<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="notice" value="0.559609,1.03826,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="17.188.29.1" dst_ip="163.194.50.169" src_port="443" dst_port="59856" proto="tcp"/>
        </slice>
        <from usec="0" sec="1625634197"/>
        <to usec="0" sec="1625634198"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="162.122.247.111" dst_ip="163.194.49.38" src_port="443" dst_port="62281" proto="tcp"/>
        </slice>
        <from usec="0" sec="1625634111"/>
        <to usec="0" sec="1625634113"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="185.184.88.212"/>
        </slice>
        <from usec="0" sec="1625634872"/>
        <to usec="0" sec="1625634873"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="150.189.220.91" dst_ip="163.194.237.30" src_port="9000" dst_port="59930" proto="udp"/>
        </slice>
        <from usec="0" sec="1625634039"/>
        <to usec="0" sec="1625634040"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.194.37.41" dst_ip="13.210.205.123" src_port="56787" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1625634037"/>
        <to usec="0" sec="1625634038"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="198.65.141.80" dst_ip="163.194.254.134" src_port="8801" proto="udp"/>
        </slice>
        <from usec="0" sec="1625634018"/>
        <to usec="0" sec="1625634125"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.194.40.146" dst_ip="13.160.5.191" src_port="62880" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1625634211"/>
        <to usec="0" sec="1625634212"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.194.252.207" dst_ip="198.65.244.138" dst_port="8801" proto="udp"/>
        </slice>
        <from usec="0" sec="1625634004"/>
        <to usec="0" sec="1625634519"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.194.79.112" dst_ip="47.55.99.12" src_port="58112" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1625634121"/>
        <to usec="0" sec="1625634861"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="117.53.200.211" dst_ip="203.207.112.218" src_port="443" dst_port="54293" proto="udp"/>
        </slice>
        <from usec="0" sec="1625634505"/>
        <to usec="0" sec="1625634507"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.194.105.244" dst_ip="13.63.149.227" src_port="53960" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1625634094"/>
        <to usec="0" sec="1625634803"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="3.10.111.114" dst_ip="163.194.254.22" src_port="443" dst_port="53732" proto="tcp"/>
        </slice>
        <from usec="0" sec="1625634079"/>
        <to usec="0" sec="1625634080"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="150.189.220.10" dst_ip="163.194.34.199" src_port="9000" dst_port="51526" proto="udp"/>
        </slice>
        <from usec="0" sec="1625634412"/>
        <to usec="0" sec="1625634566"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.194.122.73" dst_ip="31.234.138.204" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1625634549"/>
        <to usec="0" sec="1625634550"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="150.189.246.246" dst_ip="163.194.255.29" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1625634475"/>
        <to usec="0" sec="1625634566"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.194.45.154" dst_ip="13.210.204.99" src_port="58213" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1625634822"/>
        <to usec="0" sec="1625634824"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="150.189.223.159" dst_ip="163.194.39.234" src_port="9000" proto="udp"/>
        </slice>
        <from usec="0" sec="1625634190"/>
        <to usec="0" sec="1625634359"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.203.44.97" dst_ip="198.65.186.38" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1625634030"/>
        <to usec="0" sec="1625634891"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="151.106.225.217" dst_ip="163.194.131.62" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1625634601"/>
        <to usec="0" sec="1625634603"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.249.83.233" dst_ip="117.244.37.209" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1625634679"/>
        <to usec="0" sec="1625634680"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="150.189.246.40" dst_ip="163.194.237.29" src_port="9000" dst_port="57094" proto="udp"/>
        </slice>
        <from usec="0" sec="1625634464"/>
        <to usec="0" sec="1625634618"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.185.142.44" dst_ip="203.207.112.236" src_port="65252" dst_port="993" proto="tcp"/>
        </slice>
        <from usec="0" sec="1625634643"/>
        <to usec="0" sec="1625634644"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.194.254.243" dst_ip="52.168.229.76" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1625634589"/>
        <to usec="0" sec="1625634613"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="133.249.60.255" dst_port="443"/>
            <filter src_ip="133.249.60.255" dst_port="80"/>
        </slice>
        <from usec="0" sec="1625634211"/>
        <to usec="0" sec="1625634698"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="52.142.17.107"/>
        </slice>
        <from usec="0" sec="1625634337"/>
