<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="notice" value="0.576255,1.14391,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="17.7.198.171" dst_ip="163.217.136.253" src_port="443" dst_port="65365" proto="tcp"/>
        </slice>
        <from usec="0" sec="1628398961"/>
        <to usec="0" sec="1628398962"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="153.2.166.180" dst_ip="203.109.245.175" src_port="40716" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1628399082"/>
        <to usec="0" sec="1628399086"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="163.217.231.199" dst_ip="20.31.49.71" src_port="50008" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1628398985"/>
        <to usec="0" sec="1628398986"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.73.239.29" dst_ip="163.217.11.38" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1628398928"/>
        <to usec="0" sec="1628398929"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.109.225.65" dst_ip="126.43.94.114" src_port="443" dst_port="59876" proto="tcp"/>
        </slice>
        <from usec="0" sec="1628398948"/>
        <to usec="0" sec="1628398952"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.244.220.205" dst_ip="52.240.187.199" dst_port="3479" proto="udp"/>
        </slice>
        <from usec="0" sec="1628398942"/>
        <to usec="0" sec="1628399693"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICterp">
        <slice>
            <filter src_ip="202.254.245.197" dst_ip="106.143.30.124" proto="icmp"/>
        </slice>
        <from usec="0" sec="1628399088"/>
        <to usec="0" sec="1628399090"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,999,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="68.26.177.192"/>
        </slice>
        <from usec="0" sec="1628399488"/>
        <to usec="0" sec="1628399489"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="219.160.249.115" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1628399008"/>
        <to usec="0" sec="1628399012"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="23.95.193.104" dst_port="3040"/>
        </slice>
        <from usec="0" sec="1628399637"/>
        <to usec="0" sec="1628399648"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="218.96.81.94" dst_port="5555" proto="tcp"/>
        </slice>
        <from usec="0" sec="1628398972"/>
        <to usec="0" sec="1628398974"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="115.76.155.221" dst_port="5555" proto="tcp"/>
        </slice>
        <from usec="0" sec="1628398974"/>
        <to usec="0" sec="1628398975"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="167.24.133.34" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1628399146"/>
        <to usec="0" sec="1628399147"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="202.106.141.80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1628399160"/>
        <to usec="0" sec="1628399163"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="93.190.49.47" dst_port="5555" proto="tcp"/>
        </slice>
        <from usec="0" sec="1628398978"/>
        <to usec="0" sec="1628398980"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="183.221.143.67" dst_port="5555" proto="tcp"/>
        </slice>
        <from usec="0" sec="1628398971"/>
        <to usec="0" sec="1628398972"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="50.21.1.205" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1628399012"/>
        <to usec="0" sec="1628399013"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="72.10.16.246" dst_port="5555" proto="tcp"/>
        </slice>
        <from usec="0" sec="1628398944"/>
        <to usec="0" sec="1628398946"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="115.76.2.200" dst_port="5555" proto="tcp"/>
        </slice>
        <from usec="0" sec="1628398970"/>
        <to usec="0" sec="1628398971"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="114.220.126.177" dst_port="5555" proto="tcp"/>
        </slice>
        <from usec="0" sec="1628398968"/>
        <to usec="0" sec="1628398977"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="126.179.57.52" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1628399082"/>
        <to usec="0" sec="1628399083"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.24.122.136" dst_port="5555" proto="tcp"/>
        </slice>
        <from usec="0" sec="1628398974"/>
        <to usec="0" sec="1628398975"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="182.150.232.18" dst_port="5555" proto="tcp"/>
        </slice>
        <from usec="0" sec="1628398934"/>
        <to usec="0" sec="1628398938"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="121.54.2.194" dst_port="5555" proto="tcp"/>
        </slice>
        <from usec="0" sec="1628398965"/>
        <to usec="0" sec="1628398974"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="116.39.103.117" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398965"/>
        <to usec="0" sec="1628398966"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="1.168.95.243" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1628399500"/>
        <to usec="0" sec="1628399508"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="112.191.38.115" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1628399461"/>
        <to usec="0" sec="1628399462"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="203.48.76.137" dst_port="5555" proto="tcp"/>
        </slice>
        <from usec="0" sec="1628398958"/>
        <to usec="0" sec="1628398978"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="78.166.251.96" dst_port="5555" proto="tcp"/>
        </slice>
        <from usec="0" sec="1628398956"/>
        <to usec="0" sec="1628398957"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="73.224.98.127" dst_port="5555" proto="tcp"/>
        </slice>
        <from usec="0" sec="1628398969"/>
        <to usec="0" sec="1628398976"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="87.149.29.85" proto="tcp"/>
        </slice>
        <from usec="0" sec="1628399335"/>
        <to usec="0" sec="1628399342"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="24.91.94.63" dst_port="5555" proto="tcp"/>
        </slice>
        <from usec="0" sec="1628398966"/>
        <to usec="0" sec="1628398980"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="94.80.2.13" dst_port="5555" proto="tcp"/>
        </slice>
        <from usec="0" sec="1628398976"/>
        <to usec="0" sec="1628398987"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="174.122.96.141" dst_ip="203.109.249.232" src_port="61090" dst_port="443"/>
        </slice>
        <from usec="0" sec="1628398977"/>
        <to usec="0" sec="1628398979"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="153.2.233.8" dst_ip="203.109.252.191" src_port="33054" dst_port="80"/>
        </slice>
        <from usec="0" sec="1628398995"/>
        <to usec="0" sec="1628398999"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="134.0.56.124" dst_ip="163.217.247.58" src_port="8801" dst_port="62685"/>
        </slice>
        <from usec="0" sec="1628398958"/>
        <to usec="0" sec="1628398983"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.109.253.34" dst_ip="4.168.242.28" src_port="53"/>
            <filter src_ip="203.109.253.34" dst_ip="4.168.242.27" src_port="53"/>
            <filter src_ip="203.109.253.34" dst_ip="4.168.242.26" src_port="53"/>
        </slice>
        <from usec="0" sec="1628399598"/>
        <to usec="0" sec="1628399600"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="121.72.120.88" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398959"/>
        <to usec="0" sec="1628398976"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="193.205.245.191" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398959"/>
