0 1 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.34.159.125" dst_ip="52.5.238.8" dst_port="443"/>
            <filter src_ip="163.34.159.125" dst_ip="18.76.9.222" dst_port="443"/>
            <filter src_ip="163.34.159.125" dst_ip="150.197.243.93" dst_port="443"/>
        </slice>
        <from usec="0" sec="1612242500"/>
        <to usec="0" sec="1612242825"/>
    </anomaly>
    <anomaly type="suspicious" value="0.786408,1.14324,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.34.227.31" dst_ip="54.253.5.22"/>
            <filter src_ip="163.34.227.31" dst_ip="18.72.131.198" dst_port="3478"/>
        </slice>
        <from usec="0" sec="1612242473"/>
        <to usec="0" sec="1612242862"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,999,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="115.60.77.76" dst_port="3389"/>
        </slice>
        <from usec="0" sec="1612242258"/>
        <to usec="0" sec="1612242284"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="89.3.124.248" src_port="40184" dst_port="123"/>
        </slice>
        <from usec="0" sec="1612242240"/>
        <to usec="0" sec="1612242245"/>
    </anomaly>
    <anomaly type="suspicious" value="0.774606,1.1531,010,1 1 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="194.249.83.138" src_port="49032" dst_port="42351"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242828"/>
    </anomaly>
    <anomaly type="suspicious" value="0.786408,1.14324,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="51.180.215.19" src_port="4040" dst_port="5075"/>
            <filter src_ip="51.180.215.19" src_port="4040" dst_port="5080"/>
            <filter src_ip="51.180.215.19" src_port="4040" dst_port="5056"/>
        </slice>
        <from usec="0" sec="1612242153"/>
        <to usec="0" sec="1612242504"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.254.121.211" dst_port="5351"/>
        </slice>
        <from usec="0" sec="1612242143"/>
        <to usec="0" sec="1612242532"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="150.14.186.141" dst_port="1433"/>
            <filter src_ip="150.14.186.141" dst_port="445"/>
        </slice>
        <from usec="0" sec="1612242751"/>
        <to usec="0" sec="1612242755"/>
    </anomaly>
    <anomaly type="suspicious" value="0.786408,1.14324,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="61.70.124.138" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1612242008"/>
        <to usec="0" sec="1612242012"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="123.10.201.107" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1612242278"/>
        <to usec="0" sec="1612242279"/>
    </anomaly>
    <anomaly type="suspicious" value="0.786408,1.14324,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="60.67.93.101" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1612242244"/>
        <to usec="0" sec="1612242246"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="212.59.137.24" dst_port="445"/>
        </slice>
        <from usec="0" sec="1612242186"/>
        <to usec="0" sec="1612242188"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="183.184.202.168" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1612242740"/>
        <to usec="0" sec="1612242744"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="101.112.74.177" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1612242159"/>
        <to usec="0" sec="1612242166"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="103.96.192.173" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1612242425"/>
        <to usec="0" sec="1612242427"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="122.130.182.71" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1612242488"/>
        <to usec="0" sec="1612242490"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="150.197.244.156" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1612242879"/>
        <to usec="0" sec="1612242883"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="36.89.146.253" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1612242278"/>
        <to usec="0" sec="1612242279"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07745,1.3087,010,1 1 1 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="163.34.127.253" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1612242481"/>
        <to usec="0" sec="1612242830"/>
    </anomaly>
    <anomaly type="suspicious" value="0.786408,1.14324,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="0.0.0.0" dst_port="445"/>
        </slice>
        <from usec="0" sec="1612242031"/>
        <to usec="0" sec="1612242034"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="182.173.222.211" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1612242209"/>
        <to usec="0" sec="1612242210"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="91.19.240.161" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1612242013"/>
        <to usec="0" sec="1612242014"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="175.129.98.96" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1612242426"/>
        <to usec="0" sec="1612242430"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="42.222.130.147" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1612242181"/>
        <to usec="0" sec="1612242183"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="123.241.224.61" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1612242027"/>
        <to usec="0" sec="1612242028"/>
    </anomaly>
    <anomaly type="suspicious" value="0.786408,1.14324,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="198.61.64.189" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1612242737"/>
        <to usec="0" sec="1612242738"/>
