<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="notice" value="0.639163,1.12803,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.221.153.99" dst_ip="61.104.14.198" src_port="443" dst_port="62242" proto="tcp"/>
        </slice>
        <from usec="0" sec="1617512755"/>
        <to usec="0" sec="1617512780"/>
    </anomaly>
    <anomaly type="notice" value="0.639163,1.12803,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="13.248.194.220"/>
        </slice>
        <from usec="0" sec="1617512912"/>
        <to usec="0" sec="1617512913"/>
    </anomaly>
    <anomaly type="notice" value="0.639163,1.12803,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.221.148.250" dst_ip="93.37.97.221" src_port="56160" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1617512630"/>
        <to usec="0" sec="1617512914"/>
    </anomaly>
    <anomaly type="notice" value="0.639163,1.12803,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.221.183.93" dst_ip="13.74.211.55" src_port="80" dst_port="46656" proto="tcp"/>
        </slice>
        <from usec="0" sec="1617512722"/>
        <to usec="0" sec="1617512726"/>
    </anomaly>
    <anomaly type="notice" value="0.639163,1.12803,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="174.215.21.156"/>
        </slice>
        <from usec="0" sec="1617513212"/>
        <to usec="0" sec="1617513214"/>
    </anomaly>
    <anomaly type="notice" value="0.639163,1.12803,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="169.47.21.129"/>
        </slice>
        <from usec="0" sec="1617512609"/>
        <to usec="0" sec="1617512610"/>
    </anomaly>
    <anomaly type="notice" value="0.639163,1.12803,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="117.166.234.135" dst_ip="163.221.245.180" src_port="80" dst_port="57130" proto="tcp"/>
        </slice>
        <from usec="0" sec="1617513001"/>
        <to usec="0" sec="1617513002"/>
    </anomaly>
    <anomaly type="notice" value="0.639163,1.12803,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="175.161.97.212" dst_ip="163.221.122.117" src_port="443" dst_port="3445" proto="tcp"/>
        </slice>
        <from usec="0" sec="1617512584"/>
        <to usec="0" sec="1617512586"/>
    </anomaly>
    <anomaly type="notice" value="0.639163,1.12803,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="8.60.80.45" dst_ip="163.221.236.249" src_port="80" dst_port="12982" proto="tcp"/>
        </slice>
        <from usec="0" sec="1617512629"/>
        <to usec="0" sec="1617512655"/>
    </anomaly>
    <anomaly type="notice" value="0.639163,1.12803,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="117.237.111.10" dst_ip="163.221.135.5" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1617513097"/>
        <to usec="0" sec="1617513260"/>
    </anomaly>
    <anomaly type="notice" value="0.639163,1.12803,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="193.205.0.221" dst_ip="193.205.0.221" proto="icmp"/>
        </slice>
        <from usec="0" sec="1617512612"/>
        <to usec="0" sec="1617512614"/>
    </anomaly>
    <anomaly type="notice" value="0.639163,1.12803,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="95.95.94.181" src_port="5106" dst_port="5060" proto="udp"/>
        </slice>
        <from usec="0" sec="1617512558"/>
        <to usec="0" sec="1617512560"/>
    </anomaly>
    <anomaly type="notice" value="0.639163,1.12803,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="61.248.110.157" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1617512880"/>
        <to usec="0" sec="1617512887"/>
    </anomaly>
    <anomaly type="notice" value="0.639163,1.12803,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="60.230.19.89" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1617513053"/>
        <to usec="0" sec="1617513055"/>
    </anomaly>
    <anomaly type="notice" value="0.639163,1.12803,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.51.175.20" dst_port="8291" proto="tcp"/>
        </slice>
        <from usec="0" sec="1617513240"/>
        <to usec="0" sec="1617513256"/>
    </anomaly>
    <anomaly type="notice" value="0.639163,1.12803,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="45.90.207.26" dst_port="5900"/>
        </slice>
        <from usec="0" sec="1617513040"/>
        <to usec="0" sec="1617513042"/>
    </anomaly>
    <anomaly type="notice" value="0.639163,1.12803,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="78.93.136.84" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1617513222"/>
        <to usec="0" sec="1617513226"/>
    </anomaly>
    <anomaly type="notice" value="0.639163,1.12803,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="36.163.151.71" dst_port="445" proto="tcp"/>
        </slice>
        <from usec="0" sec="1617512579"/>
        <to usec="0" sec="1617512581"/>
    </anomaly>
    <anomaly type="notice" value="0.639163,1.12803,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="101.248.214.55" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1617512828"/>
        <to usec="0" sec="1617512830"/>
    </anomaly>
    <anomaly type="notice" value="0.639163,1.12803,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="218.95.87.214" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1617513013"/>
        <to usec="0" sec="1617513017"/>
    </anomaly>
    <anomaly type="notice" value="0.639163,1.12803,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="219.149.87.217" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1617512880"/>
        <to usec="0" sec="1617512887"/>
    </anomaly>
    <anomaly type="notice" value="0.639163,1.12803,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.77.54.90"/>
        </slice>
        <from usec="0" sec="1617512597"/>
        <to usec="0" sec="1617512598"/>
    </anomaly>
    <anomaly type="notice" value="0.639163,1.12803,502,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="218.77.232.152"/>
        </slice>
        <from usec="0" sec="1617512912"/>
        <to usec="0" sec="1617512978"/>
    </anomaly>