        <to usec="0" sec="1628398973"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="109.201.212.61" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398959"/>
        <to usec="0" sec="1628398972"/>
    </anomaly>
    <anomaly type="notice" value="0.820849,1.24919,010,1 0 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="211.27.30.57" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398961"/>
        <to usec="0" sec="1628398974"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="176.24.125.198" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398958"/>
        <to usec="0" sec="1628398969"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="139.196.192.0" src_port="49569"/>
        </slice>
        <from usec="0" sec="1628398966"/>
        <to usec="0" sec="1628399021"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="112.231.218.253" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628399143"/>
        <to usec="0" sec="1628399144"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="213.32.0.97" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398967"/>
        <to usec="0" sec="1628398975"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="201.46.66.248" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398971"/>
        <to usec="0" sec="1628398972"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="203.109.255.111" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398964"/>
        <to usec="0" sec="1628398975"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="174.102.63.234" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398961"/>
        <to usec="0" sec="1628398972"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="190.73.233.20" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398965"/>
        <to usec="0" sec="1628398976"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="116.85.85.119" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398934"/>
        <to usec="0" sec="1628398942"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="124.138.142.142" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398965"/>
        <to usec="0" sec="1628398976"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="37.98.81.145" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398960"/>
        <to usec="0" sec="1628398971"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="189.125.179.11" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398958"/>
        <to usec="0" sec="1628398960"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="93.77.80.31" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398962"/>
        <to usec="0" sec="1628398973"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="117.162.90.29" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398968"/>
        <to usec="0" sec="1628398978"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="142.156.102.1" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398962"/>
        <to usec="0" sec="1628398973"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="113.143.73.103" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398960"/>
        <to usec="0" sec="1628398974"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="115.145.50.235" dst_port="445"/>
        </slice>
        <from usec="0" sec="1628398995"/>
        <to usec="0" sec="1628398998"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="117.162.90.22" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398961"/>
        <to usec="0" sec="1628398972"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="117.162.91.25" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398958"/>
        <to usec="0" sec="1628398969"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="218.169.236.243" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398971"/>
        <to usec="0" sec="1628398982"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="108.78.123.159" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398963"/>
        <to usec="0" sec="1628398974"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="221.98.254.164" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398963"/>
        <to usec="0" sec="1628398975"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="117.162.39.36" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398965"/>
        <to usec="0" sec="1628398972"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="218.167.111.156" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398969"/>
        <to usec="0" sec="1628398980"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="85.7.64.214" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398984"/>
        <to usec="0" sec="1628398998"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="61.127.145.214" dst_port="1433"/>
            <filter src_ip="61.127.145.214" dst_port="445"/>
        </slice>
        <from usec="0" sec="1628399597"/>
        <to usec="0" sec="1628399604"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="116.16.252.43" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398941"/>
        <to usec="0" sec="1628398945"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="77.33.79.61" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398972"/>
        <to usec="0" sec="1628398980"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="125.130.241.53" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398960"/>
        <to usec="0" sec="1628398973"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="122.9.103.74" dst_port="22"/>
        </slice>
        <from usec="0" sec="1628399505"/>
        <to usec="0" sec="1628399507"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="91.236.208.200" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398963"/>
        <to usec="0" sec="1628398974"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="49.82.139.59" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398963"/>
        <to usec="0" sec="1628398972"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="217.151.168.71" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398961"/>
        <to usec="0" sec="1628398971"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="82.24.105.198" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398965"/>
        <to usec="0" sec="1628398976"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="124.221.11.60" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398962"/>
        <to usec="0" sec="1628398975"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="200.221.74.179" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398964"/>
        <to usec="0" sec="1628398977"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="181.198.216.207" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398964"/>
        <to usec="0" sec="1628398975"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="79.155.48.227" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398959"/>
        <to usec="0" sec="1628398970"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="59.180.7.166" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398960"/>
        <to usec="0" sec="1628398972"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="109.130.23.57" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398961"/>
        <to usec="0" sec="1628398972"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="218.216.8.248" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398962"/>
        <to usec="0" sec="1628398973"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="181.198.61.86" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398965"/>
        <to usec="0" sec="1628398978"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="14.11.8.214" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1628399405"/>
        <to usec="0" sec="1628399406"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="120.213.248.242" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398962"/>