    </anomaly>
    <anomaly type="suspicious" value="0.786408,1.14324,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="121.43.90.133" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1612242830"/>
        <to usec="0" sec="1612242834"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="46.46.200.125" dst_port="1433"/>
            <filter src_ip="46.46.200.125" dst_port="445"/>
        </slice>
        <from usec="0" sec="1612242658"/>
        <to usec="0" sec="1612242664"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="112.122.23.116" dst_port="445"/>
        </slice>
        <from usec="0" sec="1612242366"/>
        <to usec="0" sec="1612242369"/>
    </anomaly>
    <anomaly type="suspicious" value="0.786408,1.14324,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="182.166.54.103" dst_port="445"/>
        </slice>
        <from usec="0" sec="1612242112"/>
        <to usec="0" sec="1612242133"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="218.126.227.95" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1612242098"/>
        <to usec="0" sec="1612242104"/>
    </anomaly>
    <anomaly type="suspicious" value="0.786408,1.14324,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="182.129.78.79" dst_port="445"/>
        </slice>
        <from usec="0" sec="1612242468"/>
        <to usec="0" sec="1612242469"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="163.34.161.150" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1612242278"/>
        <to usec="0" sec="1612242279"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="113.209.126.67" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1612242853"/>
        <to usec="0" sec="1612242855"/>
    </anomaly>
    <anomaly type="suspicious" value="0.786408,1.14324,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="112.179.133.187" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1612242237"/>
        <to usec="0" sec="1612242240"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="80.187.191.61" dst_port="445"/>
        </slice>
        <from usec="0" sec="1612242107"/>
        <to usec="0" sec="1612242109"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="49.41.38.2" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1612242253"/>
        <to usec="0" sec="1612242254"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="178.191.34.223" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1612242439"/>
        <to usec="0" sec="1612242441"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="113.208.53.21" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1612242072"/>
        <to usec="0" sec="1612242076"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="114.1.194.20" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1612242082"/>
        <to usec="0" sec="1612242083"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="106.122.56.61" dst_port="445"/>
        </slice>
        <from usec="0" sec="1612242117"/>
        <to usec="0" sec="1612242118"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07745,1.3087,010,1 1 1 1 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="106.124.108.61" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1612242007"/>
        <to usec="0" sec="1612242824"/>
    </anomaly>
    <anomaly type="suspicious" value="0.786408,1.14324,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="60.81.174.10" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1612242516"/>
        <to usec="0" sec="1612242519"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.254.121.212" dst_port="5351"/>
        </slice>
        <from usec="0" sec="1612242285"/>
        <to usec="0" sec="1612242896"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.254.121.213" dst_port="5351"/>
        </slice>
        <from usec="0" sec="1612242180"/>
        <to usec="0" sec="1612242842"/>
    </anomaly>
    <anomaly type="suspicious" value="0.786408,1.14324,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="59.82.49.214" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1612242627"/>
        <to usec="0" sec="1612242629"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="213.253.56.241" dst_port="445"/>
        </slice>
        <from usec="0" sec="1612242833"/>
        <to usec="0" sec="1612242836"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,999,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="212.177.84.63" dst_port="3389"/>
        </slice>
        <from usec="0" sec="1612242868"/>
        <to usec="0" sec="1612242900"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="112.122.26.31" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1612242457"/>
        <to usec="0" sec="1612242458"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.201.95.108" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1612242515"/>
        <to usec="0" sec="1612242650"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07745,1.3087,010,1 1 1 1 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="46.153.166.203" dst_port="445"/>
        </slice>
        <from usec="0" sec="1612242001"/>
        <to usec="0" sec="1612242898"/>
    </anomaly>
    <anomaly type="suspicious" value="1.2516,1.30793,504,1 1 1 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="202.254.54.49" dst_ip="163.34.161.86" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="188.128.49.235" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1612242445"/>
        <to usec="0" sec="1612242786"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="193.26.140.149" src_port="5200" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1612242466"/>
        <to usec="0" sec="1612242468"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="219.209.34.141" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1612242638"/>
