<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="notice" value="0.545053,1.0647,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="31.230.75.126" dst_ip="163.34.124.91" src_port="443" dst_port="9580" proto="tcp"/>
        </slice>
        <from usec="0" sec="1612242871"/>
        <to usec="0" sec="1612242873"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.34.125.126" dst_ip="163.34.157.27" src_port="58324" dst_port="9000" proto="udp"/>
        </slice>
        <from usec="0" sec="1612242566"/>
        <to usec="0" sec="1612242823"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="198.61.52.137" dst_ip="163.34.161.84" src_port="8801" dst_port="59794" proto="udp"/>
        </slice>
        <from usec="0" sec="1612242391"/>
        <to usec="0" sec="1612242392"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.253.87.237" dst_ip="72.75.41.31" src_port="4501" dst_port="55395" proto="udp"/>
        </slice>
        <from usec="0" sec="1612242556"/>
        <to usec="0" sec="1612242592"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="114.130.61.18" dst_ip="163.34.207.52" src_port="9000" dst_port="54832" proto="udp"/>
        </slice>
        <from usec="0" sec="1612242425"/>
        <to usec="0" sec="1612242426"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.34.157.27" dst_ip="163.34.68.29" src_port="9000" proto="udp"/>
        </slice>
        <from usec="0" sec="1612242547"/>
        <to usec="0" sec="1612242594"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="138.111.10.157" dst_ip="163.34.131.243" src_port="443" dst_port="60256" proto="tcp"/>
        </slice>
        <from usec="0" sec="1612242726"/>
        <to usec="0" sec="1612242727"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.34.125.87" dst_ip="150.197.243.93" src_port="52508" dst_port="9000" proto="udp"/>
        </slice>
        <from usec="0" sec="1612242530"/>
        <to usec="0" sec="1612242778"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="52.5.129.42" dst_ip="163.34.225.4"/>
        </slice>
        <from usec="0" sec="1612242259"/>
        <to usec="0" sec="1612242267"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.34.161.84" dst_ip="198.61.52.137" src_port="59794" dst_port="8801" proto="udp"/>
        </slice>
        <from usec="0" sec="1612242274"/>
        <to usec="0" sec="1612242847"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.34.124.176" dst_ip="54.253.5.22" src_port="63369" dst_port="12627" proto="udp"/>
        </slice>
        <from usec="0" sec="1612242385"/>
        <to usec="0" sec="1612242654"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="23.174.54.167" dst_ip="202.57.10.117" src_port="443" dst_port="38855" proto="tcp"/>
        </slice>
        <from usec="0" sec="1612242500"/>
        <to usec="0" sec="1612242694"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.34.124.161" dst_ip="18.72.131.192" src_port="62774" dst_port="34197" proto="udp"/>
        </slice>
        <from usec="0" sec="1612242387"/>
        <to usec="0" sec="1612242895"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.55.168.59" dst_ip="52.51.183.233" src_port="44018" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1612242098"/>
        <to usec="0" sec="1612242830"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.34.160.35" dst_ip="167.132.251.140" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1612242587"/>
        <to usec="0" sec="1612242589"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.34.124.165" dst_ip="13.211.87.125" src_port="51627" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1612242278"/>
        <to usec="0" sec="1612242657"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.55.168.57" dst_ip="52.51.183.245" src_port="10432" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1612242098"/>
        <to usec="0" sec="1612242830"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.34.225.4" dst_ip="52.5.129.42" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1612242545"/>
        <to usec="0" sec="1612242838"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="198.61.64.140" dst_ip="163.34.244.105" src_port="8801" proto="udp"/>
        </slice>
        <from usec="0" sec="1612242488"/>
        <to usec="0" sec="1612242490"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="200.235.186.194" dst_ip="163.34.228.97" src_port="443" dst_port="53294" proto="tcp"/>
        </slice>
        <from usec="0" sec="1612242602"/>
        <to usec="0" sec="1612242603"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="54.84.147.150"/>
        </slice>
        <from usec="0" sec="1612242244"/>
        <to usec="0" sec="1612242245"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="163.34.159.99" dst_ip="13.208.0.240" src_port="50726" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1612242533"/>
        <to usec="0" sec="1612242760"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="198.61.64.189" src_port="8801" proto="udp"/>
        </slice>
        <from usec="0" sec="1612242181"/>
        <to usec="0" sec="1612242468"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="14.143.166.135" dst_ip="163.34.157.27" src_port="443" dst_port="63355" proto="tcp"/>
        </slice>
        <from usec="0" sec="1612242220"/>
        <to usec="0" sec="1612242221"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.253.155.59" dst_ip="34.23.37.227" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1612242251"/>
        <to usec="0" sec="1612242796"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="35.79.250.244" dst_ip="163.34.21.38" src_port="5696" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1612242562"/>
        <to usec="0" sec="1612242563"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.178.191.42" dst_ip="54.253.5.22" src_port="61463" dst_port="27783" proto="udp"/>
        </slice>
        <from usec="0" sec="1612242182"/>
        <to usec="0" sec="1612242662"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.57.49.125" dst_ip="65.249.155.21" src_port="63071" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1612242101"/>