        <to usec="0" sec="1628398973"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="201.44.88.179" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398973"/>
        <to usec="0" sec="1628398977"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="113.52.178.240" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398965"/>
        <to usec="0" sec="1628398980"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="179.219.223.73" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398962"/>
        <to usec="0" sec="1628398972"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="189.249.90.221" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398963"/>
        <to usec="0" sec="1628398976"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="201.194.201.130" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398962"/>
        <to usec="0" sec="1628398975"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="115.76.199.90" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398929"/>
        <to usec="0" sec="1628398942"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="31.223.102.151" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628399185"/>
        <to usec="0" sec="1628399198"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="37.205.91.28" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398964"/>
        <to usec="0" sec="1628398975"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="118.206.192.141" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398965"/>
        <to usec="0" sec="1628398976"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="81.131.79.66" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398969"/>
        <to usec="0" sec="1628398980"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="39.18.92.35" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398961"/>
        <to usec="0" sec="1628398972"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="188.86.55.208" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398964"/>
        <to usec="0" sec="1628398975"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="111.191.167.26" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1628399019"/>
        <to usec="0" sec="1628399021"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="175.59.206.216" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398962"/>
        <to usec="0" sec="1628398973"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="177.57.155.26" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398944"/>
        <to usec="0" sec="1628398955"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="59.175.0.39" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398976"/>
        <to usec="0" sec="1628398987"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="117.162.36.21" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398960"/>
        <to usec="0" sec="1628398970"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="66.6.118.204" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1628399146"/>
        <to usec="0" sec="1628399147"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="87.241.184.85" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398960"/>
        <to usec="0" sec="1628398972"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="181.198.55.149" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398968"/>
        <to usec="0" sec="1628398979"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="154.118.57.86" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398968"/>
        <to usec="0" sec="1628399000"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="121.68.235.45" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398962"/>
        <to usec="0" sec="1628398974"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="78.166.33.108" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398959"/>
        <to usec="0" sec="1628398970"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.156.249.17" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398958"/>
        <to usec="0" sec="1628398971"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="190.58.212.208" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398967"/>
        <to usec="0" sec="1628398968"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="191.5.167.16" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398959"/>
        <to usec="0" sec="1628398964"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="188.242.155.47" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398960"/>
        <to usec="0" sec="1628398971"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="117.162.39.65" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398962"/>
        <to usec="0" sec="1628398974"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="116.85.192.58" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398952"/>
        <to usec="0" sec="1628398956"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="61.170.30.202" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398968"/>
        <to usec="0" sec="1628398969"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="109.72.97.72" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398960"/>
        <to usec="0" sec="1628398971"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="117.162.91.119" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398963"/>
        <to usec="0" sec="1628398974"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="122.255.208.184" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398968"/>
        <to usec="0" sec="1628398981"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="117.162.91.121" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398972"/>
        <to usec="0" sec="1628398983"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="59.177.228.186" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398970"/>
        <to usec="0" sec="1628398981"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="82.24.94.5" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398960"/>
        <to usec="0" sec="1628398971"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="31.132.114.129" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398963"/>
        <to usec="0" sec="1628398974"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="93.190.34.240" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398958"/>
        <to usec="0" sec="1628398970"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="122.137.216.123" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398961"/>
        <to usec="0" sec="1628398972"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="191.161.218.134" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398965"/>
        <to usec="0" sec="1628398977"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="159.205.97.132" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398970"/>
        <to usec="0" sec="1628398983"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="183.30.120.124" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1628399204"/>
        <to usec="0" sec="1628399205"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="14.85.126.127" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398958"/>
        <to usec="0" sec="1628398969"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="51.94.237.141" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398944"/>
        <to usec="0" sec="1628398951"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,011,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="137.97.72.108" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1628398936"/>
        <to usec="0" sec="1628398944"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="183.16.110.108" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398963"/>