        <to usec="0" sec="1612242640"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="148.88.188.193" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1612242133"/>
        <to usec="0" sec="1612242148"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="116.228.53.60" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1612242726"/>
        <to usec="0" sec="1612242729"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="59.172.43.115" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1612242703"/>
        <to usec="0" sec="1612242705"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="49.210.30.142" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1612242220"/>
        <to usec="0" sec="1612242221"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="119.247.243.139" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1612242250"/>
        <to usec="0" sec="1612242252"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="164.123.135.72" dst_port="445"/>
        </slice>
        <from usec="0" sec="1612242612"/>
        <to usec="0" sec="1612242615"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="103.101.55.241"/>
        </slice>
        <from usec="0" sec="1612242862"/>
        <to usec="0" sec="1612242864"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="14.10.22.14" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1612242706"/>
        <to usec="0" sec="1612242708"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="74.120.44.215" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1612242346"/>
        <to usec="0" sec="1612242347"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="212.177.84.63" src_port="3389"/>
        </slice>
        <from usec="0" sec="1612242878"/>
        <to usec="0" sec="1612242882"/>
    </anomaly>
    <anomaly type="suspicious" value="0.753974,1.07603,504,0 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="52.4.252.109" src_port="443"/>
            <filter src_ip="23.161.246.138" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.935893,1.11605,504,1 0 0 1 0 0 0 0 0 0 1 0,mptmp">
        <slice>
            <filter dst_ip="163.34.125.102"/>
            <filter dst_ip="163.34.142.43" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07745,1.3087,504,1 1 1 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.55.168.58" dst_port="443"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242883"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="124.181.53.162" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1612242151"/>
        <to usec="0" sec="1612242154"/>
    </anomaly>
    <anomaly type="suspicious" value="0.916263,1.24069,010,1 0 1 1 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="163.34.240.107" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1612242004"/>
        <to usec="0" sec="1612242641"/>
    </anomaly>
    <anomaly type="suspicious" value="1.06907,1.27079,504,1 0 0 1 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.34.161.106" dst_ip="202.254.54.49" dst_port="443"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242738"/>
    </anomaly>
    <anomaly type="suspicious" value="1.21766,1.32878,010,1 1 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="192.206.41.225" dst_port="5631"/>
        </slice>
        <from usec="0" sec="1612242630"/>
        <to usec="0" sec="1612242676"/>
    </anomaly>
    <anomaly type="suspicious" value="1.42953,1.46585,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="208.6.103.238" dst_port="443"/>
        </slice>
        <from usec="0" sec="1612242630"/>
        <to usec="0" sec="1612242676"/>
    </anomaly>
    <anomaly type="suspicious" value="0.774606,1.1531,504,1 1 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="202.55.171.4" dst_port="443"/>
            <filter dst_ip="52.51.160.170" dst_port="443"/>
            <filter src_ip="202.55.168.36" dst_ip="52.51.164.136" dst_port="443"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242883"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="125.64.33.136" dst_port="32410"/>
        </slice>
        <from usec="0" sec="1612242772"/>
        <to usec="0" sec="1612242776"/>
    </anomaly>
    <anomaly type="suspicious" value="0.774606,1.1531,504,1 1 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.55.168.194" dst_port="443"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242883"/>
    </anomaly>
    <anomaly type="suspicious" value="1.48538,1.50762,010,1 0 1 1 1 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="188.84.117.162" src_port="37443" dst_port="22"/>
        </slice>
        <from usec="0" sec="1612242019"/>
        <to usec="0" sec="1612242826"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08596,1.30002,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="87.250.32.75" dst_port="9999"/>
        </slice>
        <from usec="0" sec="1612242723"/>
        <to usec="0" sec="1612242816"/>
    </anomaly>
    <anomaly type="suspicious" value="1.25162,1.35947,901,0 0 0 0 1 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242828"/>
    </anomaly>
    <anomaly type="suspicious" value="1.25162,1.35947,901,0 0 0 0 1 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242828"/>
    </anomaly>
    <anomaly type="suspicious" value="1.24423,1.36778,010,0 0 0 1 1 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="129.114.217.157" src_port="32683" dst_port="23"/>
            <filter src_ip="129.114.217.157" src_port="24691" dst_port="23"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242648"/>
    </anomaly>
    <anomaly type="suspicious" value="1.24423,1.36778,004,0 0 0 1 1 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="175.176.172.138" dst_ip="202.254.54.63" dst_port="445"/>