    <anomaly type="notice" value="0.639163,1.12803,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.51.175.10"/>
        </slice>
        <from usec="0" sec="1617513243"/>
        <to usec="0" sec="1617513244"/>
    </anomaly>
    <anomaly type="notice" value="0.710715,1.14424,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="193.205.0.221" dst_ip="193.205.0.221" proto="icmp"/>
        </slice>
        <from usec="0" sec="1617512612"/>
        <to usec="0" sec="1617512614"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.221.123.86"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512508"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="162.19.239.174"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512508"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="36.228.206.107"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512508"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617513228"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617513228"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,011,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="192.9.42.146" src_port="465"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512506"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="176.183.34.93"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512508"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="45.163.116.34"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512508"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="143.193.132.43"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512598"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="217.194.183.255"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512504"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="142.96.233.26"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512508"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="159.153.76.82"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512508"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="188.33.137.139"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512598"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="79.65.248.79"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512508"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.221.30.238" src_port="53"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512508"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="64.51.101.140"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512506"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="143.193.23.224"/>
        </slice>
        <from usec="0" sec="1617512401"/>
        <to usec="0" sec="1617512508"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="13.100.197.36"/>
        </slice>
        <from usec="0" sec="1617512401"/>
        <to usec="0" sec="1617512497"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,502,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.77.50.195"/>
        </slice>
        <from usec="0" sec="1617512406"/>
        <to usec="0" sec="1617512507"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.132.154.240"/>
        </slice>
        <from usec="0" sec="1617512407"/>
        <to usec="0" sec="1617512598"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="64.49.80.20"/>
        </slice>
        <from usec="0" sec="1617512436"/>
        <to usec="0" sec="1617512505"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="13.48.107.31"/>
        </slice>
        <from usec="0" sec="1617512442"/>
        <to usec="0" sec="1617512488"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="202.199.57.105"/>
        </slice>
        <from usec="0" sec="1617512459"/>
        <to usec="0" sec="1617512471"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="91.172.228.152"/>
        </slice>
        <from usec="0" sec="1617512460"/>
        <to usec="0" sec="1617512499"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,502,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="192.205.238.150"/>
        </slice>
        <from usec="0" sec="1617512467"/>
        <to usec="0" sec="1617512497"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="184.204.166.114"/>
        </slice>
        <from usec="0" sec="1617512490"/>
        <to usec="0" sec="1617512493"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="45.36.135.163" dst_ip="202.25.166.230" dst_port="11211"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512594"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="182.118.43.87"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512597"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="31.81.246.245"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512956"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.221.24.183"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512598"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="170.200.117.46"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512598"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="178.61.128.107"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512597"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="143.82.173.85"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512597"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="167.124.243.147"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512598"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="45.255.55.78"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512598"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="117.158.57.55"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512597"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="146.185.33.169"/>
        </slice>
        <from usec="0" sec="1617512401"/>
        <to usec="0" sec="1617512597"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="162.125.142.187"/>
        </slice>
        <from usec="0" sec="1617512401"/>
        <to usec="0" sec="1617512597"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="104.71.225.175"/>
        </slice>
        <from usec="0" sec="1617512401"/>