        <to usec="0" sec="1628398975"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="84.209.31.102" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398960"/>
        <to usec="0" sec="1628398973"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="198.12.92.57" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398967"/>
        <to usec="0" sec="1628398977"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="46.49.181.157" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398961"/>
        <to usec="0" sec="1628398978"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="112.22.100.143" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1628399240"/>
        <to usec="0" sec="1628399248"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="111.201.155.140" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398957"/>
        <to usec="0" sec="1628398962"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="190.207.162.106" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398974"/>
        <to usec="0" sec="1628398977"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="62.183.123.120" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398973"/>
        <to usec="0" sec="1628398984"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="91.236.35.129" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398960"/>
        <to usec="0" sec="1628398971"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="31.184.250.126" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398966"/>
        <to usec="0" sec="1628398976"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="98.83.23.91" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398963"/>
        <to usec="0" sec="1628398973"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="191.136.40.94" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398965"/>
        <to usec="0" sec="1628398978"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="117.162.39.162" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398964"/>
        <to usec="0" sec="1628398975"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="109.249.73.162" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398963"/>
        <to usec="0" sec="1628398976"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="61.220.164.160" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398964"/>
        <to usec="0" sec="1628398975"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="135.65.179.86" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398960"/>
        <to usec="0" sec="1628398971"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="218.159.3.173" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398960"/>
        <to usec="0" sec="1628398971"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="47.158.9.172" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398959"/>
        <to usec="0" sec="1628398971"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="59.169.234.81" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398965"/>
        <to usec="0" sec="1628398976"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="5.221.248.75" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398969"/>
        <to usec="0" sec="1628398974"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="210.45.125.187" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398963"/>
        <to usec="0" sec="1628398971"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="201.44.57.184" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398962"/>
        <to usec="0" sec="1628398973"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="117.162.38.70" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398962"/>
        <to usec="0" sec="1628398973"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="175.50.51.75" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398962"/>
        <to usec="0" sec="1628398983"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="211.126.217.185" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398958"/>
        <to usec="0" sec="1628398969"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="24.192.247.184" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398961"/>
        <to usec="0" sec="1628398972"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="128.196.217.181" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398963"/>
        <to usec="0" sec="1628398975"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="114.208.242.76" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398964"/>
        <to usec="0" sec="1628398977"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="109.74.125.188" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398959"/>
        <to usec="0" sec="1628398970"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="190.44.62.66" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398962"/>
        <to usec="0" sec="1628398972"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="54.82.75.15" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398964"/>
        <to usec="0" sec="1628398975"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="200.211.201.225" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398962"/>
        <to usec="0" sec="1628398969"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="201.165.122.19" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398962"/>
        <to usec="0" sec="1628398974"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="121.10.87.243" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398938"/>
        <to usec="0" sec="1628398946"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="89.50.222.16" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398968"/>
        <to usec="0" sec="1628398978"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="121.72.45.240" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398964"/>
        <to usec="0" sec="1628398975"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="220.200.59.239" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398964"/>
        <to usec="0" sec="1628398975"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="118.17.165.209" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398961"/>
        <to usec="0" sec="1628398972"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="86.78.171.20" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398967"/>
        <to usec="0" sec="1628398978"/>
    </anomaly>
    <anomaly type="notice" value="0.65651,1.18804,010,1 1 0 1 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="117.162.37.223" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398828"/>
        <to usec="0" sec="1628399447"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="117.162.37.213" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398958"/>
        <to usec="0" sec="1628398971"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="175.170.58.22" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398962"/>
        <to usec="0" sec="1628398970"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="109.105.137.21" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398958"/>
        <to usec="0" sec="1628398977"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="46.49.10.254" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398961"/>
        <to usec="0" sec="1628398972"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="105.148.200.33" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398962"/>
        <to usec="0" sec="1628398972"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="208.128.69.238" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398958"/>
        <to usec="0" sec="1628398969"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="42.245.240.49" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1628399005"/>
