<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="notice" value="0.524522,1.51484,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="131.193.218.11" dst_ip="117.235.106.44" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614747905"/>
        <to usec="0" sec="1614747906"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="31.18.218.8" dst_ip="203.66.191.32" src_port="443" dst_port="42502" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614748465"/>
        <to usec="0" sec="1614748467"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="17.117.84.19" dst_ip="163.42.126.78" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614747959"/>
        <to usec="0" sec="1614747961"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="54.219.145.233"/>
        </slice>
        <from usec="0" sec="1614748263"/>
        <to usec="0" sec="1614748264"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="198.10.67.230" dst_ip="163.42.40.178" src_port="8801" proto="udp"/>
        </slice>
        <from usec="0" sec="1614747959"/>
        <to usec="0" sec="1614747961"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="114.134.48.225" dst_ip="163.42.254.72" src_port="9000" proto="udp"/>
        </slice>
        <from usec="0" sec="1614747976"/>
        <to usec="0" sec="1614747978"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.214.187.192" dst_ip="163.42.140.240" src_port="6104" dst_port="993" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614747993"/>
        <to usec="0" sec="1614747995"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="13.67.248.36" dst_ip="163.42.13.230" src_port="8801" proto="udp"/>
        </slice>
        <from usec="0" sec="1614748075"/>
        <to usec="0" sec="1614748395"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.42.127.201" dst_ip="150.194.5.190" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614747864"/>
        <to usec="0" sec="1614748395"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="198.10.59.215" dst_ip="163.42.127.91" src_port="8801" proto="udp"/>
        </slice>
        <from usec="0" sec="1614747611"/>
        <to usec="0" sec="1614747613"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.248.97.223" dst_ip="52.124.144.206" src_port="57549" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614747905"/>
        <to usec="0" sec="1614748277"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="114.134.48.177"/>
        </slice>
        <from usec="0" sec="1614748295"/>
        <to usec="0" sec="1614748297"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.42.127.187" dst_ip="150.194.5.86" src_port="61244" dst_port="9000" proto="udp"/>
        </slice>
        <from usec="0" sec="1614747804"/>
        <to usec="0" sec="1614747806"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="223.251.216.69" dst_ip="163.42.56.197" src_port="6003" dst_port="54544" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614747791"/>
        <to usec="0" sec="1614748442"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="150.194.5.183" dst_ip="163.42.11.42" src_port="9000" dst_port="59900" proto="udp"/>
        </slice>
        <from usec="0" sec="1614748081"/>
        <to usec="0" sec="1614748083"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="5.45.69.139" dst_ip="203.66.190.127" src_port="3882" dst_port="4707" proto="udp"/>
        </slice>
        <from usec="0" sec="1614748178"/>
        <to usec="0" sec="1614748203"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="13.33.22.177"/>
        </slice>
        <from usec="0" sec="1614747917"/>
        <to usec="0" sec="1614747919"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="198.10.71.149" dst_ip="163.42.83.36" src_port="8801" proto="udp"/>
        </slice>
        <from usec="0" sec="1614748344"/>
        <to usec="0" sec="1614748449"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="99.116.241.149" dst_ip="163.42.126.76" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614748386"/>
        <to usec="0" sec="1614748413"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="151.165.228.88" dst_ip="163.42.19.28" src_port="443" dst_port="51590" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614748444"/>
        <to usec="0" sec="1614748445"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="207.226.89.130" dst_ip="163.42.252.204" src_port="8801" dst_port="64463" proto="udp"/>
        </slice>
        <from usec="0" sec="1614748344"/>
        <to usec="0" sec="1614748448"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.42.126.245" dst_ip="174.126.245.136" src_port="17185" dst_port="37315" proto="udp"/>
        </slice>
        <from usec="0" sec="1614748151"/>
        <to usec="0" sec="1614748153"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.248.102.90" dst_ip="211.28.225.10" src_port="52363" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614748376"/>
        <to usec="0" sec="1614748378"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.42.253.149" dst_ip="211.28.225.10" src_port="59742" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614747845"/>
        <to usec="0" sec="1614748449"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="23.233.21.166" dst_ip="163.42.253.54" src_port="443" dst_port="59678" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614748074"/>
        <to usec="0" sec="1614748076"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.248.97.191" dst_ip="54.41.168.216" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614748372"/>
        <to usec="0" sec="1614748447"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="13.33.22.148" dst_ip="163.42.126.76" src_port="443" dst_port="59529" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614748071"/>
        <to usec="0" sec="1614748200"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="168.115.243.182" dst_ip="163.42.40.134" src_port="8801" proto="udp"/>
        </slice>
        <from usec="0" sec="1614748169"/>
        <to usec="0" sec="1614748472"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.76.236.118" dst_ip="163.42.13.56" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614748379"/>
        <to usec="0" sec="1614748410"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="208.78.87.102" dst_ip="163.42.253.127" src_port="443" dst_port="49778" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614747777"/>
        <to usec="0" sec="1614747779"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.42.188.245" dst_ip="198.10.59.15" src_port="54753" dst_port="8801" proto="udp"/>
        </slice>
        <from usec="0" sec="1614747851"/>
        <to usec="0" sec="1614747853"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="23.76.237.106" dst_ip="163.42.85.38" src_port="443" dst_port="51284" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614748169"/>
        <to usec="0" sec="1614748171"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.42.254.220" dst_ip="65.113.41.194" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614747796"/>
        <to usec="0" sec="1614747860"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.66.178.192" dst_ip="126.207.144.203" src_port="4500" dst_port="27440" proto="udp"/>
        </slice>
        <from usec="0" sec="1614748423"/>
        <to usec="0" sec="1614748427"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.98.65.74" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614747730"/>
        <to usec="0" sec="1614748414"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="13.84.222.195" dst_ip="203.66.191.85" src_port="443" dst_port="12290" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614747803"/>
        <to usec="0" sec="1614747817"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="17.7.157.60" dst_ip="163.42.127.60" src_port="443" dst_port="63041" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614747821"/>
        <to usec="0" sec="1614747823"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="198.10.56.223" dst_ip="163.42.126.221" src_port="8801" proto="udp"/>
        </slice>
        <from usec="0" sec="1614747705"/>
        <to usec="0" sec="1614747706"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="163.42.254.227" dst_ip="163.42.232.137" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614747898"/>
        <to usec="0" sec="1614747900"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="198.10.58.207" src_port="8801" proto="udp"/>
        </slice>
        <from usec="0" sec="1614747776"/>
        <to usec="0" sec="1614748384"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="198.10.71.61" dst_ip="203.66.180.17" src_port="8801" dst_port="61601" proto="udp"/>
        </slice>
        <from usec="0" sec="1614748135"/>
        <to usec="0" sec="1614748384"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="163.42.118.21" dst_ip="163.42.214.21" src_port="443" dst_port="55796" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614748025"/>
        <to usec="0" sec="1614748026"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="47.245.25.12" dst_ip="163.42.254.39" src_port="443" dst_port="49683" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614747916"/>
        <to usec="0" sec="1614747917"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.66.185.243" dst_ip="135.74.91.55" src_port="443" dst_port="49409" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614748423"/>
        <to usec="0" sec="1614748442"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="17.7.157.123" dst_ip="0.0.0.0" src_port="443" dst_port="53150" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614747834"/>
        <to usec="0" sec="1614747835"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.98.65.13" dst_ip="134.223.197.177" src_port="59421" dst_port="8801" proto="udp"/>
        </slice>
        <from usec="0" sec="1614747775"/>
        <to usec="0" sec="1614748075"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.42.58.207" dst_ip="13.105.20.205" src_port="50259" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614747790"/>