        <to usec="0" sec="1612242730"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.34.125.132" dst_ip="159.102.42.229" src_port="61907" dst_port="17858" proto="udp"/>
        </slice>
        <from usec="0" sec="1612242843"/>
        <to usec="0" sec="1612242847"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.34.244.105" dst_ip="198.61.64.140" src_port="54832" dst_port="8801" proto="udp"/>
        </slice>
        <from usec="0" sec="1612242251"/>
        <to usec="0" sec="1612242776"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.34.227.189" dst_ip="18.77.88.133" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1612242386"/>
        <to usec="0" sec="1612242880"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="150.197.241.178" dst_ip="163.34.127.221" src_port="9000" proto="udp"/>
        </slice>
        <from usec="0" sec="1612242336"/>
        <to usec="0" sec="1612242881"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.34.157.27" dst_ip="163.34.84.217" src_port="443" dst_port="57972" proto="tcp"/>
        </slice>
        <from usec="0" sec="1612242253"/>
        <to usec="0" sec="1612242254"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.34.247.255" dst_ip="91.27.105.113" src_port="55852" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1612242811"/>
        <to usec="0" sec="1612242812"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.55.168.252" dst_ip="52.235.133.136" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1612242778"/>
        <to usec="0" sec="1612242883"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.178.191.250" dst_ip="67.86.132.82" src_port="4500" dst_port="4500" proto="udp"/>
        </slice>
        <from usec="0" sec="1612242130"/>
        <to usec="0" sec="1612242850"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="92.62.61.197" dst_ip="163.34.126.138" src_port="443" dst_port="57974" proto="tcp"/>
        </slice>
        <from usec="0" sec="1612242337"/>
        <to usec="0" sec="1612242338"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="45.153.249.209" dst_ip="133.231.126.33" src_port="80" dst_port="40512" proto="tcp"/>
        </slice>
        <from usec="0" sec="1612242338"/>
        <to usec="0" sec="1612242339"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.34.124.41" dst_ip="198.61.66.149" dst_port="8801" proto="udp"/>
        </slice>
        <from usec="0" sec="1612242518"/>
        <to usec="0" sec="1612242892"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="159.102.42.229" dst_ip="70.27.90.120" proto="udp"/>
        </slice>
        <from usec="0" sec="1612242209"/>
        <to usec="0" sec="1612242886"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.34.160.211" dst_ip="67.228.129.250" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1612242823"/>
        <to usec="0" sec="1612242871"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.34.157.27" dst_ip="13.209.158.221" src_port="62796" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1612242817"/>
        <to usec="0" sec="1612242819"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.34.160.211" dst_ip="18.72.131.192" src_port="49907" dst_port="39273" proto="udp"/>
        </slice>
        <from usec="0" sec="1612242107"/>
        <to usec="0" sec="1612242880"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.34.161.224" dst_ip="54.253.5.22" src_port="63596" dst_port="53334" proto="udp"/>
        </slice>
        <from usec="0" sec="1612242388"/>
        <to usec="0" sec="1612242648"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="18.72.131.192" proto="udp"/>
        </slice>
        <from usec="0" sec="1612242440"/>
        <to usec="0" sec="1612242889"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="18.72.131.193" proto="udp"/>
        </slice>
        <from usec="0" sec="1612242661"/>
        <to usec="0" sec="1612242673"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.34.207.29" dst_ip="52.41.51.207" src_port="60179" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1612242828"/>
        <to usec="0" sec="1612242829"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.34.247.220" dst_ip="150.197.243.93" src_port="52910" dst_port="9000" proto="udp"/>
        </slice>
        <from usec="0" sec="1612242533"/>
        <to usec="0" sec="1612242781"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="150.197.243.234" dst_ip="163.34.124.124" src_port="9000" dst_port="55231" proto="udp"/>
        </slice>
        <from usec="0" sec="1612242654"/>
        <to usec="0" sec="1612242822"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.254.54.142" dst_ip="39.159.83.204" src_port="50179" dst_port="40928" proto="udp"/>
        </slice>
        <from usec="0" sec="1612242515"/>
        <to usec="0" sec="1612242895"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.34.127.29" dst_ip="18.72.131.192" proto="udp"/>
        </slice>
        <from usec="0" sec="1612242346"/>
        <to usec="0" sec="1612242639"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="170.118.64.73" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1612242557"/>
        <to usec="0" sec="1612242558"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="192.40.143.18" dst_ip="203.178.189.37"/>
        </slice>
        <from usec="0" sec="1612242740"/>
        <to usec="0" sec="1612242742"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="51.235.125.16" src_port="8898" dst_port="5060" proto="udp"/>
        </slice>
        <from usec="0" sec="1612242467"/>
        <to usec="0" sec="1612242680"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="134.238.136.80" src_port="42092" dst_port="3122" proto="tcp"/>
        </slice>
        <from usec="0" sec="1612242266"/>
        <to usec="0" sec="1612242267"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="95.244.72.86" src_port="5091" dst_port="5940"/>
        </slice>
        <from usec="0" sec="1612242398"/>
        <to usec="0" sec="1612242399"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="61.78.173.11"/>
        </slice>
        <from usec="0" sec="1612242884"/>
        <to usec="0" sec="1612242885"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="171.50.144.196" proto="tcp"/>