        <to usec="0" sec="1628399010"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="201.30.245.226" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628399090"/>
        <to usec="0" sec="1628399101"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="135.65.190.25" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398959"/>
        <to usec="0" sec="1628398970"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="123.29.43.27" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398964"/>
        <to usec="0" sec="1628398975"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="117.162.39.217" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398961"/>
        <to usec="0" sec="1628398972"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="183.37.87.33" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398945"/>
        <to usec="0" sec="1628398947"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="125.212.194.32" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398958"/>
        <to usec="0" sec="1628398974"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="62.95.238.21" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398961"/>
        <to usec="0" sec="1628398972"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="180.78.231.233" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398967"/>
        <to usec="0" sec="1628398973"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="110.67.156.23" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398962"/>
        <to usec="0" sec="1628398966"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="109.86.39.214" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398960"/>
        <to usec="0" sec="1628398971"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="90.8.106.23" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398970"/>
        <to usec="0" sec="1628398980"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="213.132.170.18" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398969"/>
        <to usec="0" sec="1628398980"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="36.103.140.10" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398963"/>
        <to usec="0" sec="1628398974"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="190.133.208.241" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398967"/>
        <to usec="0" sec="1628398980"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="187.21.2.53" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398948"/>
        <to usec="0" sec="1628398958"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="114.209.68.200" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398975"/>
        <to usec="0" sec="1628398985"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="42.247.37.242" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1628399005"/>
        <to usec="0" sec="1628399009"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="113.45.255.199"/>
        </slice>
        <from usec="0" sec="1628399423"/>
        <to usec="0" sec="1628399425"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,999,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="192.30.81.139" src_port="3479"/>
        </slice>
        <from usec="0" sec="1628399564"/>
        <to usec="0" sec="1628399575"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,999,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="220.201.81.112" src_port="5555"/>
        </slice>
        <from usec="0" sec="1628398962"/>
        <to usec="0" sec="1628398973"/>
    </anomaly>
    <anomaly type="notice" value="0.846122,1.27371,010,0 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="115.145.50.235" dst_port="445"/>
        </slice>
        <from usec="0" sec="1628398995"/>
        <to usec="0" sec="1628398998"/>
    </anomaly>
    <anomaly type="notice" value="0.846122,1.27371,010,0 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="120.213.248.242" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398962"/>
        <to usec="0" sec="1628398973"/>
    </anomaly>
    <anomaly type="notice" value="0.846122,1.27371,010,0 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="31.223.102.151" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628399185"/>
        <to usec="0" sec="1628399198"/>
    </anomaly>
    <anomaly type="notice" value="0.611719,1.17065,010,0 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="211.27.30.57" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398961"/>
        <to usec="0" sec="1628398974"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="192.30.90.189" src_port="80"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628398908"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="203.109.255.184" dst_ip="71.186.177.104" src_port="80"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628398908"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="193.9.50.41" dst_port="2087"/>
            <filter src_ip="193.9.50.41" dst_port="8443"/>
            <filter src_ip="193.9.50.41" dst_port="2083"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628398908"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="45.108.58.107" dst_port="50056"/>
            <filter dst_ip="45.108.58.107"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628398908"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="147.187.8.193"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628398908"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="170.20.180.13" dst_ip="202.102.145.79" dst_port="9838"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628398908"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="13.30.34.43"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628398809"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="123.142.84.82"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628398908"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="188.121.172.162"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628398908"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="43.67.8.172" dst_ip="202.102.144.107" dst_port="9046"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628398908"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="157.22.2.33"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628398908"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="188.121.70.91"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399087"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="44.21.73.218"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628398908"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="46.229.247.253"/>
        </slice>
        <from usec="0" sec="1628398802"/>
        <to usec="0" sec="1628398908"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.217.123.43"/>
        </slice>
        <from usec="0" sec="1628398810"/>
        <to usec="0" sec="1628398900"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="54.234.115.1"/>
        </slice>
        <from usec="0" sec="1628398811"/>
        <to usec="0" sec="1628398908"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="23.138.99.78"/>
        </slice>
        <from usec="0" sec="1628398815"/>
        <to usec="0" sec="1628398891"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="13.225.2.184"/>
        </slice>
        <from usec="0" sec="1628398816"/>
        <to usec="0" sec="1628398876"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="52.244.127.115"/>
        </slice>
        <from usec="0" sec="1628398817"/>
        <to usec="0" sec="1628398824"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="54.131.237.105"/>
        </slice>
        <from usec="0" sec="1628398856"/>
        <to usec="0" sec="1628398867"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="116.202.72.31"/>
        </slice>
        <from usec="0" sec="1628398861"/>