            <filter src_ip="175.176.172.138" dst_ip="202.254.54.89" dst_port="445"/>
            <filter src_ip="175.176.172.138" dst_ip="202.254.54.88" dst_port="445"/>
            <filter src_ip="175.176.172.138" dst_ip="202.254.54.90" dst_port="445"/>
        </slice>
        <from usec="0" sec="1612242003"/>
        <to usec="0" sec="1612242646"/>
    </anomaly>
    <anomaly type="suspicious" value="1.24423,1.36778,004,0 0 0 1 1 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="125.165.118.7" dst_ip="202.254.51.106" dst_port="445"/>
            <filter src_ip="125.165.118.7" dst_ip="202.254.51.105" dst_port="445"/>
            <filter src_ip="125.165.118.7" dst_ip="202.254.51.104" dst_port="445"/>
        </slice>
        <from usec="0" sec="1612242011"/>
        <to usec="0" sec="1612242647"/>
    </anomaly>
    <anomaly type="suspicious" value="1.24423,1.36778,004,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="202.254.50.254" dst_port="445"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242727"/>
    </anomaly>
    <anomaly type="suspicious" value="1.24423,1.36778,502,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.178.177.69" dst_ip="106.74.232.163" src_port="22"/>
        </slice>
        <from usec="0" sec="1612242002"/>
        <to usec="0" sec="1612242707"/>
    </anomaly>
    <anomaly type="suspicious" value="1.24423,1.36778,010,0 0 0 1 1 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="45.157.164.185"/>
        </slice>
        <from usec="0" sec="1612242014"/>
        <to usec="0" sec="1612242615"/>
    </anomaly>
    <anomaly type="suspicious" value="1.24423,1.36778,010,0 0 0 1 1 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="2.230.214.240" dst_port="139"/>
            <filter src_ip="120.155.139.248" dst_ip="163.34.4.155"/>
            <filter src_ip="120.155.139.248" dst_port="445"/>
            <filter src_ip="120.155.139.248" dst_port="139"/>
            <filter dst_ip="163.34.4.155" dst_port="139"/>
            <filter src_ip="2.230.214.240" dst_ip="163.34.4.155" dst_port="445"/>
        </slice>
        <from usec="0" sec="1612242001"/>
        <to usec="0" sec="1612242825"/>
    </anomaly>
    <anomaly type="suspicious" value="1.24423,1.36778,999,0 0 0 1 1 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.178.177.119" dst_port="53"/>
        </slice>
        <from usec="0" sec="1612242003"/>
        <to usec="0" sec="1612242824"/>
    </anomaly>
    <anomaly type="suspicious" value="1.24423,1.36778,502,0 0 0 1 1 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="163.34.228.97" dst_ip="122.77.209.103" src_port="22"/>
        </slice>
        <from usec="0" sec="1612242357"/>
        <to usec="0" sec="1612242817"/>
    </anomaly>
    <anomaly type="suspicious" value="1.24423,1.36778,504,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.34.84.231" dst_ip="52.80.46.227" src_port="62934" dst_port="443"/>
        </slice>
        <from usec="0" sec="1612242693"/>
        <to usec="0" sec="1612242826"/>
    </anomaly>
    <anomaly type="suspicious" value="1.02252,1.26328,999,0 0 0 1 0 0 1 0 0 0 0 0,DDoSUDP">
        <slice>
            <filter dst_ip="38.3.18.224" dst_port="53"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242828"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03149,1.25428,999,0 0 0 0 0 0 1 0 0 0 0 0,DDoSUDP">
        <slice>
            <filter dst_ip="38.3.18.225"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242046"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03149,1.25428,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.178.191.100"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242046"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03149,1.25428,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.178.187.93"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242046"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03149,1.25428,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="91.121.116.88" dst_ip="133.122.23.149" dst_port="3283"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242046"/>
    </anomaly>
    <anomaly type="suspicious" value="1.02252,1.26328,999,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="211.187.100.67" src_port="123" dst_port="123"/>
            <filter dst_ip="203.178.191.49" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242827"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03149,1.25428,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.178.178.13"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242046"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03149,1.25428,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="81.233.79.152" dst_ip="163.34.160.202" dst_port="53"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242856"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03149,1.25428,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="189.236.90.68" dst_ip="203.178.188.163" dst_port="1194"/>
            <filter src_ip="151.198.213.102" dst_ip="203.178.188.163" dst_port="1194"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242181"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03149,1.25428,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="104.248.216.142" src_port="41973" dst_port="33022"/>
        </slice>
        <from usec="0" sec="1612242180"/>
        <to usec="0" sec="1612242226"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03149,1.25428,012,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="128.196.29.232" dst_port="6001"/>
        </slice>
        <from usec="0" sec="1612242360"/>