        <to usec="0" sec="1625634338"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,010,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="222.198.31.161" src_port="22" dst_port="9090"/>
        </slice>
        <from usec="0" sec="1625634170"/>
        <to usec="0" sec="1625634171"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="192.185.20.145" dst_ip="203.207.123.52"/>
        </slice>
        <from usec="0" sec="1625634475"/>
        <to usec="0" sec="1625634476"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.207.119.231"/>
        </slice>
        <from usec="0" sec="1625634814"/>
        <to usec="0" sec="1625634815"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="52.175.190.30" dst_ip="203.207.126.171"/>
        </slice>
        <from usec="0" sec="1625634575"/>
        <to usec="0" sec="1625634616"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,012,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="221.233.7.85" dst_port="65533"/>
        </slice>
        <from usec="0" sec="1625634418"/>
        <to usec="0" sec="1625634421"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="115.166.124.186" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1625634696"/>
        <to usec="0" sec="1625634697"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="94.248.52.102" dst_port="445" proto="tcp"/>
        </slice>
        <from usec="0" sec="1625634544"/>
        <to usec="0" sec="1625634560"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="14.104.171.80" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1625634503"/>
        <to usec="0" sec="1625634507"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="193.160.219.173" proto="tcp"/>
        </slice>
        <from usec="0" sec="1625634653"/>
        <to usec="0" sec="1625634672"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="190.24.154.167" dst_port="445" proto="tcp"/>
        </slice>
        <from usec="0" sec="1625634353"/>
        <to usec="0" sec="1625634356"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="112.229.211.185" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1625634585"/>
        <to usec="0" sec="1625634590"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="78.39.44.32" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1625634635"/>
        <to usec="0" sec="1625634642"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="117.244.37.91"/>
        </slice>
        <from usec="0" sec="1625634823"/>
        <to usec="0" sec="1625634824"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="13.11.203.172"/>
        </slice>
        <from usec="0" sec="1625634610"/>
        <to usec="0" sec="1625634612"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.194.122.140"/>
        </slice>
        <from usec="0" sec="1625634787"/>
        <to usec="0" sec="1625634788"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="221.53.185.156" dst_port="22"/>
        </slice>
        <from usec="0" sec="1625634796"/>
        <to usec="0" sec="1625634797"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.207.126.135"/>
        </slice>
        <from usec="0" sec="1625634201"/>
        <to usec="0" sec="1625634203"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.194.255.212" dst_ip="163.194.253.68" src_port="63005" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1625634862"/>
        <to usec="0" sec="1625634864"/>
    </anomaly>
    <anomaly type="notice" value="0.559609,1.03826,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDPDNS">
        <slice>
            <filter src_ip="37.205.219.227"/>
        </slice>
        <from usec="0" sec="1625634872"/>
        <to usec="0" sec="1625634873"/>
    </anomaly>
    <anomaly type="notice" value="0.693075,1.08212,010,0 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="60.76.166.163" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1625634212"/>
        <to usec="0" sec="1625634213"/>
    </anomaly>
    <anomaly type="notice" value="0.693075,1.08212,901,0 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="13.35.137.139" dst_port="443"/>
            <filter src_ip="13.35.137.139" dst_ip="8.64.187.254" dst_port="80"/>
        </slice>
        <from usec="0" sec="1625634211"/>
        <to usec="0" sec="1625634212"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1625634000"/>
        <to usec="0" sec="1625634828"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1625634000"/>
        <to usec="0" sec="1625634828"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.194.174.193" src_port="53"/>
        </slice>
        <from usec="0" sec="1625634000"/>
        <to usec="0" sec="1625634108"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.194.253.167"/>
        </slice>
        <from usec="0" sec="1625634002"/>
        <to usec="0" sec="1625634108"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="13.141.154.57"/>
        </slice>
        <from usec="0" sec="1625634024"/>
        <to usec="0" sec="1625634107"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="8.64.164.193"/>
        </slice>
        <from usec="0" sec="1625634000"/>
        <to usec="0" sec="1625634252"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="192.147.1.196"/>
        </slice>
        <from usec="0" sec="1625634000"/>