        <to usec="0" sec="1614747933"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="193.186.203.52" dst_ip="163.42.252.235" src_port="8801" dst_port="64543" proto="udp"/>
        </slice>
        <from usec="0" sec="1614747908"/>
        <to usec="0" sec="1614747909"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.66.185.200" dst_ip="13.216.76.234" src_port="46228" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614748419"/>
        <to usec="0" sec="1614748425"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="23.232.129.102" dst_ip="89.196.88.46" src_port="28266" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614748182"/>
        <to usec="0" sec="1614748391"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="203.66.191.32" dst_ip="54.63.7.129" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614747960"/>
        <to usec="0" sec="1614748295"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.80.17.141" dst_ip="13.84.72.10" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614748093"/>
        <to usec="0" sec="1614748094"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="163.42.253.118" dst_ip="14.27.22.10" dst_port="33445" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614748130"/>
        <to usec="0" sec="1614748132"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="210.66.222.93" dst_ip="163.42.136.61"/>
        </slice>
        <from usec="0" sec="1614748381"/>
        <to usec="0" sec="1614748382"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,010,1 0 0 0 0 0 0 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="83.166.9.147" dst_ip="203.66.237.106" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614748401"/>
        <to usec="0" sec="1614748404"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,020,1 0 0 0 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter src_ip="198.98.69.42" dst_ip="203.66.177.141" proto="icmp"/>
        </slice>
        <from usec="0" sec="1614747798"/>
        <to usec="0" sec="1614747960"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="185.22.219.206" src_port="5900" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614748198"/>
        <to usec="0" sec="1614748199"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="111.33.208.132" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614747667"/>
        <to usec="0" sec="1614747669"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="59.109.163.181" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614747846"/>
        <to usec="0" sec="1614747847"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="101.38.232.50" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614747647"/>
        <to usec="0" sec="1614747649"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="218.102.203.94" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614747908"/>
        <to usec="0" sec="1614747909"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="58.33.86.146" dst_port="445" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614747822"/>
        <to usec="0" sec="1614747823"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="223.232.143.150" dst_port="8291"/>
        </slice>
        <from usec="0" sec="1614748366"/>
        <to usec="0" sec="1614748367"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,010,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="218.97.199.105" src_port="22" dst_port="9090"/>
        </slice>
        <from usec="0" sec="1614748202"/>
        <to usec="0" sec="1614748204"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,010,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="13.212.64.176" src_port="21" proto="tcp"/>
        </slice>
        <from usec="0" sec="1614748178"/>
        <to usec="0" sec="1614748179"/>
    </anomaly>
    <anomaly type="notice" value="0.524522,1.51484,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="222.29.8.21"/>
        </slice>
        <from usec="0" sec="1614748277"/>
        <to usec="0" sec="1614748278"/>
    </anomaly>
    <anomaly type="notice" value="0.727655,1.49876,999,1 1 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.66.177.9" dst_ip="111.65.78.199" src_port="5353"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748449"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="60.38.22.51" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614748251"/>
        <to usec="0" sec="1614748253"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="106.92.216.34" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614748294"/>
        <to usec="0" sec="1614748297"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,999,1 1 1 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="198.10.57.73" dst_ip="163.42.252.128" src_port="8801"/>
            <filter src_ip="198.10.57.73" dst_ip="163.42.255.77" src_port="8801"/>
            <filter src_ip="198.10.57.73" dst_ip="163.42.29.143" src_port="8801"/>
            <filter src_ip="198.10.57.73" dst_ip="163.42.24.52" src_port="8801"/>
            <filter src_ip="198.10.57.73" dst_ip="163.42.24.49" src_port="8801"/>
        </slice>
        <from usec="0" sec="1614747801"/>
        <to usec="0" sec="1614748472"/>
    </anomaly>
    <anomaly type="notice" value="0.730319,1.52059,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.98.107.68" dst_ip="52.27.103.174" src_port="53530" dst_port="443"/>
        </slice>
        <from usec="0" sec="1614748043"/>
        <to usec="0" sec="1614748044"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="119.155.73.162" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747777"/>
        <to usec="0" sec="1614747779"/>
    </anomaly>
    <anomaly type="notice" value="0.950291,1.56369,504,1 1 1 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.98.252.177" dst_port="443"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748355"/>
    </anomaly>
    <anomaly type="notice" value="0.730319,1.52059,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="168.115.242.173" dst_ip="163.42.252.1" src_port="8801" dst_port="55114"/>
            <filter src_ip="168.115.242.173" dst_ip="163.42.252.1" src_port="8801" dst_port="55113"/>
            <filter src_ip="168.115.242.173" dst_ip="163.42.252.1" src_port="8801" dst_port="55112"/>
            <filter src_ip="168.115.242.173" dst_ip="163.42.252.1" src_port="443" dst_port="60352"/>
        </slice>
        <from usec="0" sec="1614748382"/>
        <to usec="0" sec="1614748463"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,504,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.42.65.176" dst_port="443"/>
        </slice>
        <from usec="0" sec="1614747637"/>
        <to usec="0" sec="1614747638"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="202.248.99.2" dst_ip="13.84.221.206" src_port="50837" dst_port="80"/>
            <filter src_ip="202.248.99.2" dst_ip="13.84.221.206" src_port="50824" dst_port="80"/>
        </slice>
        <from usec="0" sec="1614747900"/>
        <to usec="0" sec="1614747912"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,999,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.42.182.173" dst_ip="193.186.203.190" src_port="64185" dst_port="8801"/>
        </slice>
        <from usec="0" sec="1614747856"/>
        <to usec="0" sec="1614748470"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="212.129.63.232" src_port="5103" dst_port="5066"/>
            <filter src_ip="212.129.63.232" src_port="5103" dst_port="5065"/>
        </slice>
        <from usec="0" sec="1614748248"/>
        <to usec="0" sec="1614748252"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="91.232.133.166" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1614747733"/>
        <to usec="0" sec="1614748497"/>
    </anomaly>
    <anomaly type="notice" value="0.730319,1.52059,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="121.1.108.241" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747667"/>
        <to usec="0" sec="1614747669"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="103.31.151.236" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614748173"/>
        <to usec="0" sec="1614748189"/>
    </anomaly>
    <anomaly type="notice" value="0.730319,1.52059,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="0.0.0.0" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747987"/>
        <to usec="0" sec="1614747998"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="14.136.163.17" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747976"/>
        <to usec="0" sec="1614747983"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="114.100.77.230" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747676"/>
        <to usec="0" sec="1614747678"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.196.120.29" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1614748202"/>
        <to usec="0" sec="1614748420"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="0.0.0.0" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747959"/>
        <to usec="0" sec="1614747961"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="123.210.110.24" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614748288"/>
        <to usec="0" sec="1614748290"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="112.222.145.223" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747954"/>
        <to usec="0" sec="1614747956"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="218.96.38.194" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747955"/>
        <to usec="0" sec="1614747959"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="182.155.115.221" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614748317"/>
        <to usec="0" sec="1614748319"/>
    </anomaly>
    <anomaly type="notice" value="0.730319,1.52059,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="103.39.13.206" dst_port="445"/>
        </slice>
        <from usec="0" sec="1614748188"/>
        <to usec="0" sec="1614748319"/>
    </anomaly>
    <anomaly type="notice" value="0.730319,1.52059,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="103.192.41.201" dst_port="445"/>
        </slice>
        <from usec="0" sec="1614748188"/>