        <to usec="0" sec="1617512594"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="198.239.174.194"/>
        </slice>
        <from usec="0" sec="1617512401"/>
        <to usec="0" sec="1617512665"/>
    </anomaly>
    <anomaly type="notice" value="0.645825,1.08333,999,0 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="133.228.216.203" dst_ip="116.116.251.228"/>
            <filter src_ip="133.228.216.203" src_port="53"/>
            <filter dst_ip="116.116.251.228" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="68.53.11.178"/>
        </slice>
        <from usec="0" sec="1617512401"/>
        <to usec="0" sec="1617512597"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="188.33.235.9"/>
        </slice>
        <from usec="0" sec="1617512402"/>
        <to usec="0" sec="1617512597"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.228.130.48"/>
        </slice>
        <from usec="0" sec="1617512402"/>
        <to usec="0" sec="1617512958"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="142.96.218.94"/>
        </slice>
        <from usec="0" sec="1617512403"/>
        <to usec="0" sec="1617512776"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="91.172.228.219"/>
        </slice>
        <from usec="0" sec="1617512404"/>
        <to usec="0" sec="1617512598"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="159.11.84.190"/>
        </slice>
        <from usec="0" sec="1617512404"/>
        <to usec="0" sec="1617512596"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="128.7.238.118" src_port="61953" dst_port="6204"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512598"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.218.45.237"/>
        </slice>
        <from usec="0" sec="1617512409"/>
        <to usec="0" sec="1617512417"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter src_ip="195.47.146.86"/>
        </slice>
        <from usec="0" sec="1617512410"/>
        <to usec="0" sec="1617512598"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="13.230.149.26"/>
        </slice>
        <from usec="0" sec="1617512411"/>
        <to usec="0" sec="1617512598"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="5.206.25.67"/>
        </slice>
        <from usec="0" sec="1617512418"/>
        <to usec="0" sec="1617512590"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.221.215.162"/>
        </slice>
        <from usec="0" sec="1617512439"/>
        <to usec="0" sec="1617512590"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.215.136.78"/>
        </slice>
        <from usec="0" sec="1617512539"/>
        <to usec="0" sec="1617512585"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="104.74.82.189"/>
        </slice>
        <from usec="0" sec="1617512558"/>
        <to usec="0" sec="1617512594"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.77.56.172" src_port="33434"/>
            <filter dst_ip="203.77.56.172" src_port="5004"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512778"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.228.71.178"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512626"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="54.131.180.181"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512778"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICecrqICecrqdurmterp">
        <slice>
            <filter dst_ip="203.77.55.113"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512778"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,999,0 0 0 1 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="45.36.135.163" dst_ip="202.25.166.204" dst_port="11211"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512868"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="188.33.161.95"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512958"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="178.247.17.92"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617513228"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="5.193.170.242"/>
        </slice>
        <from usec="0" sec="1617512401"/>
        <to usec="0" sec="1617512777"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="68.180.187.54"/>
        </slice>
        <from usec="0" sec="1617512401"/>
        <to usec="0" sec="1617512778"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,004,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.166.174" dst_port="445"/>
        </slice>
        <from usec="0" sec="1617512401"/>
        <to usec="0" sec="1617512778"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="159.11.226.113"/>
        </slice>
        <from usec="0" sec="1617512401"/>
        <to usec="0" sec="1617512777"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="162.125.142.219"/>
        </slice>
        <from usec="0" sec="1617512403"/>
        <to usec="0" sec="1617512777"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="119.133.236.16"/>
        </slice>
        <from usec="0" sec="1617512406"/>
        <to usec="0" sec="1617512776"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="35.90.248.134"/>
        </slice>
        <from usec="0" sec="1617512407"/>
        <to usec="0" sec="1617512733"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="184.237.99.106"/>
        </slice>
        <from usec="0" sec="1617512435"/>
        <to usec="0" sec="1617512778"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="192.109.58.168"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617513228"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="202.25.166.13" dst_port="15093"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512868"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,011,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="45.84.93.136" src_port="52869"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512868"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,020,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="71.6.185.111"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512958"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,020,0 0 0 1 0 0 0 0 0 0 0 0,hostout">