        </slice>
        <from usec="0" sec="1612242605"/>
        <to usec="0" sec="1612242634"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="175.83.114.196" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1612242129"/>
        <to usec="0" sec="1612242133"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="175.160.148.178" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1612242041"/>
        <to usec="0" sec="1612242044"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="121.253.255.216" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1612242663"/>
        <to usec="0" sec="1612242665"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="120.26.112.97" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1612242631"/>
        <to usec="0" sec="1612242633"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="121.254.142.62" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1612242440"/>
        <to usec="0" sec="1612242446"/>
    </anomaly>
    <anomaly type="notice" value="0.721853,1.13488,503,0 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="203.178.180.24" dst_ip="8.57.90.80" src_port="61229" dst_port="80"/>
        </slice>
        <from usec="0" sec="1612242473"/>
        <to usec="0" sec="1612242597"/>
    </anomaly>
    <anomaly type="notice" value="0.721853,1.13488,010,0 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="94.67.113.250" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1612242336"/>
        <to usec="0" sec="1612242342"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.34.124.124" dst_port="443"/>
        </slice>
        <from usec="0" sec="1612242608"/>
        <to usec="0" sec="1612242609"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.34.124.120"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242107"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="13.171.231.60"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242108"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.254.54.97"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242105"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.254.54.80"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242108"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="192.206.54.36"/>
        </slice>
        <from usec="0" sec="1612242018"/>
        <to usec="0" sec="1612242097"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="69.239.98.138"/>
        </slice>
        <from usec="0" sec="1612242022"/>
        <to usec="0" sec="1612242108"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="163.34.180.198"/>
        </slice>
        <from usec="0" sec="1612242022"/>
        <to usec="0" sec="1612242106"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="18.25.103.9"/>
        </slice>
        <from usec="0" sec="1612242028"/>
        <to usec="0" sec="1612242089"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="13.147.74.237"/>
        </slice>
        <from usec="0" sec="1612242603"/>
        <to usec="0" sec="1612242611"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242828"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242828"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,004,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.254.51.24" dst_port="445"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242287"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="61.45.18.157"/>
        </slice>
        <from usec="0" sec="1612242001"/>
        <to usec="0" sec="1612242377"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="70.68.27.69"/>
        </slice>
        <from usec="0" sec="1612242040"/>
        <to usec="0" sec="1612242286"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.34.148.204"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242376"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="66.156.45.148"/>
        </slice>
        <from usec="0" sec="1612242005"/>
        <to usec="0" sec="1612242283"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="91.27.105.153"/>
        </slice>
        <from usec="0" sec="1612242011"/>
        <to usec="0" sec="1612242373"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="13.30.118.127"/>
        </slice>
        <from usec="0" sec="1612242134"/>
        <to usec="0" sec="1612242467"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="92.62.61.197"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242466"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,004,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.254.50.141" dst_port="445"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242468"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,004,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="202.254.54.126" dst_port="445"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242468"/>
    </anomaly>
    <anomaly type="notice" value="0.527882,1.07529,999,1 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="94.40.22.171" dst_ip="133.231.126.90"/>
            <filter src_ip="94.40.22.171" dst_ip="163.34.126.12"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242828"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,020,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="173.91.30.218"/>
        </slice>
        <from usec="0" sec="1612242001"/>
        <to usec="0" sec="1612242466"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.34.56.243" src_port="443"/>
        </slice>
        <from usec="0" sec="1612242001"/>
        <to usec="0" sec="1612242468"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="138.220.2.108"/>
        </slice>
        <from usec="0" sec="1612242002"/>
        <to usec="0" sec="1612242463"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="163.34.36.243"/>
        </slice>
        <from usec="0" sec="1612242002"/>
        <to usec="0" sec="1612242468"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="140.83.240.233"/>
        </slice>
        <from usec="0" sec="1612242003"/>
        <to usec="0" sec="1612242467"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="138.220.2.52"/>
        </slice>