        <to usec="0" sec="1625634557"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,010,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="163.194.65.33" dst_ip="123.44.2.203" src_port="16001"/>
            <filter src_ip="202.26.246.18" dst_ip="123.44.2.203" src_port="9618"/>
        </slice>
        <from usec="0" sec="1625634000"/>
        <to usec="0" sec="1625634558"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="212.234.90.103" dst_port="80"/>
            <filter dst_ip="212.234.90.103"/>
        </slice>
        <from usec="0" sec="1625634000"/>
        <to usec="0" sec="1625634558"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="212.234.90.11" dst_port="80"/>
            <filter dst_ip="212.234.90.11"/>
        </slice>
        <from usec="0" sec="1625634000"/>
        <to usec="0" sec="1625634558"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,004,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.26.247.119" dst_port="445"/>
            <filter dst_ip="202.26.247.119" dst_port="58901"/>
        </slice>
        <from usec="0" sec="1625634000"/>
        <to usec="0" sec="1625634558"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="123.44.2.227" dst_ip="202.26.247.222" dst_port="416"/>
        </slice>
        <from usec="0" sec="1625634000"/>
        <to usec="0" sec="1625634558"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="163.194.94.10"/>
        </slice>
        <from usec="0" sec="1625634000"/>
        <to usec="0" sec="1625634558"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,020,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.194.239.100"/>
        </slice>
        <from usec="0" sec="1625634001"/>
        <to usec="0" sec="1625634553"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.194.4.249"/>
        </slice>
        <from usec="0" sec="1625634006"/>
        <to usec="0" sec="1625634556"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,052,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="210.99.240.153"/>
        </slice>
        <from usec="0" sec="1625634011"/>
        <to usec="0" sec="1625634414"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,010,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="219.29.127.69"/>
        </slice>
        <from usec="0" sec="1625634064"/>
        <to usec="0" sec="1625634536"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.111.173.26"/>
        </slice>
        <from usec="0" sec="1625634291"/>
        <to usec="0" sec="1625634556"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="46.115.2.237"/>
        </slice>
        <from usec="0" sec="1625634387"/>
        <to usec="0" sec="1625634471"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.194.205.46"/>
        </slice>
        <from usec="0" sec="1625634000"/>
        <to usec="0" sec="1625634717"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="212.234.90.195" dst_port="80"/>
            <filter dst_ip="212.234.90.195"/>
        </slice>
        <from usec="0" sec="1625634000"/>
        <to usec="0" sec="1625634738"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="103.33.10.63"/>
        </slice>
        <from usec="0" sec="1625634000"/>
        <to usec="0" sec="1625634736"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.26.246.144"/>
        </slice>
        <from usec="0" sec="1625634000"/>
        <to usec="0" sec="1625634738"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="74.127.225.148"/>
        </slice>
        <from usec="0" sec="1625634000"/>
        <to usec="0" sec="1625634738"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="111.232.235.181" dst_ip="202.26.246.62" dst_port="2160"/>
        </slice>
        <from usec="0" sec="1625634000"/>
        <to usec="0" sec="1625634738"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.26.247.53" src_port="445"/>
        </slice>
        <from usec="0" sec="1625634000"/>
        <to usec="0" sec="1625634738"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="193.1.53.101"/>
        </slice>
        <from usec="0" sec="1625634000"/>
        <to usec="0" sec="1625634734"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,010,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="67.16.41.190" dst_ip="202.26.242.126"/>
            <filter src_ip="67.16.41.190" dst_port="80"/>
            <filter src_ip="67.16.41.190" dst_port="443"/>
            <filter src_ip="97.95.125.238" dst_ip="202.26.242.126"/>
            <filter src_ip="97.95.125.238" dst_port="80"/>
            <filter dst_ip="202.26.242.126" dst_port="80"/>
            <filter dst_ip="202.26.242.126" dst_port="443"/>
        </slice>
        <from usec="0" sec="1625634000"/>
        <to usec="0" sec="1625634737"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="50.9.20.217"/>
        </slice>
        <from usec="0" sec="1625634000"/>
        <to usec="0" sec="1625634738"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="109.140.173.183"/>
        </slice>
        <from usec="0" sec="1625634001"/>
        <to usec="0" sec="1625634728"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="118.75.150.239"/>
        </slice>
        <from usec="0" sec="1625634003"/>
        <to usec="0" sec="1625634736"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="133.235.182.250"/>
        </slice>
        <from usec="0" sec="1625634004"/>
        <to usec="0" sec="1625634738"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="52.95.40.224"/>
        </slice>