        <to usec="0" sec="1614748189"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="117.42.172.56" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614748394"/>
        <to usec="0" sec="1614748396"/>
    </anomaly>
    <anomaly type="notice" value="0.730319,1.52059,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="36.120.224.46" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614748350"/>
        <to usec="0" sec="1614748354"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="133.98.220.176" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747864"/>
        <to usec="0" sec="1614747868"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="106.60.150.47" dst_port="8291"/>
        </slice>
        <from usec="0" sec="1614748329"/>
        <to usec="0" sec="1614748333"/>
    </anomaly>
    <anomaly type="notice" value="0.730319,1.52059,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="49.217.33.50" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614748371"/>
        <to usec="0" sec="1614748381"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="58.46.189.196" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747793"/>
        <to usec="0" sec="1614747797"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="58.221.167.57" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747905"/>
        <to usec="0" sec="1614747910"/>
    </anomaly>
    <anomaly type="notice" value="0.730319,1.52059,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="122.82.146.69" dst_port="8728"/>
            <filter src_ip="122.82.146.69" dst_port="8291"/>
            <filter src_ip="122.82.146.69" dst_port="22"/>
        </slice>
        <from usec="0" sec="1614748228"/>
        <to usec="0" sec="1614748491"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="1.73.40.118" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747867"/>
        <to usec="0" sec="1614747868"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="42.61.15.142" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747823"/>
        <to usec="0" sec="1614747824"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="60.85.194.73" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747706"/>
        <to usec="0" sec="1614747713"/>
    </anomaly>
    <anomaly type="notice" value="0.730319,1.52059,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="0.0.0.0" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747801"/>
        <to usec="0" sec="1614747805"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="190.166.56.83" dst_port="445"/>
        </slice>
        <from usec="0" sec="1614748469"/>
        <to usec="0" sec="1614748472"/>
    </anomaly>
    <anomaly type="notice" value="0.730319,1.52059,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="113.46.178.98" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747948"/>
        <to usec="0" sec="1614747949"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="59.48.154.90" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614748148"/>
        <to usec="0" sec="1614748153"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="112.121.254.99" dst_port="1433"/>
            <filter src_ip="112.121.254.99" dst_port="445"/>
        </slice>
        <from usec="0" sec="1614748151"/>
        <to usec="0" sec="1614748157"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="113.254.97.160" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614748287"/>
        <to usec="0" sec="1614748291"/>
    </anomaly>
    <anomaly type="notice" value="0.730319,1.52059,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="113.47.45.143" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747640"/>
        <to usec="0" sec="1614747644"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="171.128.123.80" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747957"/>
        <to usec="0" sec="1614747959"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="58.15.53.153" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614748468"/>
        <to usec="0" sec="1614748472"/>
    </anomaly>
    <anomaly type="notice" value="0.730319,1.52059,011,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.91.67.127" dst_port="445"/>
        </slice>
        <from usec="0" sec="1614747847"/>
        <to usec="0" sec="1614747853"/>
    </anomaly>
    <anomaly type="notice" value="0.730319,1.52059,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="78.230.240.4" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614748201"/>
        <to usec="0" sec="1614748205"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="175.82.50.134" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614748147"/>
        <to usec="0" sec="1614748151"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="120.167.91.3" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614748299"/>
        <to usec="0" sec="1614748301"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="221.8.217.115" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747781"/>
        <to usec="0" sec="1614747782"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="184.105.117.50" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614748440"/>
        <to usec="0" sec="1614748442"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="157.76.158.233" dst_port="445"/>
        </slice>
        <from usec="0" sec="1614747665"/>
        <to usec="0" sec="1614747666"/>
    </anomaly>
    <anomaly type="notice" value="0.730319,1.52059,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="222.11.10.152" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747849"/>
        <to usec="0" sec="1614747853"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="59.44.219.26" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614748313"/>
        <to usec="0" sec="1614748314"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="113.46.157.45" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614748339"/>
        <to usec="0" sec="1614748344"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="218.122.168.185" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614748446"/>
        <to usec="0" sec="1614748451"/>
    </anomaly>
    <anomaly type="notice" value="0.730319,1.52059,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="5.160.75.194" dst_port="445"/>
        </slice>
        <from usec="0" sec="1614748178"/>
        <to usec="0" sec="1614748190"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="112.121.253.55" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747704"/>
        <to usec="0" sec="1614747706"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="223.155.44.64" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614748280"/>
        <to usec="0" sec="1614748284"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="112.121.253.48" dst_port="445"/>
        </slice>
        <from usec="0" sec="1614747636"/>
        <to usec="0" sec="1614748259"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="222.248.165.182" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747890"/>
        <to usec="0" sec="1614747895"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="220.81.100.94" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747736"/>
        <to usec="0" sec="1614747743"/>
    </anomaly>
    <anomaly type="notice" value="0.730319,1.52059,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="117.56.50.216" dst_port="445"/>
        </slice>
        <from usec="0" sec="1614748130"/>
        <to usec="0" sec="1614748132"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="101.38.232.48" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747647"/>
        <to usec="0" sec="1614747649"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="80.191.60.253" dst_port="445"/>
        </slice>
        <from usec="0" sec="1614747640"/>
        <to usec="0" sec="1614747643"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="113.225.8.199" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747941"/>
        <to usec="0" sec="1614747943"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="183.49.25.55" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747954"/>
        <to usec="0" sec="1614747958"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="125.205.214.128" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747847"/>
        <to usec="0" sec="1614747848"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="124.223.213.69" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747752"/>
        <to usec="0" sec="1614747756"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="113.47.33.65" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747640"/>
        <to usec="0" sec="1614747644"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="116.4.221.110" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747951"/>
        <to usec="0" sec="1614747952"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="95.195.54.220" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747900"/>
        <to usec="0" sec="1614747902"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="171.208.113.29" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747860"/>
        <to usec="0" sec="1614747862"/>
    </anomaly>
    <anomaly type="notice" value="0.730319,1.52059,010,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="125.158.25.39" dst_port="22"/>
            <filter src_ip="125.158.25.39" dst_port="8291"/>
            <filter src_ip="125.158.25.39" dst_port="8728"/>
        </slice>
        <from usec="0" sec="1614747622"/>
        <to usec="0" sec="1614748490"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="60.250.248.238" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747856"/>
        <to usec="0" sec="1614747857"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="123.146.209.6" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747858"/>
        <to usec="0" sec="1614747859"/>
    </anomaly>
    <anomaly type="notice" value="0.730319,1.52059,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="103.242.112.103" dst_port="445"/>
        </slice>