        <to usec="0" sec="1628398908"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628398998"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="167.24.133.109"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628398998"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="170.20.49.57" dst_ip="202.102.149.64" dst_port="9157"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628398998"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="76.209.5.179"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399500"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.156.130.16"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628398997"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.196.87.193"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628398998"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,502,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="201.5.199.31" dst_ip="133.196.252.39" dst_port="22"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628398998"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.156.130.196"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628398997"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="147.187.7.252"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628398997"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="165.25.163.110"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628398995"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.156.130.199"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628398997"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="54.198.10.196"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628398997"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="46.132.190.88"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628398953"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="147.187.1.205" src_port="61953" dst_port="9020"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628398998"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="203.109.241.108"/>
        </slice>
        <from usec="0" sec="1628398802"/>
        <to usec="0" sec="1628399085"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="204.116.64.219"/>
        </slice>
        <from usec="0" sec="1628398802"/>
        <to usec="0" sec="1628398998"/>
    </anomaly>
    <anomaly type="notice" value="0.65651,1.18804,504,1 1 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.221.168.85" dst_ip="203.109.197.135"/>
            <filter src_ip="133.221.168.85" dst_port="443"/>
            <filter dst_ip="203.109.197.135" dst_port="443"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399443"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="3.148.234.1"/>
        </slice>
        <from usec="0" sec="1628398803"/>
        <to usec="0" sec="1628398997"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="185.74.73.122"/>
        </slice>
        <from usec="0" sec="1628398808"/>
        <to usec="0" sec="1628398952"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="185.68.143.82"/>
        </slice>
        <from usec="0" sec="1628398812"/>
        <to usec="0" sec="1628398998"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="143.234.95.161"/>
        </slice>
        <from usec="0" sec="1628398815"/>
        <to usec="0" sec="1628398996"/>
    </anomaly>
    <anomaly type="notice" value="0.542037,1.13991,010,1 0 0 1 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="125.142.5.145" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398966"/>
        <to usec="0" sec="1628398979"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="71.186.177.104" dst_ip="202.102.144.178" dst_port="443"/>
            <filter src_ip="71.186.177.104" dst_ip="202.102.144.178" dst_port="80"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399088"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="192.82.235.114"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399088"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,502,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="31.168.65.160"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399088"/>
    </anomaly>
    <anomaly type="notice" value="0.65651,1.18804,504,1 1 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.109.247.105" dst_ip="113.234.53.38" src_port="443"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399088"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="165.253.160.166" src_port="61953" dst_port="6161"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628398908"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="180.176.218.51" dst_ip="133.117.105.227" dst_port="23"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399086"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.217.58.154" src_port="53"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399088"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="193.145.207.157"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399088"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="198.12.92.57" src_port="61953" dst_port="11118"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399086"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="203.109.251.157" dst_port="53"/>
            <filter src_ip="203.238.189.160" dst_ip="203.109.251.157" src_port="53"/>
            <filter src_ip="203.238.189.161" dst_ip="203.109.251.157" src_port="53"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399088"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="68.123.98.98"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399086"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.56.191.189"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399088"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="159.65.53.254"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399088"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="218.161.83.48" dst_ip="203.109.240.83" dst_port="23"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399083"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="13.185.67.69"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399084"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="47.231.255.45"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399087"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="13.139.247.244"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399081"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="150.242.120.134"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399628"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="71.9.195.77" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398963"/>
        <to usec="0" sec="1628398964"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="202.102.145.84"/>
            <filter src_ip="71.186.177.104" dst_ip="202.102.144.99" dst_port="80"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399088"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="13.139.29.246"/>
        </slice>
        <from usec="0" sec="1628398803"/>
        <to usec="0" sec="1628399084"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="64.71.136.41"/>
        </slice>
        <from usec="0" sec="1628398804"/>
        <to usec="0" sec="1628399355"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.109.240.94" src_port="53"/>
        </slice>
        <from usec="0" sec="1628398805"/>
        <to usec="0" sec="1628399084"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="218.161.83.48"/>
        </slice>
        <from usec="0" sec="1628398808"/>
        <to usec="0" sec="1628398972"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="38.83.103.166" dst_port="80"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="193.9.48.118"/>
        </slice>
        <from usec="0" sec="1628399494"/>
        <to usec="0" sec="1628399627"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="74.24.215.171"/>
        </slice>
        <from usec="0" sec="1628398827"/>