        <slice>
            <filter src_ip="202.199.36.246"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512868"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="143.193.18.157"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512867"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="18.180.27.193"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512866"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,004,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="203.77.56.172" dst_port="445"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512868"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.166.37"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617513227"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.221.193.87"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512868"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="74.102.54.226"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512868"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,004,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="202.25.166.203" dst_port="445"/>
        </slice>
        <from usec="0" sec="1617512401"/>
        <to usec="0" sec="1617512868"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="202.25.162.173" dst_port="43790"/>
        </slice>
        <from usec="0" sec="1617512401"/>
        <to usec="0" sec="1617512958"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,020,0 0 0 1 0 0 0 0 0 0 0 0,rflatIC">
        <slice>
            <filter dst_ip="23.191.100.179"/>
        </slice>
        <from usec="0" sec="1617512401"/>
        <to usec="0" sec="1617512867"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="50.140.3.94" dst_ip="202.25.162.110" dst_port="2628"/>
        </slice>
        <from usec="0" sec="1617512401"/>
        <to usec="0" sec="1617513138"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.26.79.221"/>
        </slice>
        <from usec="0" sec="1617512403"/>
        <to usec="0" sec="1617512820"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.166.198.179"/>
        </slice>
        <from usec="0" sec="1617512403"/>
        <to usec="0" sec="1617512894"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="52.246.227.237"/>
        </slice>
        <from usec="0" sec="1617512405"/>
        <to usec="0" sec="1617512867"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.162.56"/>
        </slice>
        <from usec="0" sec="1617512412"/>
        <to usec="0" sec="1617512867"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="20.191.45.44"/>
        </slice>
        <from usec="0" sec="1617512455"/>
        <to usec="0" sec="1617513046"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="152.180.8.177"/>
        </slice>
        <from usec="0" sec="1617512510"/>
        <to usec="0" sec="1617513135"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="54.210.113.104"/>
        </slice>
        <from usec="0" sec="1617512686"/>
        <to usec="0" sec="1617512694"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="52.84.145.3"/>
        </slice>
        <from usec="0" sec="1617512697"/>
        <to usec="0" sec="1617512703"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="61.104.7.72"/>
        </slice>
        <from usec="0" sec="1617512761"/>
        <to usec="0" sec="1617512788"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="3.239.56.131"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512958"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="202.25.162.61" dst_ip="178.127.62.43" src_port="2628"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512949"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,011,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="78.240.113.193" dst_port="8080"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512958"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="159.11.169.254"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512958"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="147.59.142.211" src_port="123"/>
            <filter dst_ip="147.59.142.211"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512958"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.255.203.29"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512953"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="23.139.72.18"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512958"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="62.117.242.27"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512958"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="73.26.83.11"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617512901"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,502,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="126.255.56.155"/>
        </slice>
        <from usec="0" sec="1617512401"/>
        <to usec="0" sec="1617513137"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="172.104.127.242"/>
        </slice>
        <from usec="0" sec="1617512401"/>
        <to usec="0" sec="1617512957"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="52.240.112.114"/>
        </slice>
        <from usec="0" sec="1617512401"/>
        <to usec="0" sec="1617512952"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="162.125.142.161"/>
        </slice>
        <from usec="0" sec="1617512401"/>
        <to usec="0" sec="1617512958"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="49.214.135.22"/>
        </slice>
        <from usec="0" sec="1617512401"/>
        <to usec="0" sec="1617512954"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="143.193.132.198"/>
        </slice>
        <from usec="0" sec="1617512401"/>
        <to usec="0" sec="1617512958"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="49.215.22.16"/>
        </slice>
        <from usec="0" sec="1617512402"/>
        <to usec="0" sec="1617512958"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="71.221.212.127"/>
        </slice>
        <from usec="0" sec="1617512402"/>