        <to usec="0" sec="1612242406"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03149,1.25428,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="194.249.83.138" src_port="42351" dst_port="49032"/>
        </slice>
        <from usec="0" sec="1612242540"/>
        <to usec="0" sec="1612242586"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03149,1.25428,053,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="66.77.244.98" src_port="179" dst_port="80"/>
        </slice>
        <from usec="0" sec="1612242540"/>
        <to usec="0" sec="1612242586"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03149,1.25428,054,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="66.77.244.98" src_port="179" dst_port="443"/>
        </slice>
        <from usec="0" sec="1612242540"/>
        <to usec="0" sec="1612242586"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03149,1.25428,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_port="14073" dst_port="23"/>
        </slice>
        <from usec="0" sec="1612242540"/>
        <to usec="0" sec="1612242586"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03149,1.25428,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="192.206.16.29"/>
        </slice>
        <from usec="0" sec="1612242630"/>
        <to usec="0" sec="1612242676"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03149,1.25428,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="134.238.136.80"/>
        </slice>
        <from usec="0" sec="1612242630"/>
        <to usec="0" sec="1612242676"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03149,1.25428,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="101.115.246.39"/>
        </slice>
        <from usec="0" sec="1612242630"/>
        <to usec="0" sec="1612242676"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03149,1.25428,504,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="31.230.75.82"/>
        </slice>
        <from usec="0" sec="1612242810"/>
        <to usec="0" sec="1612242856"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03149,1.25428,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="142.38.123.12"/>
        </slice>
        <from usec="0" sec="1612242810"/>
        <to usec="0" sec="1612242856"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03149,1.25428,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="213.208.28.30" dst_ip="133.122.23.149" dst_port="3283"/>
            <filter src_ip="138.220.0.230" dst_ip="133.122.23.149" dst_port="3283"/>
            <filter src_ip="185.224.14.89" dst_ip="133.122.23.149" dst_port="3283"/>
            <filter src_ip="138.220.0.228" dst_ip="133.122.23.149" dst_port="3283"/>
        </slice>
        <from usec="0" sec="1612242810"/>
        <to usec="0" sec="1612242856"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03149,1.25428,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="133.122.121.145"/>
        </slice>
        <from usec="0" sec="1612242810"/>
        <to usec="0" sec="1612242856"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03149,1.25428,504,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="13.171.241.240" dst_port="443"/>
        </slice>
        <from usec="0" sec="1612242810"/>
        <to usec="0" sec="1612242856"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03149,1.25428,504,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="18.76.9.222"/>
        </slice>
        <from usec="0" sec="1612242810"/>
        <to usec="0" sec="1612242856"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03149,1.25428,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="155.97.2.121"/>
        </slice>
        <from usec="0" sec="1612242855"/>
        <to usec="0" sec="1612242901"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03149,1.25428,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="134.238.136.80" src_port="42872" dst_port="6002"/>
        </slice>
        <from usec="0" sec="1612242855"/>
        <to usec="0" sec="1612242901"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07968,1.11676,504,0 0 0 1 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="23.174.55.58" dst_ip="202.57.49.125" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.766095,1.06545,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="133.253.161.68"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.766095,1.06545,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="13.209.158.130"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.753974,1.07603,010,0 0 0 1 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="143.96.237.51" src_port="61953" dst_port="9096"/>
            <filter src_ip="167.179.237.236" src_port="46869" dst_port="3165"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.766095,1.06545,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="149.132.174.40"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.766095,1.06545,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="163.34.228.205"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.766095,1.06545,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="163.34.227.83"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.753974,1.07603,010,0 0 0 1 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="174.133.208.189" src_port="55835" dst_port="8280"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.766095,1.06545,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="178.111.215.144"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.827205,1.07435,999,1 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="198.61.66.149" src_port="8801"/>
            <filter src_ip="198.61.66.149" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.815993,1.08484,504,1 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="23.158.20.244" src_port="443"/>