        <from usec="0" sec="1612242009"/>
        <to usec="0" sec="1612242467"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="66.209.222.146"/>
        </slice>
        <from usec="0" sec="1612242011"/>
        <to usec="0" sec="1612242467"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="129.51.235.102"/>
        </slice>
        <from usec="0" sec="1612242025"/>
        <to usec="0" sec="1612242461"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="52.80.120.56"/>
        </slice>
        <from usec="0" sec="1612242252"/>
        <to usec="0" sec="1612242351"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="18.48.190.110"/>
        </slice>
        <from usec="0" sec="1612242457"/>
        <to usec="0" sec="1612242458"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="52.250.55.3"/>
        </slice>
        <from usec="0" sec="1612242463"/>
        <to usec="0" sec="1612242464"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="78.111.246.93" src_port="15872" dst_port="8080"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242558"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="185.174.93.114"/>
        </slice>
        <from usec="0" sec="1612242003"/>
        <to usec="0" sec="1612242551"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="35.163.139.38"/>
        </slice>
        <from usec="0" sec="1612242015"/>
        <to usec="0" sec="1612242557"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="188.226.8.177"/>
        </slice>
        <from usec="0" sec="1612242023"/>
        <to usec="0" sec="1612242509"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.34.160.217"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242648"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.34.160.217"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242643"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,004,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.34.157.27" dst_port="445"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242647"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="198.61.51.7" dst_port="17185"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242648"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="152.189.194.105"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242643"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="164.101.111.87"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242648"/>
    </anomaly>
    <anomaly type="notice" value="0.527882,1.07529,010,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="89.199.93.253" src_port="83"/>
            <filter src_ip="133.231.126.117" dst_ip="206.190.104.223" src_port="5901"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242641"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="74.120.44.176"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242648"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="138.220.2.18"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242648"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="144.121.59.76"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242648"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,010,0 0 0 1 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="163.34.124.65" dst_ip="42.216.56.7" src_port="23"/>
        </slice>
        <from usec="0" sec="1612242001"/>
        <to usec="0" sec="1612242648"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="129.114.79.123"/>
        </slice>
        <from usec="0" sec="1612242001"/>
        <to usec="0" sec="1612242647"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="203.178.176.138"/>
        </slice>
        <from usec="0" sec="1612242001"/>
        <to usec="0" sec="1612242647"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,020,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.34.45.254"/>
        </slice>
        <from usec="0" sec="1612242001"/>
        <to usec="0" sec="1612242642"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.34.239.183"/>
        </slice>
        <from usec="0" sec="1612242001"/>
        <to usec="0" sec="1612242816"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.231.126.102"/>
        </slice>
        <from usec="0" sec="1612242001"/>
        <to usec="0" sec="1612242636"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="172.69.136.116"/>
        </slice>
        <from usec="0" sec="1612242002"/>
        <to usec="0" sec="1612242646"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.178.191.115" src_port="22"/>
            <filter src_ip="203.178.191.115"/>
        </slice>
        <from usec="0" sec="1612242002"/>
        <to usec="0" sec="1612242648"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,012,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="117.208.64.138"/>
        </slice>
        <from usec="0" sec="1612242002"/>
        <to usec="0" sec="1612242635"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="52.88.242.163"/>
        </slice>
        <from usec="0" sec="1612242002"/>
        <to usec="0" sec="1612242646"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="80.134.19.147"/>
        </slice>
        <from usec="0" sec="1612242003"/>
        <to usec="0" sec="1612242634"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="209.36.54.173"/>
        </slice>
        <from usec="0" sec="1612242004"/>
        <to usec="0" sec="1612242645"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="23.249.180.153"/>
        </slice>
        <from usec="0" sec="1612242004"/>
        <to usec="0" sec="1612242645"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="37.155.15.198"/>
        </slice>
        <from usec="0" sec="1612242004"/>
        <to usec="0" sec="1612242646"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.253.119.27" dst_port="443"/>
            <filter dst_ip="17.2.114.249" dst_port="123"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242738"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="185.71.236.129"/>
        </slice>
        <from usec="0" sec="1612242005"/>
        <to usec="0" sec="1612242734"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="185.132.73.89"/>