        <to usec="0" sec="1617512958"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="207.177.55.2"/>
        </slice>
        <from usec="0" sec="1617512404"/>
        <to usec="0" sec="1617512950"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.221.121.57"/>
        </slice>
        <from usec="0" sec="1617512404"/>
        <to usec="0" sec="1617512957"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="54.64.249.229"/>
        </slice>
        <from usec="0" sec="1617512404"/>
        <to usec="0" sec="1617512955"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,004,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="202.25.166.194" dst_port="445"/>
        </slice>
        <from usec="0" sec="1617512405"/>
        <to usec="0" sec="1617513226"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="64.222.255.175"/>
        </slice>
        <from usec="0" sec="1617512406"/>
        <to usec="0" sec="1617512957"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="3.84.72.195"/>
        </slice>
        <from usec="0" sec="1617512407"/>
        <to usec="0" sec="1617512956"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="183.187.159.248"/>
        </slice>
        <from usec="0" sec="1617512407"/>
        <to usec="0" sec="1617512933"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.228.199.166"/>
        </slice>
        <from usec="0" sec="1617512407"/>
        <to usec="0" sec="1617512954"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,052,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="164.213.215.164"/>
        </slice>
        <from usec="0" sec="1617512407"/>
        <to usec="0" sec="1617512955"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="190.245.243.90"/>
        </slice>
        <from usec="0" sec="1617512407"/>
        <to usec="0" sec="1617512958"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="15.219.47.124"/>
        </slice>
        <from usec="0" sec="1617512408"/>
        <to usec="0" sec="1617512956"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.25.88.176"/>
        </slice>
        <from usec="0" sec="1617512415"/>
        <to usec="0" sec="1617512922"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="31.241.179.42"/>
        </slice>
        <from usec="0" sec="1617512425"/>
        <to usec="0" sec="1617512930"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="104.110.185.6"/>
        </slice>
        <from usec="0" sec="1617512431"/>
        <to usec="0" sec="1617512882"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="13.49.242.41"/>
        </slice>
        <from usec="0" sec="1617512467"/>
        <to usec="0" sec="1617512798"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="51.151.20.75"/>
        </slice>
        <from usec="0" sec="1617512469"/>
        <to usec="0" sec="1617512954"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="47.86.36.93"/>
        </slice>
        <from usec="0" sec="1617512477"/>
        <to usec="0" sec="1617512833"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="54.132.95.144"/>
        </slice>
        <from usec="0" sec="1617512589"/>
        <to usec="0" sec="1617512848"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="52.82.154.194"/>
        </slice>
        <from usec="0" sec="1617512640"/>
        <to usec="0" sec="1617513208"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="162.24.28.210"/>
        </slice>
        <from usec="0" sec="1617512738"/>
        <to usec="0" sec="1617512902"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="159.153.226.142"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617513046"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="178.61.148.224"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617513048"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="50.234.195.231"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617513048"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="74.188.14.109"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617513048"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="106.53.226.142"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617513044"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="170.200.117.116"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617513048"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="139.189.166.230"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617513048"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="152.120.246.190"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617513048"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="162.125.142.171"/>
        </slice>
        <from usec="0" sec="1617512401"/>
        <to usec="0" sec="1617513047"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="132.145.146.66"/>
        </slice>
        <from usec="0" sec="1617512401"/>
        <to usec="0" sec="1617513048"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="180.151.122.63"/>
        </slice>
        <from usec="0" sec="1617512401"/>
        <to usec="0" sec="1617513037"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="138.190.204.152"/>
        </slice>
        <from usec="0" sec="1617512402"/>
        <to usec="0" sec="1617513048"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="143.204.126.155"/>
        </slice>
        <from usec="0" sec="1617512402"/>
        <to usec="0" sec="1617513047"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="71.6.145.245"/>
        </slice>
        <from usec="0" sec="1617512403"/>
        <to usec="0" sec="1617513042"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="122.183.186.186"/>
        </slice>
        <from usec="0" sec="1617512403"/>
        <to usec="0" sec="1617513042"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="138.112.87.35"/>
        </slice>
        <from usec="0" sec="1617512403"/>
        <to usec="0" sec="1617513046"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="180.151.122.134"/>
        </slice>
        <from usec="0" sec="1617512405"/>
        <to usec="0" sec="1617513030"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="185.255.72.243"/>