        <from usec="0" sec="1614747696"/>
        <to usec="0" sec="1614747697"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="117.232.67.188" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747714"/>
        <to usec="0" sec="1614747715"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="58.48.197.82" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614748091"/>
        <to usec="0" sec="1614748095"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="59.44.116.142" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747999"/>
        <to usec="0" sec="1614748000"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="117.233.221.18" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614748142"/>
        <to usec="0" sec="1614748144"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.241.57.46" dst_port="5351"/>
        </slice>
        <from usec="0" sec="1614747652"/>
        <to usec="0" sec="1614748146"/>
    </anomaly>
    <anomaly type="notice" value="0.730319,1.52059,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="49.217.39.205" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614748371"/>
        <to usec="0" sec="1614748381"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.241.57.47" dst_port="5351"/>
        </slice>
        <from usec="0" sec="1614747904"/>
        <to usec="0" sec="1614748467"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="112.121.224.47" dst_port="445"/>
        </slice>
        <from usec="0" sec="1614748087"/>
        <to usec="0" sec="1614748090"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.241.57.43" dst_port="5351"/>
        </slice>
        <from usec="0" sec="1614747712"/>
        <to usec="0" sec="1614748416"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="163.42.216.235" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747888"/>
        <to usec="0" sec="1614747892"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="49.59.51.235" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614748222"/>
        <to usec="0" sec="1614748223"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="118.78.148.53" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614748336"/>
        <to usec="0" sec="1614748338"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="80.191.240.212" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747990"/>
        <to usec="0" sec="1614747991"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.241.57.42" dst_port="5351"/>
        </slice>
        <from usec="0" sec="1614747986"/>
        <to usec="0" sec="1614748044"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="116.239.123.138" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614748332"/>
        <to usec="0" sec="1614748336"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="112.121.224.34" dst_port="445"/>
        </slice>
        <from usec="0" sec="1614748068"/>
        <to usec="0" sec="1614748071"/>
    </anomaly>
    <anomaly type="notice" value="0.950291,1.56369,502,1 1 1 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="61.177.146.251" src_port="22"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748445"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="46.72.60.67" src_port="3389"/>
        </slice>
        <from usec="0" sec="1614747737"/>
        <to usec="0" sec="1614748085"/>
    </anomaly>
    <anomaly type="notice" value="0.730319,1.52059,999,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="192.241.230.37" src_port="109"/>
        </slice>
        <from usec="0" sec="1614748263"/>
        <to usec="0" sec="1614748274"/>
    </anomaly>
    <anomaly type="notice" value="0.730319,1.52059,010,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="80.60.76.140" src_port="8834"/>
        </slice>
        <from usec="0" sec="1614748451"/>
        <to usec="0" sec="1614748452"/>
    </anomaly>
    <anomaly type="notice" value="0.730319,1.52059,010,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="222.29.8.5" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614748277"/>
        <to usec="0" sec="1614748278"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="222.29.8.14" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614748276"/>
        <to usec="0" sec="1614748278"/>
    </anomaly>
    <anomaly type="notice" value="0.730319,1.52059,504,1 1 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="133.80.15.73" dst_ip="13.84.72.10" src_port="61033" dst_port="443"/>
            <filter src_ip="133.80.15.73" dst_ip="13.84.72.10" src_port="61032" dst_port="443"/>
        </slice>
        <from usec="0" sec="1614748277"/>
        <to usec="0" sec="1614748278"/>
    </anomaly>
    <anomaly type="notice" value="0.950291,1.56369,999,1 1 1 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="46.72.60.67" dst_port="3389"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748333"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="40.105.164.15"/>
        </slice>
        <from usec="0" sec="1614747810"/>
        <to usec="0" sec="1614748149"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="170.111.101.40"/>
        </slice>
        <from usec="0" sec="1614747650"/>
        <to usec="0" sec="1614747669"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="52.71.203.180"/>
        </slice>
        <from usec="0" sec="1614747681"/>
        <to usec="0" sec="1614747708"/>
    </anomaly>
    <anomaly type="notice" value="0.835533,1.44741,503,1 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="163.42.92.30"/>
            <filter dst_ip="23.46.158.243"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="198.10.65.173"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614747798"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="52.126.207.168"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748248"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.60.45"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614747798"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.56.114"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614747788"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.56.118"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614747796"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.98.110.158"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614747796"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.60.133"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614747798"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="31.254.86.2"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614747798"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="77.201.18.77" dst_ip="202.25.61.134" src_port="45537"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748068"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.61.50"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614747794"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,004,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="202.25.61.49" dst_port="445"/>
            <filter src_ip="77.201.18.77" dst_ip="202.25.61.49" src_port="45537"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614747798"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,004,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.56.247"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614747797"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="54.116.225.31"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748068"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,004,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.60.142"/>
        </slice>
        <from usec="0" sec="1614747601"/>
        <to usec="0" sec="1614747796"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.42.140.226" dst_port="25"/>
        </slice>
        <from usec="0" sec="1614747601"/>
        <to usec="0" sec="1614747798"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,004,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.60.216"/>
        </slice>
        <from usec="0" sec="1614747601"/>
        <to usec="0" sec="1614747798"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.60.92"/>
        </slice>
        <from usec="0" sec="1614747601"/>
        <to usec="0" sec="1614747798"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="59.96.218.120"/>
        </slice>
        <from usec="0" sec="1614747601"/>
        <to usec="0" sec="1614747798"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.60.222"/>
        </slice>
        <from usec="0" sec="1614747601"/>
        <to usec="0" sec="1614747798"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.60.19"/>
        </slice>
        <from usec="0" sec="1614747601"/>
        <to usec="0" sec="1614747798"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.60.1"/>
        </slice>
        <from usec="0" sec="1614747601"/>
        <to usec="0" sec="1614747798"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.110.140.19"/>
        </slice>
        <from usec="0" sec="1614747603"/>
        <to usec="0" sec="1614747785"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.56.194"/>
        </slice>
        <from usec="0" sec="1614747603"/>
        <to usec="0" sec="1614747798"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,004,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="58.61.64.9"/>
        </slice>
        <from usec="0" sec="1614747603"/>
        <to usec="0" sec="1614747798"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="54.84.101.215"/>
        </slice>
        <from usec="0" sec="1614747624"/>
        <to usec="0" sec="1614747665"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="91.228.154.150"/>
        </slice>
        <from usec="0" sec="1614747627"/>
        <to usec="0" sec="1614747788"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="3.2.36.118"/>
        </slice>
        <from usec="0" sec="1614747645"/>
        <to usec="0" sec="1614747648"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="13.83.15.37"/>
        </slice>
        <from usec="0" sec="1614747701"/>
        <to usec="0" sec="1614747784"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="8.203.43.185"/>