        </slice>
        <from usec="0" sec="1612242006"/>
        <to usec="0" sec="1612242639"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="198.61.71.61"/>
        </slice>
        <from usec="0" sec="1612242007"/>
        <to usec="0" sec="1612242620"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="131.241.38.75"/>
        </slice>
        <from usec="0" sec="1612242008"/>
        <to usec="0" sec="1612242643"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="126.224.157.11"/>
        </slice>
        <from usec="0" sec="1612242008"/>
        <to usec="0" sec="1612242644"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.34.236.8"/>
        </slice>
        <from usec="0" sec="1612242010"/>
        <to usec="0" sec="1612242646"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="38.3.18.242" dst_port="80"/>
            <filter src_ip="202.55.168.81" dst_ip="38.3.18.242" dst_port="53"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242642"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="99.238.120.45"/>
        </slice>
        <from usec="0" sec="1612242012"/>
        <to usec="0" sec="1612242633"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="193.123.164.95"/>
        </slice>
        <from usec="0" sec="1612242012"/>
        <to usec="0" sec="1612242636"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,rflatDNS">
        <slice>
            <filter src_ip="203.178.185.30" dst_ip="92.171.45.25"/>
            <filter dst_ip="92.171.45.25" src_port="53"/>
            <filter src_ip="203.178.185.30" dst_ip="87.246.194.53" src_port="53"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242643"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="163.34.127.102"/>
        </slice>
        <from usec="0" sec="1612242021"/>
        <to usec="0" sec="1612242646"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="3.143.28.46"/>
        </slice>
        <from usec="0" sec="1612242023"/>
        <to usec="0" sec="1612242647"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="185.238.165.75"/>
        </slice>
        <from usec="0" sec="1612242035"/>
        <to usec="0" sec="1612242646"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="131.241.5.234"/>
        </slice>
        <from usec="0" sec="1612242075"/>
        <to usec="0" sec="1612242628"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,012,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="103.227.246.242"/>
        </slice>
        <from usec="0" sec="1612242080"/>
        <to usec="0" sec="1612242582"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="18.107.168.163"/>
        </slice>
        <from usec="0" sec="1612242094"/>
        <to usec="0" sec="1612242605"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="104.12.71.197"/>
        </slice>
        <from usec="0" sec="1612242166"/>
        <to usec="0" sec="1612242644"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="54.179.44.187"/>
        </slice>
        <from usec="0" sec="1612242177"/>
        <to usec="0" sec="1612242539"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="52.95.0.3"/>
        </slice>
        <from usec="0" sec="1612242219"/>
        <to usec="0" sec="1612242641"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="184.149.107.10"/>
        </slice>
        <from usec="0" sec="1612242228"/>
        <to usec="0" sec="1612242630"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="184.149.107.10"/>
        </slice>
        <from usec="0" sec="1612242228"/>
        <to usec="0" sec="1612242630"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="34.15.27.132"/>
        </slice>
        <from usec="0" sec="1612242275"/>
        <to usec="0" sec="1612242648"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="74.82.52.8"/>
        </slice>
        <from usec="0" sec="1612242379"/>
        <to usec="0" sec="1612242474"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="85.97.151.137"/>
        </slice>
        <from usec="0" sec="1612242477"/>
        <to usec="0" sec="1612242626"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="159.102.193.217"/>
        </slice>
        <from usec="0" sec="1612242516"/>
        <to usec="0" sec="1612242643"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="18.79.9.214"/>
        </slice>
        <from usec="0" sec="1612242537"/>
        <to usec="0" sec="1612242639"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,011,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="192.206.35.19" src_port="5631"/>
        </slice>
        <from usec="0" sec="1612242572"/>
        <to usec="0" sec="1612242648"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="80.122.152.10"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242690"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.34.157.27" dst_port="50890"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242738"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.34.157.27"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242738"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="202.57.39.192"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242828"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="198.4.7.35" src_port="61953" dst_port="8408"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242738"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="138.227.93.30"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242737"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,004,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.34.157.27" dst_port="445"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242738"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.34.245.163" dst_ip="151.198.213.102" dst_port="443"/>
            <filter src_ip="163.34.245.163" dst_ip="203.29.55.17" dst_port="443"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242734"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="64.100.120.206" src_port="445"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242738"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="102.89.60.49" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1612242649"/>