        </slice>
        <from usec="0" sec="1617512405"/>
        <to usec="0" sec="1617513043"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="180.114.227.220"/>
        </slice>
        <from usec="0" sec="1617512406"/>
        <to usec="0" sec="1617512966"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="162.125.142.133"/>
        </slice>
        <from usec="0" sec="1617512407"/>
        <to usec="0" sec="1617512964"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="27.112.251.157"/>
        </slice>
        <from usec="0" sec="1617512410"/>
        <to usec="0" sec="1617512994"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="192.132.87.132"/>
        </slice>
        <from usec="0" sec="1617512414"/>
        <to usec="0" sec="1617513035"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,020,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.77.48.241" dst_port="53"/>
            <filter dst_ip="203.77.48.241"/>
        </slice>
        <from usec="0" sec="1617512401"/>
        <to usec="0" sec="1617513136"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="81.65.217.140"/>
        </slice>
        <from usec="0" sec="1617512479"/>
        <to usec="0" sec="1617513010"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="167.193.246.151"/>
        </slice>
        <from usec="0" sec="1617512499"/>
        <to usec="0" sec="1617512923"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="163.221.146.183" dst_port="443"/>
            <filter dst_ip="52.66.47.213" dst_port="443"/>
        </slice>
        <from usec="0" sec="1617512407"/>
        <to usec="0" sec="1617513017"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="91.192.180.76"/>
        </slice>
        <from usec="0" sec="1617512703"/>
        <to usec="0" sec="1617513044"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="47.86.36.17"/>
        </slice>
        <from usec="0" sec="1617512840"/>
        <to usec="0" sec="1617513048"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="52.244.47.163"/>
        </slice>
        <from usec="0" sec="1617512849"/>
        <to usec="0" sec="1617513045"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="178.97.210.182"/>
        </slice>
        <from usec="0" sec="1617512860"/>
        <to usec="0" sec="1617513047"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="40.181.96.111"/>
        </slice>
        <from usec="0" sec="1617512958"/>
        <to usec="0" sec="1617512964"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="167.135.89.34"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617513138"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="81.91.121.84"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617513138"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.25.162.45"/>
        </slice>
        <from usec="0" sec="1617512401"/>
        <to usec="0" sec="1617513136"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,502,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.77.60.57" dst_port="22"/>
        </slice>
        <from usec="0" sec="1617512403"/>
        <to usec="0" sec="1617513138"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="59.40.230.169"/>
        </slice>
        <from usec="0" sec="1617512409"/>
        <to usec="0" sec="1617513125"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="3.98.102.17"/>
        </slice>
        <from usec="0" sec="1617512411"/>
        <to usec="0" sec="1617513102"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="172.104.197.200" dst_ip="202.25.162.32" dst_port="2628"/>
        </slice>
        <from usec="0" sec="1617512413"/>
        <to usec="0" sec="1617513133"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="3.233.51.113"/>
        </slice>
        <from usec="0" sec="1617512415"/>
        <to usec="0" sec="1617513216"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="54.64.170.84"/>
        </slice>
        <from usec="0" sec="1617512429"/>
        <to usec="0" sec="1617513090"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="40.147.214.29"/>
        </slice>
        <from usec="0" sec="1617512488"/>
        <to usec="0" sec="1617513091"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="79.103.120.28"/>
        </slice>
        <from usec="0" sec="1617512879"/>
        <to usec="0" sec="1617513138"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="126.245.173.253"/>
        </slice>
        <from usec="0" sec="1617512907"/>
        <to usec="0" sec="1617513027"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="54.71.114.143"/>
        </slice>
        <from usec="0" sec="1617513060"/>
        <to usec="0" sec="1617513062"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="60.180.185.130"/>
        </slice>
        <from usec="0" sec="1617513101"/>
        <to usec="0" sec="1617513106"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="167.135.89.53"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617513228"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.162.126"/>
        </slice>
        <from usec="0" sec="1617512400"/>
        <to usec="0" sec="1617513228"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="93.141.30.125"/>
        </slice>
        <from usec="0" sec="1617512405"/>
        <to usec="0" sec="1617513228"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="180.151.122.223"/>
        </slice>
        <from usec="0" sec="1617512410"/>
        <to usec="0" sec="1617513225"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="52.74.45.217"/>
        </slice>
        <from usec="0" sec="1617512414"/>
        <to usec="0" sec="1617513226"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="5.206.25.67"/>
        </slice>
        <from usec="0" sec="1617512418"/>
        <to usec="0" sec="1617513228"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="165.131.44.146" src_port="61953" dst_port="27017"/>
        </slice>
        <from usec="0" sec="1617512568"/>
        <to usec="0" sec="1617513227"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="73.115.207.229"/>