        </slice>
        <from usec="0" sec="1614747722"/>
        <to usec="0" sec="1614747750"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="99.116.81.182"/>
        </slice>
        <from usec="0" sec="1614747741"/>
        <to usec="0" sec="1614747790"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="149.44.122.189"/>
        </slice>
        <from usec="0" sec="1614747775"/>
        <to usec="0" sec="1614747798"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="23.233.21.166"/>
        </slice>
        <from usec="0" sec="1614747778"/>
        <to usec="0" sec="1614747798"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.42.160.83" src_port="53"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614747888"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.61.73"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614747888"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.122.93.207"/>
        </slice>
        <from usec="0" sec="1614747606"/>
        <to usec="0" sec="1614747856"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="87.244.199.145"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614747978"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="3.255.214.91"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614747978"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="52.124.143.182"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614747978"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.56.104"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614747966"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="202.248.97.146" dst_ip="169.81.119.218" src_port="53"/>
            <filter src_ip="202.241.74.30" dst_ip="169.81.119.218" src_port="53"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614747977"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="60.118.120.75"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614747978"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.60.165"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614747976"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="202.25.60.227"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614747977"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,004,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.56.184" dst_port="445"/>
            <filter src_ip="77.201.18.77" dst_ip="202.25.56.184" src_port="45537"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614747977"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.61.207"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614747978"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.56.48"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614747977"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,012,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="45.255.14.101"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614747978"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.56.52"/>
        </slice>
        <from usec="0" sec="1614747601"/>
        <to usec="0" sec="1614747977"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.56.188"/>
        </slice>
        <from usec="0" sec="1614747601"/>
        <to usec="0" sec="1614747973"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="34.216.106.0"/>
        </slice>
        <from usec="0" sec="1614747602"/>
        <to usec="0" sec="1614747978"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="167.199.166.214"/>
        </slice>
        <from usec="0" sec="1614747602"/>
        <to usec="0" sec="1614747978"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.56.73"/>
        </slice>
        <from usec="0" sec="1614747602"/>
        <to usec="0" sec="1614747978"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="13.223.66.121"/>
        </slice>
        <from usec="0" sec="1614747602"/>
        <to usec="0" sec="1614747937"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="203.138.226.154"/>
        </slice>
        <from usec="0" sec="1614747602"/>
        <to usec="0" sec="1614747976"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="13.222.85.189"/>
        </slice>
        <from usec="0" sec="1614747603"/>
        <to usec="0" sec="1614747975"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.56.195"/>
        </slice>
        <from usec="0" sec="1614747603"/>
        <to usec="0" sec="1614747978"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,020,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="173.36.225.214"/>
        </slice>
        <from usec="0" sec="1614747603"/>
        <to usec="0" sec="1614747977"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="13.193.152.202"/>
        </slice>
        <from usec="0" sec="1614747603"/>
        <to usec="0" sec="1614747974"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.56.87"/>
        </slice>
        <from usec="0" sec="1614747605"/>
        <to usec="0" sec="1614747967"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.56.112"/>
        </slice>
        <from usec="0" sec="1614747608"/>
        <to usec="0" sec="1614747968"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="54.125.183.160" dst_ip="203.66.177.188" dst_port="443"/>
        </slice>
        <from usec="0" sec="1614747612"/>
        <to usec="0" sec="1614747978"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="34.197.46.133"/>
        </slice>
        <from usec="0" sec="1614747616"/>
        <to usec="0" sec="1614747976"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="190.115.101.165"/>
        </slice>
        <from usec="0" sec="1614747671"/>
        <to usec="0" sec="1614747897"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="167.172.221.222"/>
        </slice>
        <from usec="0" sec="1614747673"/>
        <to usec="0" sec="1614747945"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="114.134.38.120"/>
        </slice>
        <from usec="0" sec="1614747709"/>
        <to usec="0" sec="1614747917"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="170.222.204.144"/>
        </slice>
        <from usec="0" sec="1614747710"/>
        <to usec="0" sec="1614747854"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="13.99.107.194"/>
        </slice>
        <from usec="0" sec="1614747716"/>
        <to usec="0" sec="1614747848"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="13.193.148.60"/>
        </slice>
        <from usec="0" sec="1614747751"/>
        <to usec="0" sec="1614747923"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="54.133.119.99"/>
        </slice>
        <from usec="0" sec="1614747873"/>
        <to usec="0" sec="1614747926"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="13.33.22.210"/>
        </slice>
        <from usec="0" sec="1614747908"/>
        <to usec="0" sec="1614747978"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="54.51.30.128"/>
        </slice>
        <from usec="0" sec="1614747921"/>
        <to usec="0" sec="1614747930"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.66.178.190" dst_port="80"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748068"/>
    </anomaly>
    <anomaly type="notice" value="0.520807,1.49292,504,1 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.42.13.230" dst_ip="13.67.248.36" dst_port="443"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748290"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="193.186.203.52"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748068"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="141.98.32.93"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748068"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.60.207"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748068"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="117.236.233.19"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748068"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="209.146.200.56"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748067"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.56.13"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748067"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="185.251.69.110"/>
        </slice>
        <from usec="0" sec="1614747601"/>
        <to usec="0" sec="1614748068"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="184.105.94.129"/>
        </slice>
        <from usec="0" sec="1614747604"/>
        <to usec="0" sec="1614748068"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="49.116.94.198"/>
        </slice>
        <from usec="0" sec="1614747604"/>
        <to usec="0" sec="1614748064"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="77.201.18.77" dst_ip="202.25.61.20" src_port="45537"/>
        </slice>
        <from usec="0" sec="1614747605"/>
        <to usec="0" sec="1614748067"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="13.66.128.70"/>
        </slice>
        <from usec="0" sec="1614747672"/>
        <to usec="0" sec="1614748063"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="3.37.165.239"/>
        </slice>
        <from usec="0" sec="1614747946"/>
        <to usec="0" sec="1614748006"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="15.47.166.146"/>
        </slice>
        <from usec="0" sec="1614747947"/>
        <to usec="0" sec="1614747953"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,020,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="122.27.51.135"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748158"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.98.220.176"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748153"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,010,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="77.201.18.77" dst_ip="202.25.56.193" src_port="45537"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748157"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,004,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.61.228" dst_port="445"/>