        <to usec="0" sec="1628399076"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="159.70.175.83"/>
        </slice>
        <from usec="0" sec="1628398864"/>
        <to usec="0" sec="1628398949"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="34.39.153.59"/>
        </slice>
        <from usec="0" sec="1628398867"/>
        <to usec="0" sec="1628398949"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="144.34.141.245"/>
        </slice>
        <from usec="0" sec="1628398909"/>
        <to usec="0" sec="1628399087"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="114.73.165.230"/>
        </slice>
        <from usec="0" sec="1628398938"/>
        <to usec="0" sec="1628398958"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="1.14.26.204"/>
        </slice>
        <from usec="0" sec="1628398948"/>
        <to usec="0" sec="1628398980"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="82.24.94.5"/>
        </slice>
        <from usec="0" sec="1628398960"/>
        <to usec="0" sec="1628398978"/>
    </anomaly>
    <anomaly type="notice" value="0.65651,1.18804,010,1 1 0 1 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="76.69.151.70" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398964"/>
        <to usec="0" sec="1628398975"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="52.244.97.45"/>
        </slice>
        <from usec="0" sec="1628398966"/>
        <to usec="0" sec="1628398973"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="52.234.211.222"/>
        </slice>
        <from usec="0" sec="1628398969"/>
        <to usec="0" sec="1628399086"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="209.182.200.4"/>
        </slice>
        <from usec="0" sec="1628398970"/>
        <to usec="0" sec="1628399078"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="155.86.110.224"/>
        </slice>
        <from usec="0" sec="1628399001"/>
        <to usec="0" sec="1628399057"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="13.14.70.217"/>
        </slice>
        <from usec="0" sec="1628399002"/>
        <to usec="0" sec="1628399083"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="133.221.1.15" dst_ip="96.58.222.100" dst_port="53"/>
        </slice>
        <from usec="0" sec="1628398811"/>
        <to usec="0" sec="1628399086"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="163.217.167.227"/>
            <filter src_ip="17.217.153.149" src_port="5223"/>
        </slice>
        <from usec="0" sec="1628398806"/>
        <to usec="0" sec="1628399439"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="109.123.122.44"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399177"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.156.130.207"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399178"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="117.18.92.9"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399176"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="174.129.179.113"/>
        </slice>
        <from usec="0" sec="1628398802"/>
        <to usec="0" sec="1628399175"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,020,0 0 0 1 0 0 0 0 0 0 0 0,DDoSIC">
        <slice>
            <filter dst_ip="202.254.254.248"/>
        </slice>
        <from usec="0" sec="1628398802"/>
        <to usec="0" sec="1628399088"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,502,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="106.179.86.70" dst_ip="133.196.95.116"/>
            <filter src_ip="106.179.86.70" dst_port="22"/>
            <filter src_ip="106.179.86.70" dst_port="8291"/>
            <filter src_ip="204.240.184.180" dst_ip="133.196.95.116"/>
            <filter src_ip="204.240.184.180" dst_port="22"/>
            <filter dst_ip="133.196.95.116" dst_port="22"/>
            <filter dst_ip="133.196.95.116" dst_port="8291"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399087"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.156.130.211"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399268"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="117.214.146.64"/>
        </slice>
        <from usec="0" sec="1628398802"/>
        <to usec="0" sec="1628399112"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.156.130.115"/>
        </slice>
        <from usec="0" sec="1628398802"/>
        <to usec="0" sec="1628399268"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="40.143.196.211"/>
        </slice>
        <from usec="0" sec="1628398818"/>
        <to usec="0" sec="1628399238"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="185.88.131.150" src_port="5672"/>
            <filter dst_ip="185.88.131.150" src_port="445"/>
            <filter dst_ip="185.88.131.150"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399358"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="170.20.180.216" dst_ip="202.102.149.126" dst_port="9903"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399358"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="88.203.190.139" src_port="50880" dst_port="50880"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399358"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="94.252.229.97"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399351"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="202.102.145.250"/>
            <filter dst_ip="74.23.240.255"/>
            <filter dst_ip="203.109.255.92" src_port="445"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399537"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="23.93.163.137"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399358"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="133.221.183.228" dst_ip="185.50.6.130" src_port="3389"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399534"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="76.212.138.6"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399358"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ipv4gretun">
        <slice>
            <filter src_ip="61.64.179.198"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399356"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="123.22.253.115"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399358"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="167.130.146.158" src_port="58013"/>
            <filter src_ip="167.130.146.158" src_port="58702"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399358"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="198.12.92.57" dst_port="111"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399355"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="13.27.159.52" dst_ip="163.217.179.233" src_port="443"/>
            <filter src_ip="52.197.144.16" dst_ip="163.217.179.233" src_port="443"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399358"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="162.138.146.83"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399358"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="103.51.57.14"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399358"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="143.58.220.154" src_port="61953" dst_port="8016"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399358"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="71.199.117.206"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399356"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="106.29.125.219" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398961"/>