        <to usec="0" sec="1612242659"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="162.129.253.101"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242738"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.34.38.237" dst_port="53"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242737"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="200.214.110.66" src_port="30301"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242736"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.178.175.156"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242736"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.178.191.42"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242720"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.254.50.27" dst_port="27226"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242738"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="159.102.205.166"/>
        </slice>
        <from usec="0" sec="1612242001"/>
        <to usec="0" sec="1612242722"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="163.34.157.27"/>
        </slice>
        <from usec="0" sec="1612242001"/>
        <to usec="0" sec="1612242735"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="138.220.2.90"/>
        </slice>
        <from usec="0" sec="1612242001"/>
        <to usec="0" sec="1612242737"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="138.220.2.235"/>
        </slice>
        <from usec="0" sec="1612242003"/>
        <to usec="0" sec="1612242738"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.254.51.240"/>
        </slice>
        <from usec="0" sec="1612242003"/>
        <to usec="0" sec="1612242738"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="185.194.210.125"/>
        </slice>
        <from usec="0" sec="1612242005"/>
        <to usec="0" sec="1612242714"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="45.168.5.92"/>
        </slice>
        <from usec="0" sec="1612242005"/>
        <to usec="0" sec="1612242733"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="106.114.230.21"/>
        </slice>
        <from usec="0" sec="1612242005"/>
        <to usec="0" sec="1612242738"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="159.102.103.62"/>
        </slice>
        <from usec="0" sec="1612242006"/>
        <to usec="0" sec="1612242730"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="209.64.162.30"/>
        </slice>
        <from usec="0" sec="1612242006"/>
        <to usec="0" sec="1612242643"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.51.146.188"/>
        </slice>
        <from usec="0" sec="1612242007"/>
        <to usec="0" sec="1612242732"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="198.61.70.110"/>
        </slice>
        <from usec="0" sec="1612242008"/>
        <to usec="0" sec="1612242738"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="204.197.49.225"/>
        </slice>
        <from usec="0" sec="1612242008"/>
        <to usec="0" sec="1612242736"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="13.209.158.169"/>
        </slice>
        <from usec="0" sec="1612242009"/>
        <to usec="0" sec="1612242728"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.254.50.137" dst_port="57147"/>
            <filter dst_ip="202.254.50.137" dst_port="445"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242738"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="78.100.128.202"/>
        </slice>
        <from usec="0" sec="1612242012"/>
        <to usec="0" sec="1612242738"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,DDoSUDP">
        <slice>
            <filter dst_ip="205.58.47.96" dst_port="53"/>
        </slice>
        <from usec="0" sec="1612242014"/>
        <to usec="0" sec="1612242719"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="138.220.2.28"/>
        </slice>
        <from usec="0" sec="1612242017"/>
        <to usec="0" sec="1612242727"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="92.62.61.197"/>
        </slice>
        <from usec="0" sec="1612242018"/>
        <to usec="0" sec="1612242728"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.34.48.107"/>
        </slice>
        <from usec="0" sec="1612242022"/>
        <to usec="0" sec="1612242737"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="120.26.112.97"/>
        </slice>
        <from usec="0" sec="1612242024"/>
        <to usec="0" sec="1612242738"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="13.30.118.208"/>
        </slice>
        <from usec="0" sec="1612242024"/>
        <to usec="0" sec="1612242733"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.51.143.113"/>
        </slice>
        <from usec="0" sec="1612242026"/>
        <to usec="0" sec="1612242720"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="189.82.210.160"/>
        </slice>
        <from usec="0" sec="1612242032"/>
        <to usec="0" sec="1612242736"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,010,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="133.122.41.230"/>
        </slice>
        <from usec="0" sec="1612242042"/>
        <to usec="0" sec="1612242738"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="61.54.122.44"/>
        </slice>
        <from usec="0" sec="1612242088"/>
        <to usec="0" sec="1612242621"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="202.159.95.58"/>
        </slice>
        <from usec="0" sec="1612242365"/>
        <to usec="0" sec="1612242738"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="54.255.0.28"/>
        </slice>
        <from usec="0" sec="1612242378"/>
        <to usec="0" sec="1612242735"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="13.30.118.235"/>
        </slice>
        <from usec="0" sec="1612242473"/>
        <to usec="0" sec="1612242719"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="38.53.215.6"/>
        </slice>
        <from usec="0" sec="1612242717"/>
        <to usec="0" sec="1612242732"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.34.125.213" src_port="443"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242828"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.34.161.7" src_port="443"/>