            <filter src_ip="77.201.18.77" dst_ip="202.25.61.228" src_port="45537"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748158"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,011,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="77.201.18.77" dst_ip="202.25.61.153" src_port="45537"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748156"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="208.103.70.133"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748153"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,010,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="77.201.18.77" dst_ip="202.25.60.42" src_port="45537"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748158"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,010,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="202.25.56.51" dst_port="443"/>
            <filter dst_ip="202.25.56.51" dst_port="80"/>
            <filter src_ip="77.201.18.77" dst_ip="202.25.56.51" src_port="45537"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748150"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.42.255.13" src_port="443"/>
            <filter src_ip="220.3.39.197" dst_ip="163.42.255.13" dst_port="33434"/>
            <filter src_ip="220.3.111.222" dst_ip="163.42.255.13" dst_port="33434"/>
        </slice>
        <from usec="0" sec="1614747601"/>
        <to usec="0" sec="1614748158"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,010,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="77.201.18.77" dst_ip="66.125.168.59" src_port="45537"/>
        </slice>
        <from usec="0" sec="1614747601"/>
        <to usec="0" sec="1614748156"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="162.105.143.39"/>
        </slice>
        <from usec="0" sec="1614747601"/>
        <to usec="0" sec="1614748158"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="209.249.91.197"/>
        </slice>
        <from usec="0" sec="1614747602"/>
        <to usec="0" sec="1614748157"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="77.201.18.77" dst_ip="202.25.61.242" src_port="45537"/>
        </slice>
        <from usec="0" sec="1614747604"/>
        <to usec="0" sec="1614748157"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="213.227.170.245"/>
        </slice>
        <from usec="0" sec="1614747604"/>
        <to usec="0" sec="1614748157"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="54.159.50.185"/>
        </slice>
        <from usec="0" sec="1614747609"/>
        <to usec="0" sec="1614748157"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="185.216.44.158"/>
        </slice>
        <from usec="0" sec="1614747654"/>
        <to usec="0" sec="1614748106"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.42.85.17"/>
        </slice>
        <from usec="0" sec="1614747846"/>
        <to usec="0" sec="1614748111"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.42.255.205"/>
        </slice>
        <from usec="0" sec="1614747979"/>
        <to usec="0" sec="1614748140"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="35.74.250.146"/>
        </slice>
        <from usec="0" sec="1614748001"/>
        <to usec="0" sec="1614748158"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.47.110.152"/>
        </slice>
        <from usec="0" sec="1614748041"/>
        <to usec="0" sec="1614748132"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="74.143.141.129"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748248"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="77.201.18.77" dst_ip="202.25.61.173" src_port="45537"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748248"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="202.25.61.107" dst_port="23"/>
            <filter src_ip="77.201.18.77" dst_ip="202.25.61.107" src_port="45537"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748248"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,010,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="77.201.18.77" dst_ip="202.25.61.23" src_port="45537"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748248"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="203.214.166.56" dst_ip="203.66.186.19" src_port="53"/>
            <filter src_ip="203.214.166.57" dst_ip="203.66.186.19" src_port="53"/>
            <filter src_ip="202.12.161.251" dst_ip="203.66.186.19" dst_port="53"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748248"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="3.189.118.198"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748248"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="180.125.178.68" dst_ip="163.42.174.183" src_port="443"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748248"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="54.17.205.241"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748338"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="74.143.141.135"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748248"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="77.201.18.77" dst_ip="202.25.60.160" src_port="45537"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748248"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,004,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.61.143" dst_port="445"/>
            <filter src_ip="221.149.164.192" dst_ip="202.25.61.143" dst_port="23"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748246"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="77.201.18.77" dst_ip="202.25.56.95" src_port="45537"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748248"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,004,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="202.25.61.168" dst_port="445"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748242"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,002,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.241.100.245"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748248"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="54.133.179.13"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748419"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,010,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="77.201.18.77" dst_ip="202.25.60.151" src_port="45537"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748248"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.42.160.80" src_port="53"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748248"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="77.201.18.77" dst_ip="202.25.61.109" src_port="45537"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748229"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="172.239.63.238"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748248"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="54.88.182.149"/>
        </slice>
        <from usec="0" sec="1614747601"/>
        <to usec="0" sec="1614748428"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="13.33.201.246"/>
        </slice>
        <from usec="0" sec="1614747601"/>
        <to usec="0" sec="1614748248"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.25.60.222" src_port="992"/>
            <filter src_ip="202.25.60.222" dst_ip="77.201.18.77" dst_port="45537"/>
        </slice>
        <from usec="0" sec="1614747601"/>
        <to usec="0" sec="1614748248"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="202.59.41.2"/>
        </slice>
        <from usec="0" sec="1614747601"/>
        <to usec="0" sec="1614748217"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.42.128.239" dst_ip="54.125.183.160" src_port="443"/>
            <filter src_ip="163.42.128.239" dst_ip="77.201.18.77" dst_port="45537"/>
        </slice>
        <from usec="0" sec="1614747601"/>
        <to usec="0" sec="1614748245"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="77.201.18.77" dst_ip="202.25.61.66" src_port="45537"/>
        </slice>
        <from usec="0" sec="1614747601"/>
        <to usec="0" sec="1614748338"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,011,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="77.201.18.77" dst_ip="202.25.61.184" src_port="45537"/>
        </slice>
        <from usec="0" sec="1614747602"/>
        <to usec="0" sec="1614748428"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="202.241.114.59" dst_ip="13.84.7.254" dst_port="53"/>
        </slice>
        <from usec="0" sec="1614747602"/>
        <to usec="0" sec="1614748248"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="13.33.22.147"/>
        </slice>
        <from usec="0" sec="1614747603"/>
        <to usec="0" sec="1614748220"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="87.244.199.176" dst_ip="203.66.191.47" dst_port="25"/>
        </slice>
        <from usec="0" sec="1614747604"/>
        <to usec="0" sec="1614748235"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,010,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="77.201.18.77" dst_ip="202.25.60.186" src_port="45537"/>
        </slice>
        <from usec="0" sec="1614747605"/>
        <to usec="0" sec="1614748244"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="3.143.96.193"/>
        </slice>
        <from usec="0" sec="1614747607"/>
        <to usec="0" sec="1614748247"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="193.211.3.229"/>
        </slice>
        <from usec="0" sec="1614747608"/>
        <to usec="0" sec="1614748248"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="81.5.99.204"/>
        </slice>
        <from usec="0" sec="1614747608"/>
        <to usec="0" sec="1614748242"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="69.164.36.220"/>
        </slice>
        <from usec="0" sec="1614747610"/>
        <to usec="0" sec="1614748240"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1614747611"/>
        <to usec="0" sec="1614748243"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="13.33.145.248"/>
        </slice>
        <from usec="0" sec="1614747614"/>
        <to usec="0" sec="1614748146"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="116.69.99.50"/>
        </slice>
        <from usec="0" sec="1614747690"/>