        <from usec="0" sec="1625634004"/>
        <to usec="0" sec="1625634736"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.194.51.79"/>
        </slice>
        <from usec="0" sec="1625634004"/>
        <to usec="0" sec="1625634738"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.194.105.233"/>
        </slice>
        <from usec="0" sec="1625634006"/>
        <to usec="0" sec="1625634734"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.26.246.77"/>
        </slice>
        <from usec="0" sec="1625634006"/>
        <to usec="0" sec="1625634737"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="192.208.89.237"/>
        </slice>
        <from usec="0" sec="1625634007"/>
        <to usec="0" sec="1625634736"/>
    </anomaly>
    <anomaly type="notice" value="0.671175,1.02762,010,0 0 0 1 0 0 0 0 0 1 0 0,ntscSYN">
        <slice>
            <filter src_ip="89.4.173.169" dst_port="8332"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,012,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="117.58.25.78"/>
        </slice>
        <from usec="0" sec="1625634142"/>
        <to usec="0" sec="1625634562"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,010,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="82.233.56.251"/>
        </slice>
        <from usec="0" sec="1625634272"/>
        <to usec="0" sec="1625634737"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="162.63.151.107"/>
        </slice>
        <from usec="0" sec="1625634626"/>
        <to usec="0" sec="1625634669"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="18.182.40.218"/>
        </slice>
        <from usec="0" sec="1625634652"/>
        <to usec="0" sec="1625634723"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="49.98.158.101"/>
        </slice>
        <from usec="0" sec="1625634732"/>
        <to usec="0" sec="1625634737"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="185.204.104.142"/>
        </slice>
        <from usec="0" sec="1625634000"/>
        <to usec="0" sec="1625634828"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="40.69.246.134"/>
        </slice>
        <from usec="0" sec="1625634000"/>
        <to usec="0" sec="1625634826"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="99.82.70.43"/>
        </slice>
        <from usec="0" sec="1625634005"/>
        <to usec="0" sec="1625634816"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="106.53.131.51"/>
        </slice>
        <from usec="0" sec="1625634033"/>
        <to usec="0" sec="1625634808"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="129.175.126.189"/>
        </slice>
        <from usec="0" sec="1625634405"/>
        <to usec="0" sec="1625634795"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="101.27.141.171"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="104.243.106.40"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="163.194.169.98"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="111.232.235.156"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="111.232.235.141"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="111.232.235.133"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="111.232.235.130"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="114.100.160.90"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.591684,1.00828,504,1 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="114.118.124.19" dst_ip="163.194.142.211" src_port="59736" dst_port="443"/>
            <filter src_ip="114.118.124.19" dst_ip="163.194.152.174" src_port="21078" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="204.197.215.213" src_port="42592" dst_port="23"/>
            <filter src_ip="204.197.215.213" src_port="42592" dst_port="26"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="128.205.117.145"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="123.44.2.255"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="123.44.2.205"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.591684,1.00828,010,1 0 0 0 0 0 0 0 0 1 0 0,ntscSYN">
        <slice>
            <filter src_ip="204.197.215.213" dst_port="8099"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="131.142.253.11"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.671175,1.02762,020,0 0 0 1 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="133.21.124.159"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.671175,1.02762,504,0 0 0 1 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="133.249.157.39" dst_ip="54.240.164.62" src_port="53578" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.671175,1.02762,020,0 0 0 1 0 0 0 0 0 1 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="212.234.90.29" dst_port="80"/>
            <filter dst_ip="212.234.90.29"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.671175,1.02762,020,0 0 0 1 0 0 0 0 0 1 0 0,ttl_error">
        <slice>
            <filter src_ip="133.249.106.229"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="133.249.123.135"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.671175,1.02762,999,0 0 0 1 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="133.249.122.234" src_port="993"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.671175,1.02762,504,0 0 0 1 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="133.249.11.208" dst_port="443"/>