        </slice>
        <from usec="0" sec="1612242007"/>
        <to usec="0" sec="1612242736"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.254.50.23" src_port="443"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242828"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,004,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.254.50.135" dst_port="445"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242827"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="107.150.191.171"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242828"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,004,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.254.50.152" dst_port="445"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242828"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="74.120.44.222"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242828"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="202.57.38.133" dst_port="22"/>
            <filter src_ip="68.34.229.201" dst_ip="202.57.38.133" dst_port="111"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242827"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,011,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="167.63.90.227"/>
            <filter src_ip="202.55.172.244" dst_ip="42.48.93.68" src_port="22"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242828"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="167.63.90.232"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242828"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.34.7.13" dst_ip="92.62.61.197" dst_port="80"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242820"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.254.54.14" src_port="15093"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242827"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="133.122.85.197" dst_port="548"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242828"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,004,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="202.254.54.20" dst_port="445"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242828"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="203.178.179.33"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242828"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="85.124.196.140"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242828"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="44.29.240.34"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242828"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="203.178.191.42" src_port="80"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242828"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.158.38.229"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242827"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="24.61.84.145"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242828"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="35.175.38.76"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242828"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.178.196.21" dst_port="288"/>
            <filter dst_ip="203.178.196.21" dst_port="49181"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242828"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,004,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.178.177.59" dst_port="445"/>
        </slice>
        <from usec="0" sec="1612242002"/>
        <to usec="0" sec="1612242828"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="78.100.128.204"/>
        </slice>
        <from usec="0" sec="1612242002"/>
        <to usec="0" sec="1612242817"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="70.129.76.166" src_port="41832" dst_port="23"/>
        </slice>
        <from usec="0" sec="1612242002"/>
        <to usec="0" sec="1612242827"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="126.233.128.155"/>
        </slice>
        <from usec="0" sec="1612242002"/>
        <to usec="0" sec="1612242730"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="140.83.243.28"/>
        </slice>
        <from usec="0" sec="1612242002"/>
        <to usec="0" sec="1612242823"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="209.62.172.164"/>
        </slice>
        <from usec="0" sec="1612242003"/>
        <to usec="0" sec="1612242828"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,052,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="171.50.144.196" dst_ip="202.224.73.193" dst_port="22"/>
            <filter src_ip="171.50.144.196" dst_ip="202.224.73.193" dst_port="8291"/>
            <filter src_ip="171.50.144.196" dst_ip="202.224.73.193" dst_port="8728"/>
        </slice>
        <from usec="0" sec="1612242003"/>
        <to usec="0" sec="1612242828"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.34.39.158" src_port="53"/>
        </slice>
        <from usec="0" sec="1612242003"/>
        <to usec="0" sec="1612242827"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,012,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="202.254.50.25" dst_port="23"/>
        </slice>
        <from usec="0" sec="1612242003"/>
        <to usec="0" sec="1612242828"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="5.67.200.86"/>
        </slice>
        <from usec="0" sec="1612242003"/>
        <to usec="0" sec="1612242826"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,004,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="198.61.64.72" dst_port="445"/>
        </slice>
        <from usec="0" sec="1612242003"/>
        <to usec="0" sec="1612242817"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="54.254.99.117"/>
        </slice>
        <from usec="0" sec="1612242004"/>
        <to usec="0" sec="1612242828"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.34.127.42"/>
        </slice>
        <from usec="0" sec="1612242005"/>
        <to usec="0" sec="1612242827"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="155.150.10.251" dst_port="443"/>