            <filter dst_ip="163.34.160.209" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.766095,1.06545,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="23.189.0.137"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.766095,1.06545,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="121.114.49.182"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.766095,1.06545,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="126.15.13.196"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.766095,1.06545,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="157.181.33.165"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07968,1.11676,504,0 0 0 1 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="13.208.9.14" dst_ip="163.34.124.110" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08818,1.10657,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.34.127.33" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.945685,1.10586,504,1 0 0 0 0 0 0 0 0 0 1 0,mptpla">
        <slice>
            <filter dst_ip="163.34.161.47" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.753974,1.07603,504,0 0 0 1 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.34.142.43" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.766095,1.06545,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.34.160.152" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.766095,1.06545,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="188.88.131.125"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.766095,1.06545,502,0 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="115.0.44.3" dst_ip="202.57.39.197"/>
            <filter src_ip="115.0.44.3" dst_port="22"/>
            <filter dst_ip="202.57.39.197" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.753974,1.07603,004,0 0 0 1 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="202.254.51.249" dst_port="445"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.766095,1.06545,502,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="206.190.215.63" dst_ip="203.178.187.124" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.753974,1.07603,503,0 0 0 1 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.178.188.175" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.12387,1.12525,503,1 0 0 1 0 0 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="38.3.18.199" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.753974,1.07603,503,0 0 0 1 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="38.3.18.200" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.766095,1.06545,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="52.51.164.253"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.766095,1.06545,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="69.11.28.211"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.766095,1.06545,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="91.70.199.144"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08818,1.10657,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="47.55.176.37" dst_ip="163.34.161.193" src_port="80"/>
            <filter src_ip="47.55.176.37" dst_ip="163.34.160.110" src_port="443"/>
            <filter src_ip="47.55.176.37" dst_ip="163.34.125.107" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08818,1.10657,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.34.251.144" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08818,1.10657,504,0 0 0 0 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter dst_ip="163.34.245.97" src_port="443"/>
            <filter dst_ip="163.34.127.8" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08818,1.10657,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.34.125.131" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08818,1.10657,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="98.160.148.121" src_port="443"/>
            <filter dst_ip="98.160.148.121" src_port="5004"/>
            <filter dst_ip="98.160.148.121" src_port="33434"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07968,1.11676,504,0 0 0 1 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.34.224.20" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.945685,1.10586,504,1 0 0 0 0 0 0 0 0 0 1 0,mptp">
        <slice>
            <filter dst_ip="163.34.160.152" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.02252,1.26328,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.57.10.84" src_port="53"/>
        </slice>
        <from usec="0" sec="1612242069"/>
        <to usec="0" sec="1612242637"/>
    </anomaly>
    <anomaly type="anomalous" value="1.48091,1.22645,010,1 0 0 0 0 0 0 0 0 1 1 1,poscaSYN">
        <slice>
            <filter src_ip="167.132.76.172" dst_ip="163.34.238.61" src_port="32766"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.98483,1.58724,999,1 1 1 0 0 0 1 0 0 1 1 1,ntscUDPOther">
        <slice>
            <filter src_ip="77.246.19.49" src_port="5073" dst_port="45060"/>
            <filter src_ip="77.246.19.49" src_port="5073" dst_port="25060"/>
            <filter src_ip="77.246.19.49" src_port="5073" dst_port="15060"/>
            <filter src_ip="77.246.19.49" src_port="5073" dst_port="35060"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.76016,2.18591,011,1 1 0 1 1 1 1 0 0 1 1 1,ptmpla">
        <slice>
            <filter src_ip="163.34.238.61" dst_ip="91.23.161.44" dst_port="42303"/>
            <filter src_ip="163.34.238.61" dst_ip="167.132.76.172" dst_port="32766"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.85996,2.27184,999,1 1 1 1 1 1 1 0 0 1 1 1,ntscUDPOther">
        <slice>