            <filter src_ip="133.249.11.208" dst_ip="91.66.161.236" dst_port="123"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.591684,1.00828,999,1 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter src_ip="133.235.190.112" dst_ip="103.20.227.94"/>
            <filter src_ip="23.210.222.174" dst_ip="103.20.227.94"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,502,0 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="133.235.190.13" dst_ip="103.20.227.94"/>
            <filter src_ip="133.235.190.13" src_port="22"/>
            <filter dst_ip="103.20.227.94" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="134.239.166.194"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="138.106.34.150" src_port="58680"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.671175,1.02762,010,0 0 0 1 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="212.234.90.59" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,054,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.194.122.99"/>
        </slice>
        <from usec="0" sec="1625634021"/>
        <to usec="0" sec="1625634732"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="150.189.221.119"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="202.203.43.246"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="150.189.240.170"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="150.189.240.209"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="111.232.235.167"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.671175,1.02762,010,0 0 0 1 0 0 0 0 0 1 0 0,ntscSYN">
        <slice>
            <filter src_ip="13.35.137.229" dst_port="10507"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,011,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="159.154.78.61"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.671175,1.02762,504,0 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="163.194.123.164" dst_port="443"/>
            <filter dst_ip="52.98.157.149" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="163.194.123.111"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="163.194.123.126" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.671175,1.02762,504,0 0 0 1 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="163.194.125.52" dst_ip="143.86.200.158" dst_port="443"/>
            <filter src_ip="163.194.125.52" dst_ip="143.86.29.1" dst_port="443"/>
            <filter src_ip="163.194.125.52" dst_ip="27.170.44.84" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="163.194.46.69" dst_ip="65.226.222.179" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.194.94.42" dst_port="443"/>
        </slice>
        <from usec="0" sec="1625634000"/>
        <to usec="0" sec="1625634724"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="167.63.146.239"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="172.169.243.16" dst_port="9999"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="54.187.97.19"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="203.207.112.218"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="185.180.127.162"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.671175,1.02762,010,0 0 0 1 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="185.181.102.149"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="188.72.245.90" dst_port="5909"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="193.72.180.108"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="194.152.117.217"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="149.129.45.222"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="202.0.6.164"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,020,0 0 0 0 0 0 0 0 0 1 0 0,ttl_error">
        <slice>
            <filter src_ip="202.198.135.2"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="202.26.247.6" src_port="58845"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="203.4.94.21"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="202.26.242.190"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="203.207.123.175" dst_ip="203.187.107.22" src_port="80" dst_port="46183"/>
            <filter src_ip="203.207.123.175" dst_ip="203.187.107.22" src_port="80" dst_port="42538"/>
            <filter src_ip="203.207.123.175" dst_ip="203.187.107.22" src_port="80" dst_port="25833"/>
            <filter src_ip="203.207.123.175" dst_ip="203.187.107.22" src_port="80" dst_port="25228"/>
            <filter src_ip="203.207.123.175" dst_ip="203.187.107.22" src_port="80" dst_port="13653"/>
        </slice>
        <from usec="0" sec="1625634496"/>
        <to usec="0" sec="1625634499"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,020,0 0 0 0 0 0 0 0 0 1 0 0,ttl_error">
        <slice>
            <filter src_ip="203.207.125.198"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="205.185.231.230"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="212.234.90.109" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="212.234.90.110" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="212.234.90.56" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="212.234.90.176" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.671175,1.02762,010,0 0 0 1 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="212.234.90.254" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="212.234.90.233" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.671175,1.02762,010,0 0 0 1 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="222.209.208.30" src_port="23456"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="204.197.215.213"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="212.234.90.163"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="204.197.215.213"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,010,0 0 0 0 0 0 0 0 0 1 0 0,ntscSYN">