        </slice>
        <from usec="0" sec="1617512970"/>
        <to usec="0" sec="1617513101"/>
    </anomaly>
    <anomaly type="notice" value="0.373894,1.10561,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="126.161.137.15"/>
        </slice>
        <from usec="0" sec="1617513050"/>
        <to usec="0" sec="1617513054"/>
    </anomaly>
    <anomaly type="notice" value="0.713343,1.13526,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="128.7.38.255"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713343,1.13526,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="13.230.149.75"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713343,1.13526,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="13.49.242.72"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713343,1.13526,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="134.17.164.121" src_port="47515" dst_port="5385"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713343,1.13526,010,0 0 0 0 0 0 0 0 0 1 0 0,ntscSYN">
        <slice>
            <filter src_ip="134.17.222.160" src_port="46975" dst_port="30470"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713343,1.13526,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="151.74.105.15"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713343,1.13526,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="172.105.147.36"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713343,1.13526,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="192.109.58.168"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.645825,1.08333,010,0 0 0 1 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="195.144.58.250"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713343,1.13526,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="163.221.67.55"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713343,1.13526,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="203.77.59.164" src_port="10022"/>
            <filter src_ip="203.77.59.164"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713343,1.13526,999,0 0 0 0 0 0 0 0 0 1 0 0,point_to_point">
        <slice>
            <filter src_ip="203.77.54.93" dst_ip="5.130.168.152" src_port="465"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713343,1.13526,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="210.161.95.83" dst_ip="203.77.48.224" dst_port="53"/>
            <filter src_ip="210.161.95.83" dst_ip="163.221.79.131" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713343,1.13526,010,0 0 0 0 0 0 0 0 0 1 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="212.70.62.161"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713343,1.13526,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="218.81.34.226"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713343,1.13526,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="23.209.251.7"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713343,1.13526,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="23.131.46.148"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713343,1.13526,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="47.86.36.88"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713343,1.13526,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="49.143.32.38"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713343,1.13526,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="52.228.224.215"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713343,1.13526,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="64.51.105.1" src_port="61953" dst_port="9302"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713343,1.13526,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="68.180.180.149" src_port="61953" dst_port="25462"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713343,1.13526,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="89.208.67.7"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713343,1.13526,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="100.51.125.193"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713343,1.13526,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="126.228.254.92"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713343,1.13526,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="13.74.211.70"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.645825,1.08333,999,0 0 0 1 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="203.77.53.198" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713343,1.13526,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="185.5.46.59"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713343,1.13526,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="188.5.137.229"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713343,1.13526,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.162.235"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713343,1.13526,004,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="202.25.166.183" dst_port="445"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.645825,1.08333,999,0 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="167.135.89.115"/>
            <filter dst_ip="202.25.166.217"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713343,1.13526,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="3.68.172.31" dst_ip="203.77.59.165" dst_port="1194"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.645825,1.08333,502,0 0 0 1 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="203.77.57.82" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.645825,1.08333,502,0 0 0 1 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="193.39.114.96" dst_ip="203.77.55.139" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713343,1.13526,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="31.241.179.53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713343,1.13526,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="94.74.159.3"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