            <filter src_ip="185.255.112.83" src_port="56275" dst_port="123"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.5857,1.29521,504,1 1 0 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="163.34.159.42" dst_ip="13.179.168.207"/>
            <filter src_ip="163.34.32.239" dst_ip="52.239.183.145"/>
            <filter src_ip="163.34.32.239" dst_port="443"/>
            <filter dst_ip="13.179.168.207" dst_port="443"/>
            <filter src_ip="163.34.159.42" dst_ip="52.239.183.145" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.70465,2.16854,504,1 1 1 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="31.230.75.126" dst_port="443"/>
            <filter dst_ip="13.171.213.12" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.21945,1.19187,010,0 1 0 1 0 0 0 0 0 1 1 0,ntscSYN">
        <slice>
            <filter src_ip="188.84.117.162" src_port="37443" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.17419,1.70074,010,1 1 0 1 1 0 1 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="185.238.165.75" src_port="55477"/>
            <filter src_ip="185.174.93.114" src_port="52571"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.25874,1.19983,503,1 1 0 1 0 0 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.178.182.80" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.53632,2.0362,504,1 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_port="443"/>
            <filter src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.58988,1.56407,010,1 1 1 1 1 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="115.60.77.76" src_port="3389"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242648"/>
    </anomaly>
    <anomaly type="anomalous" value="2.29956,1.80986,010,1 1 1 1 1 0 1 0 0 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="14.145.10.226" dst_port="3306"/>
            <filter src_ip="192.206.16.29" dst_port="5631"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.44128,1.22792,504,0 0 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="203.178.176.21" src_port="443"/>
            <filter dst_ip="163.34.225.161" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.20117,1.93765,503,0 0 0 0 1 1 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="38.3.18.198" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.75816,1.73212,901,0 0 0 0 0 1 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242828"/>
    </anomaly>
    <anomaly type="anomalous" value="1.75816,1.73212,901,0 0 0 0 0 1 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242828"/>
    </anomaly>
    <anomaly type="anomalous" value="2.32894,1.96633,504,0 0 0 1 1 1 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.34.238.100" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="4.61812,4.27128,999,0 0 0 0 0 0 1 1 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="81.233.79.152" dst_ip="203.178.183.34" dst_port="53"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242676"/>
    </anomaly>
    <anomaly type="anomalous" value="2.53632,2.0362,503,1 0 0 1 1 1 0 0 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="163.34.157.27" src_port="80"/>
            <filter dst_ip="163.34.157.27" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.75366,1.43549,504,1 1 1 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="163.34.238.204" dst_port="443"/>
            <filter dst_ip="150.197.244.234" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.44128,1.22792,999,0 0 0 1 0 0 0 0 0 1 1 1,ptpposcaUDP">
        <slice>
            <filter src_ip="203.178.183.34" dst_ip="81.233.79.152" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.26604,1.19035,999,1 1 0 0 0 0 0 0 0 1 1 0,ipv4gretun">
        <slice>
            <filter src_ip="204.197.49.225" dst_ip="203.178.182.247"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.44766,1.21866,504,0 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="202.55.168.252" dst_ip="13.171.87.14" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.13204,1.11514,504,1 0 0 0 0 0 0 0 0 1 1 0,mptpla">
        <slice>
            <filter src_ip="13.171.8.141" dst_ip="13.30.96.228" src_port="55023" dst_port="443"/>
            <filter src_ip="13.171.8.141" dst_ip="13.30.96.228" src_port="55018" dst_port="443"/>
            <filter src_ip="163.34.215.216" dst_ip="13.30.96.228" src_port="51972" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.88188,1.50348,999,1 0 0 1 1 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="54.253.5.22"/>
            <filter dst_ip="163.34.160.229" src_port="443"/>
            <filter dst_ip="163.34.124.7" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.53632,2.0362,504,1 0 0 1 1 1 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.34.225.148" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.44128,1.22792,503,0 0 0 1 0 0 0 0 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="163.34.7.13" src_port="80"/>
            <filter dst_ip="163.34.7.13" dst_port="2222"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.13204,1.11514,504,1 0 0 0 0 0 0 0 0 1 1 0,mptpla">
        <slice>
            <filter src_ip="1.129.65.126" dst_ip="203.178.185.219" src_port="53"/>
            <filter src_ip="152.24.153.17" dst_ip="203.178.185.219" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.5857,1.29521,999,1 1 0 0 0 0 0 0 0 1 1 1,ipv4gretun">
        <slice>
            <filter src_ip="203.178.182.247" dst_ip="206.231.20.231"/>
            <filter src_ip="203.178.182.247" dst_ip="204.197.49.225"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.30004,1.2195,503,0 0 0 1 0 0 0 0 0 0 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="38.3.18.198" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.47467,1.23565,503,1 0 0 1 0 0 0 0 0 1 1 1,ptmpHTTP">
        <slice>