            <filter dst_ip="13.209.41.27" dst_port="443"/>
            <filter src_ip="155.150.10.251"/>
        </slice>
        <from usec="0" sec="1612242005"/>
        <to usec="0" sec="1612242828"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="3.21.75.187"/>
        </slice>
        <from usec="0" sec="1612242008"/>
        <to usec="0" sec="1612242826"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="150.135.102.10" dst_port="23"/>
        </slice>
        <from usec="0" sec="1612242008"/>
        <to usec="0" sec="1612242825"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="18.77.251.131"/>
        </slice>
        <from usec="0" sec="1612242012"/>
        <to usec="0" sec="1612242817"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="54.179.114.226"/>
        </slice>
        <from usec="0" sec="1612242014"/>
        <to usec="0" sec="1612242804"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="138.220.2.14"/>
        </slice>
        <from usec="0" sec="1612242016"/>
        <to usec="0" sec="1612242828"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="162.58.59.99"/>
        </slice>
        <from usec="0" sec="1612242019"/>
        <to usec="0" sec="1612242819"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="138.220.2.114"/>
        </slice>
        <from usec="0" sec="1612242021"/>
        <to usec="0" sec="1612242817"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="163.34.251.144" src_port="443"/>
        </slice>
        <from usec="0" sec="1612242023"/>
        <to usec="0" sec="1612242828"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="13.30.118.157"/>
        </slice>
        <from usec="0" sec="1612242026"/>
        <to usec="0" sec="1612242807"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.34.231.235" dst_port="443"/>
            <filter src_ip="163.34.231.235" dst_port="33434"/>
            <filter src_ip="163.34.231.235" dst_port="5004"/>
        </slice>
        <from usec="0" sec="1612242020"/>
        <to usec="0" sec="1612242827"/>
    </anomaly>
    <anomaly type="notice" value="0.527882,1.07529,999,1 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="198.61.48.192" dst_port="8801"/>
            <filter dst_ip="198.61.48.192" dst_port="443"/>
        </slice>
        <from usec="0" sec="1612242034"/>
        <to usec="0" sec="1612242868"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="185.137.51.243"/>
        </slice>
        <from usec="0" sec="1612242041"/>
        <to usec="0" sec="1612242824"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="121.191.225.236"/>
        </slice>
        <from usec="0" sec="1612242043"/>
        <to usec="0" sec="1612242816"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="13.171.244.253"/>
        </slice>
        <from usec="0" sec="1612242079"/>
        <to usec="0" sec="1612242814"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="183.41.80.1"/>
        </slice>
        <from usec="0" sec="1612242422"/>
        <to usec="0" sec="1612242819"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="46.153.166.203"/>
        </slice>
        <from usec="0" sec="1612242472"/>
        <to usec="0" sec="1612242826"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="104.13.79.54"/>
        </slice>
        <from usec="0" sec="1612242476"/>
        <to usec="0" sec="1612242794"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="106.116.225.105"/>
        </slice>
        <from usec="0" sec="1612242486"/>
        <to usec="0" sec="1612242735"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="126.209.200.199"/>
        </slice>
        <from usec="0" sec="1612242529"/>
        <to usec="0" sec="1612242827"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="185.185.107.98"/>
        </slice>
        <from usec="0" sec="1612242629"/>
        <to usec="0" sec="1612242762"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="207.84.62.146"/>
        </slice>
        <from usec="0" sec="1612242705"/>
        <to usec="0" sec="1612242806"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="219.207.170.212"/>
        </slice>
        <from usec="0" sec="1612242766"/>
        <to usec="0" sec="1612242817"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.34.127.77" src_port="443"/>
        </slice>
        <from usec="0" sec="1612242000"/>
        <to usec="0" sec="1612242804"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.34.159.42" dst_ip="52.5.132.75" src_port="60604" dst_port="443"/>
        </slice>
        <from usec="0" sec="1612242536"/>
        <to usec="0" sec="1612242589"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="13.209.41.50" dst_ip="163.34.86.154" src_port="443"/>
            <filter src_ip="13.209.41.50" dst_ip="163.34.125.124" src_port="443"/>
            <filter src_ip="13.209.41.50" dst_ip="163.34.195.62" src_port="443"/>
        </slice>
        <from usec="0" sec="1612242022"/>
        <to usec="0" sec="1612242622"/>
    </anomaly>
    <anomaly type="notice" value="0.425784,1.0664,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.34.228.205" dst_ip="69.3.177.128" src_port="50775" dst_port="443"/>
            <filter src_ip="163.34.228.205" dst_ip="69.3.168.128" src_port="50779" dst_port="443"/>
            <filter src_ip="163.34.228.205" dst_ip="69.92.250.100" src_port="50764" dst_port="443"/>
            <filter src_ip="163.34.228.205" dst_ip="31.230.75.123" src_port="50767" dst_port="443"/>
            <filter src_ip="163.34.228.205" dst_ip="31.230.75.126" src_port="50766" dst_port="443"/>
        </slice>
        <from usec="0" sec="1612242386"/>
        <to usec="0" sec="1612242737"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="150.197.243.135" dst_ip="163.34.126.86" src_port="443" dst_port="39214"/>
        </slice>
        <from usec="0" sec="1612242748"/>
        <to usec="0" sec="1612242749"/>
    </anomaly>
    <anomaly type="notice" value="0.545053,1.0647,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="54.253.5.29" dst_ip="203.178.191.42"/>
        </slice>
        <from usec="0" sec="1612242274"/>
        <to usec="0" sec="1612242877"/>
    </anomaly>
</admd:annotation>