        <to usec="0" sec="1614748208"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="140.107.224.37"/>
        </slice>
        <from usec="0" sec="1614747690"/>
        <to usec="0" sec="1614748237"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="99.116.86.209"/>
        </slice>
        <from usec="0" sec="1614747715"/>
        <to usec="0" sec="1614748240"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="203.66.182.3"/>
        </slice>
        <from usec="0" sec="1614747767"/>
        <to usec="0" sec="1614748152"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.110.187.137"/>
        </slice>
        <from usec="0" sec="1614747832"/>
        <to usec="0" sec="1614748237"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="54.116.61.104"/>
        </slice>
        <from usec="0" sec="1614747903"/>
        <to usec="0" sec="1614748159"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="163.42.199.109"/>
        </slice>
        <from usec="0" sec="1614747908"/>
        <to usec="0" sec="1614748187"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="143.239.58.122"/>
        </slice>
        <from usec="0" sec="1614747983"/>
        <to usec="0" sec="1614748246"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="104.223.140.242"/>
        </slice>
        <from usec="0" sec="1614748005"/>
        <to usec="0" sec="1614748243"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="13.77.227.142"/>
        </slice>
        <from usec="0" sec="1614748082"/>
        <to usec="0" sec="1614748225"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="99.116.251.231"/>
        </slice>
        <from usec="0" sec="1614748122"/>
        <to usec="0" sec="1614748182"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="103.241.164.153"/>
        </slice>
        <from usec="0" sec="1614748190"/>
        <to usec="0" sec="1614748240"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="3.30.165.255"/>
        </slice>
        <from usec="0" sec="1614748191"/>
        <to usec="0" sec="1614748248"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,502,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="222.180.46.40" src_port="22"/>
        </slice>
        <from usec="0" sec="1614748198"/>
        <to usec="0" sec="1614748248"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="65.113.4.74"/>
        </slice>
        <from usec="0" sec="1614748207"/>
        <to usec="0" sec="1614748228"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="198.10.40.234"/>
        </slice>
        <from usec="0" sec="1614748224"/>
        <to usec="0" sec="1614748248"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="35.86.197.247"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748330"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="74.143.141.136"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748338"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICecrqICecrqdurmterp">
        <slice>
            <filter dst_ip="51.38.65.26"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748338"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,011,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="77.201.18.77" dst_ip="202.25.61.34" src_port="45537"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748336"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="77.201.18.77" dst_ip="202.25.56.158" src_port="45537"/>
        </slice>
        <from usec="0" sec="1614747601"/>
        <to usec="0" sec="1614748338"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="162.105.143.57"/>
        </slice>
        <from usec="0" sec="1614747601"/>
        <to usec="0" sec="1614748338"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="131.193.220.200"/>
        </slice>
        <from usec="0" sec="1614747601"/>
        <to usec="0" sec="1614748335"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,020,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="173.39.32.121"/>
        </slice>
        <from usec="0" sec="1614747601"/>
        <to usec="0" sec="1614748338"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="133.146.230.100" dst_port="53"/>
        </slice>
        <from usec="0" sec="1614747605"/>
        <to usec="0" sec="1614748276"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="183.71.94.164"/>
        </slice>
        <from usec="0" sec="1614747644"/>
        <to usec="0" sec="1614748284"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="126.129.5.162"/>
        </slice>
        <from usec="0" sec="1614747874"/>
        <to usec="0" sec="1614748299"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="54.41.168.159"/>
        </slice>
        <from usec="0" sec="1614748147"/>
        <to usec="0" sec="1614748320"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="52.124.143.183"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748428"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.42.9.198" src_port="443"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748423"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,020,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="185.151.17.207"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748428"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="211.28.225.10"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748428"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="13.60.51.102"/>
        </slice>
        <from usec="0" sec="1614747601"/>
        <to usec="0" sec="1614748425"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="162.105.143.209"/>
        </slice>
        <from usec="0" sec="1614747601"/>
        <to usec="0" sec="1614748426"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,010,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="138.198.90.9"/>
        </slice>
        <from usec="0" sec="1614747602"/>
        <to usec="0" sec="1614748424"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,020,0 0 0 1 0 0 0 0 0 0 0 0,DDoSIC">
        <slice>
            <filter dst_ip="202.241.93.24"/>
        </slice>
        <from usec="0" sec="1614747602"/>
        <to usec="0" sec="1614748428"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,020,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.66.176.210"/>
        </slice>
        <from usec="0" sec="1614747603"/>
        <to usec="0" sec="1614748423"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="178.81.60.65"/>
        </slice>
        <from usec="0" sec="1614747604"/>
        <to usec="0" sec="1614748403"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="77.201.18.77" dst_ip="202.25.60.30" src_port="45537"/>
        </slice>
        <from usec="0" sec="1614747605"/>
        <to usec="0" sec="1614748428"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="52.70.106.13"/>
        </slice>
        <from usec="0" sec="1614747606"/>
        <to usec="0" sec="1614748417"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="65.205.195.192"/>
        </slice>
        <from usec="0" sec="1614747608"/>
        <to usec="0" sec="1614748428"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="13.33.145.227"/>
        </slice>
        <from usec="0" sec="1614747608"/>
        <to usec="0" sec="1614748428"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="192.8.73.154"/>
        </slice>
        <from usec="0" sec="1614747612"/>
        <to usec="0" sec="1614748405"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="189.248.58.180"/>
        </slice>
        <from usec="0" sec="1614747617"/>
        <to usec="0" sec="1614748425"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="164.120.169.33"/>
        </slice>
        <from usec="0" sec="1614747638"/>
        <to usec="0" sec="1614748421"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="116.69.87.62"/>
        </slice>
        <from usec="0" sec="1614747714"/>
        <to usec="0" sec="1614748414"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="103.21.80.246"/>
        </slice>
        <from usec="0" sec="1614747812"/>
        <to usec="0" sec="1614748428"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.91.25.231"/>
        </slice>
        <from usec="0" sec="1614747899"/>
        <to usec="0" sec="1614748399"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="52.222.91.65"/>
        </slice>
        <from usec="0" sec="1614748251"/>
        <to usec="0" sec="1614748327"/>
    </anomaly>
    <anomaly type="notice" value="0.438647,1.51484,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="13.216.159.134"/>
        </slice>
        <from usec="0" sec="1614748259"/>
        <to usec="0" sec="1614748295"/>
    </anomaly>
    <anomaly type="notice" value="0.520807,1.49292,504,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.42.126.76" dst_ip="99.116.241.149" src_port="59546" dst_port="443"/>
            <filter src_ip="163.42.126.76" dst_ip="99.116.241.149" src_port="59545" dst_port="443"/>
            <filter src_ip="163.42.126.76" dst_ip="99.116.241.149" src_port="59544" dst_port="443"/>
        </slice>
        <from usec="0" sec="1614748071"/>
        <to usec="0" sec="1614748447"/>
    </anomaly>
    <anomaly type="notice" value="0.952332,1.58463,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="114.100.73.226" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1614747889"/>
        <to usec="0" sec="1614747891"/>
    </anomaly>
    <anomaly type="notice" value="1.03119,1.58501,999,1 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="24.174.203.115" dst_ip="203.66.188.101" dst_port="1194"/>
            <filter src_ip="51.36.222.94" dst_ip="203.66.188.101" dst_port="1194"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748186"/>
    </anomaly>
    <anomaly type="notice" value="0.99223,1.60568,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.66.181.221"/>
        </slice>
        <from usec="0" sec="1614747780"/>
        <to usec="0" sec="1614747826"/>
    </anomaly>
    <anomaly type="notice" value="0.99223,1.60568,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.66.191.244"/>
        </slice>
        <from usec="0" sec="1614747780"/>
        <to usec="0" sec="1614747826"/>
    </anomaly>