            <filter src_ip="203.178.180.24" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.47467,1.23565,504,1 0 0 1 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="202.57.49.125" src_port="443"/>
            <filter dst_ip="202.57.49.125" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.70132,2.14588,503,1 0 0 1 1 1 1 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="117.19.24.239" src_port="80"/>
            <filter dst_ip="203.178.191.84" dst_port="161"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.51705,2.03152,504,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="52.239.183.145" dst_ip="163.34.159.42"/>
            <filter src_ip="52.239.183.145" src_port="443"/>
            <filter dst_ip="163.34.159.42" src_port="443"/>
            <filter dst_ip="163.34.68.57" src_port="443"/>
            <filter dst_ip="163.34.127.220" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.68324,2.14144,010,0 0 0 1 1 1 1 0 0 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="150.197.243.50" dst_port="5432"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.44128,1.22792,504,0 0 0 1 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.34.161.0" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.44128,1.22792,504,0 0 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="162.58.87.136" src_port="443"/>
            <filter dst_ip="163.34.247.107" src_port="443"/>
            <filter dst_ip="163.34.247.107"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.44128,1.22792,504,0 0 0 1 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.34.126.128" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.44766,1.21866,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.34.160.211" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.44766,1.21866,504,0 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="52.233.90.38" dst_ip="163.34.245.97" src_port="443" dst_port="63231"/>
            <filter src_ip="52.233.90.38" dst_ip="163.34.245.97" src_port="443" dst_port="63230"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.44766,1.21866,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.34.124.239" src_port="443"/>
            <filter dst_ip="163.34.124.239" src_port="5004"/>
            <filter dst_ip="163.34.124.239" src_port="33434"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.51705,2.03152,503,0 0 0 1 1 1 0 0 0 1 1 1,alphflHTTP">
        <slice>
            <filter src_ip="77.84.247.34" dst_ip="163.34.126.223" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.44128,1.22792,999,0 0 0 1 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.34.160.217" dst_port="6881"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.44766,1.21866,504,0 0 0 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="163.34.157.24" dst_ip="13.208.9.14"/>
            <filter src_ip="163.34.157.24" dst_port="443"/>
            <filter dst_ip="13.208.9.14" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.72045,1.39421,999,0 0 0 0 0 0 1 0 0 1 1 1,mptpla">
        <slice>
            <filter src_ip="133.253.119.27" dst_ip="151.198.213.102" src_port="1194"/>
            <filter src_ip="203.178.191.100" dst_ip="151.198.213.102" src_port="1194"/>
            <filter src_ip="203.178.188.163" dst_ip="151.198.213.102" src_port="1194"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.44766,1.21866,504,0 0 0 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.34.160.184" src_port="443"/>
            <filter dst_ip="163.34.127.65" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.44766,1.21866,504,0 0 0 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="203.178.174.243" src_port="443"/>
            <filter dst_ip="163.34.124.82" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.72045,1.39421,999,0 0 0 0 0 0 1 0 0 1 1 1,mptpla">
        <slice>
            <filter src_ip="133.253.119.27" dst_ip="174.250.172.64" src_port="1194"/>
            <filter src_ip="203.178.191.100" dst_ip="174.250.172.64" src_port="1194"/>
            <filter src_ip="203.178.188.163" dst_ip="174.250.172.64" src_port="1194"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="4.81903,4.31444,999,0 0 0 0 0 0 1 1 0 1 1 1,mptpla">
        <slice>
            <filter src_ip="203.178.191.100" dst_ip="189.236.90.68" src_port="1194"/>
            <filter src_ip="133.253.119.27" dst_ip="189.236.90.68" src_port="1194"/>
            <filter src_ip="203.178.188.163" dst_ip="189.236.90.68" src_port="1194"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.44766,1.21866,999,0 0 0 0 0 0 0 0 0 1 1 1,mptpla">
        <slice>
            <filter src_ip="203.178.191.100" dst_ip="5.175.16.28" src_port="1194"/>
            <filter src_ip="133.253.119.27" dst_ip="5.175.16.28" src_port="1194"/>
            <filter src_ip="203.178.188.163" dst_ip="5.175.16.28" src_port="1194"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.44128,1.22792,504,0 0 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_port="443"/>
            <filter src_ip="150.197.243.50" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.44128,1.22792,504,0 0 0 1 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.34.215.216" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.44128,1.22792,504,0 0 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.34.127.179" src_port="443"/>
            <filter dst_ip="163.34.161.86" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.44766,1.21866,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.34.125.214" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.42477,1.30607,010,0 0 0 1 0 0 1 0 0 1 1 0,ntscSYN">
        <slice>
            <filter src_ip="45.141.87.221" src_port="40482" dst_port="2375"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