        <slice>
            <filter src_ip="5.61.129.27" dst_port="81"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,999,0 0 0 0 0 0 0 0 0 1 0 0,heavy_hitter">
        <slice>
            <filter src_ip="52.175.100.0"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,020,0 0 0 0 0 0 0 0 0 1 0 0,icmp_error">
        <slice>
            <filter src_ip="54.128.164.202"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="65.226.213.249"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="67.58.78.94"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="13.194.31.202"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="92.136.170.36" src_port="61274" dst_port="20"/>
            <filter src_ip="92.136.170.36" src_port="62335" dst_port="21"/>
            <filter src_ip="92.136.170.36" src_port="65130" dst_port="9997"/>
            <filter src_ip="92.136.170.36" src_port="63311" dst_port="8899"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="92.136.170.52" dst_port="5906"/>
            <filter src_ip="92.136.170.52" src_port="60471" dst_port="8000"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,502,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="106.111.253.106"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,502,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="185.246.114.20" dst_ip="133.235.191.254" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,010,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="161.186.10.1" src_port="41000"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="162.235.252.205"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.194.247.13" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.591684,1.00828,504,1 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.194.254.177" src_port="80"/>
            <filter dst_ip="163.194.254.177" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.194.117.174" src_port="443"/>
            <filter dst_ip="163.194.117.174"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.591684,1.00828,504,1 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.194.110.28" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.194.105.116" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.194.37.46" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.194.46.105" src_port="443"/>
            <filter dst_ip="163.194.46.105" src_port="5004"/>
            <filter dst_ip="163.194.46.105" src_port="33434"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.194.48.137" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="99.84.193.197" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="185.204.106.190"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="111.232.235.163" dst_ip="202.26.246.243" dst_port="3"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="202.26.246.190"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="111.232.235.157" dst_ip="202.26.246.165" dst_port="14443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter src_ip="111.232.235.148" dst_ip="202.26.247.254" dst_port="9595"/>
            <filter src_ip="111.232.235.129" dst_ip="202.26.247.254" dst_port="32771"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="111.232.235.157" dst_ip="202.26.247.87" dst_port="1234"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.671175,1.02762,004,0 0 0 1 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="202.26.242.196" dst_port="445"/>
            <filter src_ip="81.170.248.247" dst_ip="202.26.242.196" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="202.26.242.130" dst_port="445"/>
            <filter src_ip="111.232.235.140" dst_ip="202.26.242.130" dst_port="1084"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="133.21.66.35"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="3.153.223.175"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="46.38.73.96"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="47.185.196.35"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="81.18.78.119"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,010,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="89.65.185.158" dst_port="46123"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.194.248.48" src_port="443"/>
            <filter dst_ip="163.194.248.48" src_port="5004"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,504,0 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="198.65.185.137" src_port="443"/>
            <filter dst_ip="163.194.48.62" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="203.207.112.208" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.490685,0.997396,999,0 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="111.232.235.165"/>
            <filter src_ip="111.232.235.162"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.643078,1.05705,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="167.63.146.148"/>
        </slice>
        <from usec="0" sec="1625634000"/>
        <to usec="0" sec="1625634738"/>
    </anomaly>
</admd:annotation>