    <anomaly type="notice" value="0.99223,1.60568,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.146.230.242"/>
        </slice>
        <from usec="0" sec="1614747960"/>
        <to usec="0" sec="1614748006"/>
    </anomaly>
    <anomaly type="notice" value="0.99223,1.60568,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.66.191.31"/>
        </slice>
        <from usec="0" sec="1614747960"/>
        <to usec="0" sec="1614748006"/>
    </anomaly>
    <anomaly type="notice" value="0.99223,1.60568,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="44.211.65.242"/>
        </slice>
        <from usec="0" sec="1614748140"/>
        <to usec="0" sec="1614748186"/>
    </anomaly>
    <anomaly type="notice" value="0.99223,1.60568,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="38.108.229.253"/>
        </slice>
        <from usec="0" sec="1614748140"/>
        <to usec="0" sec="1614748186"/>
    </anomaly>
    <anomaly type="notice" value="0.990271,1.58501,999,0 0 0 1 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="210.66.222.83" dst_ip="163.42.209.251" dst_port="53"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748186"/>
    </anomaly>
    <anomaly type="notice" value="0.99223,1.60568,999,0 0 0 0 0 0 1 0 0 0 0 0,DDoSUDP">
        <slice>
            <filter dst_ip="38.108.229.252" dst_port="53"/>
        </slice>
        <from usec="0" sec="1614748140"/>
        <to usec="0" sec="1614748186"/>
    </anomaly>
    <anomaly type="notice" value="0.99223,1.60568,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.66.191.31"/>
        </slice>
        <from usec="0" sec="1614748140"/>
        <to usec="0" sec="1614748186"/>
    </anomaly>
    <anomaly type="notice" value="0.990271,1.58501,010,0 0 0 1 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.123.125.202" dst_port="50348"/>
        </slice>
        <from usec="0" sec="1614747605"/>
        <to usec="0" sec="1614748240"/>
    </anomaly>
    <anomaly type="notice" value="0.99223,1.60568,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.241.114.59" src_port="53"/>
        </slice>
        <from usec="0" sec="1614748140"/>
        <to usec="0" sec="1614748186"/>
    </anomaly>
    <anomaly type="notice" value="0.99223,1.60568,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.66.183.222"/>
        </slice>
        <from usec="0" sec="1614748140"/>
        <to usec="0" sec="1614748186"/>
    </anomaly>
    <anomaly type="notice" value="0.99223,1.60568,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.123.125.132" dst_port="50356"/>
        </slice>
        <from usec="0" sec="1614748140"/>
        <to usec="0" sec="1614748186"/>
    </anomaly>
    <anomaly type="notice" value="0.99223,1.60568,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.66.191.65" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="1614748140"/>
        <to usec="0" sec="1614748186"/>
    </anomaly>
    <anomaly type="notice" value="0.99223,1.60568,504,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="183.110.212.12"/>
        </slice>
        <from usec="0" sec="1614748140"/>
        <to usec="0" sec="1614748186"/>
    </anomaly>
    <anomaly type="notice" value="0.99223,1.60568,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="192.98.209.24"/>
        </slice>
        <from usec="0" sec="1614748140"/>
        <to usec="0" sec="1614748186"/>
    </anomaly>
    <anomaly type="notice" value="1.03119,1.58501,011,1 0 0 0 0 0 1 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="192.128.44.191" src_port="6379"/>
        </slice>
        <from usec="0" sec="1614748140"/>
        <to usec="0" sec="1614748186"/>
    </anomaly>
    <anomaly type="notice" value="0.99223,1.60568,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="54.118.189.0"/>
        </slice>
        <from usec="0" sec="1614748140"/>
        <to usec="0" sec="1614748186"/>
    </anomaly>
    <anomaly type="notice" value="0.99223,1.60568,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="192.241.228.28"/>
        </slice>
        <from usec="0" sec="1614748230"/>
        <to usec="0" sec="1614748276"/>
    </anomaly>
    <anomaly type="notice" value="0.99223,1.60568,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="210.66.222.83" dst_ip="203.66.183.204" dst_port="53"/>
        </slice>
        <from usec="0" sec="1614747960"/>
        <to usec="0" sec="1614748456"/>
    </anomaly>
    <anomaly type="notice" value="0.99223,1.60568,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.66.183.219"/>
        </slice>
        <from usec="0" sec="1614748410"/>
        <to usec="0" sec="1614748456"/>
    </anomaly>
    <anomaly type="notice" value="0.99223,1.60568,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.66.191.65" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="1614748410"/>
        <to usec="0" sec="1614748456"/>
    </anomaly>
    <anomaly type="notice" value="0.99223,1.60568,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="72.204.26.68"/>
        </slice>
        <from usec="0" sec="1614748410"/>
        <to usec="0" sec="1614748456"/>
    </anomaly>
    <anomaly type="notice" value="0.99223,1.60568,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="116.126.174.217" dst_ip="133.123.181.88"/>
        </slice>
        <from usec="0" sec="1614748410"/>
        <to usec="0" sec="1614748456"/>
    </anomaly>
    <anomaly type="notice" value="1.03119,1.58501,999,1 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="133.98.153.184" dst_ip="54.11.124.201" src_port="53"/>
        </slice>
        <from usec="0" sec="1614748410"/>
        <to usec="0" sec="1614748456"/>
    </anomaly>
    <anomaly type="notice" value="0.99223,1.60568,504,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.42.67.65" dst_ip="31.18.218.49" dst_port="443"/>
        </slice>
        <from usec="0" sec="1614748410"/>
        <to usec="0" sec="1614748456"/>
    </anomaly>
    <anomaly type="notice" value="0.789412,1.49227,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="104.17.178.43"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.789412,1.49227,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="110.62.166.116" dst_port="445"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.789412,1.49227,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="133.98.152.173" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.789412,1.49227,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="142.18.99.101"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.789412,1.49227,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="162.182.206.18"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.786948,1.47001,504,0 0 0 1 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="163.42.255.119" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.837854,1.47001,999,1 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="168.115.255.207" dst_ip="163.42.252.0" src_port="8801" dst_port="64354"/>
            <filter src_ip="168.115.255.207" dst_ip="163.42.252.0" src_port="8801" dst_port="64075"/>
            <filter src_ip="168.115.255.207" dst_ip="163.42.252.0" src_port="8801" dst_port="55937"/>
            <filter src_ip="168.115.255.207" dst_ip="163.42.252.0" src_port="443" dst_port="49817"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.786948,1.47001,502,0 0 0 1 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="203.66.190.235" src_port="22"/>
            <filter src_ip="203.66.190.235" dst_ip="124.215.200.154" src_port="2222"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.789412,1.49227,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="210.44.21.54"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.789412,1.49227,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="222.15.30.143"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.789412,1.49227,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="23.69.115.73" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.789412,1.49227,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="74.143.141.140"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.789412,1.49227,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="104.42.191.196"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.789412,1.49227,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="13.35.90.63"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.837854,1.47001,504,1 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.42.40.132" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.786948,1.47001,999,0 0 0 1 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.42.161.141" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.789412,1.49227,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="18.210.28.110"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.789412,1.49227,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="184.107.117.61"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.789412,1.49227,004,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.61.206" dst_port="445"/>
            <filter src_ip="77.201.18.77" dst_ip="202.25.61.206" src_port="45537"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.789412,1.49227,004,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.60.197" dst_port="445"/>
            <filter src_ip="77.201.18.77" dst_ip="202.25.60.197" src_port="45537"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.789412,1.49227,020,0 0 0 0 0 0 0 0 0 1 0 0,icmp_error">
        <slice>
            <filter dst_ip="217.169.4.245"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.789412,1.49227,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="60.147.230.138"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.789412,1.49227,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="60.184.199.131"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.789412,1.49227,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="66.160.142.176"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.789412,1.49227,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="75.32.127.12"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