        <to usec="0" sec="1628398974"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="88.203.190.145" src_port="50880" dst_port="50880"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399447"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="123.128.226.251"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399350"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="162.105.93.222"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399357"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="54.244.219.238"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399357"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.216.210.110"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399353"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="117.18.2.220" src_port="58914" dst_port="49155"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399447"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="165.240.218.194"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399358"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="144.20.17.244"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399356"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="165.240.214.77"/>
        </slice>
        <from usec="0" sec="1628398802"/>
        <to usec="0" sec="1628399357"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="209.182.200.148" src_port="1433" dst_port="57794"/>
        </slice>
        <from usec="0" sec="1628398802"/>
        <to usec="0" sec="1628399342"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="104.15.55.234"/>
        </slice>
        <from usec="0" sec="1628398802"/>
        <to usec="0" sec="1628399358"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="167.185.6.249" src_port="61953" dst_port="5632"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628398998"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="167.130.250.130"/>
        </slice>
        <from usec="0" sec="1628398802"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="5.202.17.39" src_port="50880" dst_port="50880"/>
        </slice>
        <from usec="0" sec="1628398803"/>
        <to usec="0" sec="1628399358"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="198.59.68.90" src_port="61953" dst_port="8032"/>
        </slice>
        <from usec="0" sec="1628398803"/>
        <to usec="0" sec="1628399356"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="212.126.59.56"/>
        </slice>
        <from usec="0" sec="1628398803"/>
        <to usec="0" sec="1628399354"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="108.219.203.50"/>
        </slice>
        <from usec="0" sec="1628398803"/>
        <to usec="0" sec="1628399357"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="13.158.184.142"/>
        </slice>
        <from usec="0" sec="1628398803"/>
        <to usec="0" sec="1628399357"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="209.207.221.53"/>
        </slice>
        <from usec="0" sec="1628398803"/>
        <to usec="0" sec="1628399348"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="139.162.222.8" src_port="4463"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399358"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="36.161.97.107"/>
        </slice>
        <from usec="0" sec="1628398803"/>
        <to usec="0" sec="1628399357"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="47.228.195.118"/>
        </slice>
        <from usec="0" sec="1628398803"/>
        <to usec="0" sec="1628399242"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="192.30.72.95" src_port="80"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399318"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.156.130.136"/>
        </slice>
        <from usec="0" sec="1628398804"/>
        <to usec="0" sec="1628399358"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="71.199.117.194"/>
        </slice>
        <from usec="0" sec="1628398804"/>
        <to usec="0" sec="1628399356"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.156.130.151"/>
        </slice>
        <from usec="0" sec="1628398805"/>
        <to usec="0" sec="1628399357"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="46.238.3.39"/>
        </slice>
        <from usec="0" sec="1628398805"/>
        <to usec="0" sec="1628399354"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="195.133.52.158" dst_port="22"/>
        </slice>
        <from usec="0" sec="1628398805"/>
        <to usec="0" sec="1628399326"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="163.217.14.4"/>
        </slice>
        <from usec="0" sec="1628398805"/>
        <to usec="0" sec="1628399355"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="171.188.134.227" dst_ip="163.217.129.142"/>
            <filter src_ip="171.188.135.231" dst_ip="163.217.129.142"/>
            <filter src_ip="171.188.135.225" dst_ip="163.217.129.142"/>
        </slice>
        <from usec="0" sec="1628398806"/>
        <to usec="0" sec="1628399346"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="178.208.177.147" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398962"/>
        <to usec="0" sec="1628398966"/>
    </anomaly>
    <anomaly type="notice" value="0.65651,1.18804,010,1 1 0 1 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="162.234.15.212" dst_port="3128"/>
            <filter src_ip="162.234.15.212" dst_port="8000"/>
            <filter src_ip="162.234.15.212" dst_port="1337"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399358"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="74.23.240.247"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399358"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="47.20.226.42"/>
        </slice>
        <from usec="0" sec="1628398810"/>
        <to usec="0" sec="1628399352"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.217.120.194" dst_port="28959"/>
        </slice>
        <from usec="0" sec="1628398811"/>
        <to usec="0" sec="1628399283"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="47.208.120.196"/>
        </slice>
        <from usec="0" sec="1628398813"/>
        <to usec="0" sec="1628399341"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="163.217.120.159"/>
        </slice>
        <from usec="0" sec="1628398814"/>
        <to usec="0" sec="1628399324"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.217.43.102"/>
        </slice>
        <from usec="0" sec="1628398815"/>
        <to usec="0" sec="1628399357"/>
    </anomaly>
    <anomaly type="notice" value="0.542037,1.13991,010,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="61.170.19.142" dst_port="5555"/>
            <filter dst_ip="163.217.152.26"/>
        </slice>
        <from usec="0" sec="1628398824"/>
        <to usec="0" sec="1628399320"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="180.176.218.51" dst_ip="133.117.123.168" dst_port="23"/>
        </slice>
        <from usec="0" sec="1628398827"/>
        <to usec="0" sec="1628399358"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="202.102.144.206"/>
            <filter dst_ip="59.134.45.220" src_port="445"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="143.234.36.138" src_port="61953" dst_port="5443"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399178"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="163.217.16.153"/>
        </slice>
        <from usec="0" sec="1628398835"/>
        <to usec="0" sec="1628399524"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="47.20.247.185"/>
        </slice>
        <from usec="0" sec="1628398955"/>
        <to usec="0" sec="1628399428"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="35.73.61.148"/>
        </slice>
        <from usec="0" sec="1628399003"/>
        <to usec="0" sec="1628399344"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="118.62.224.214"/>
        </slice>
        <from usec="0" sec="1628399095"/>
        <to usec="0" sec="1628399358"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="209.182.221.220"/>
        </slice>
        <from usec="0" sec="1628399108"/>
        <to usec="0" sec="1628399185"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="47.26.252.25"/>
        </slice>
        <from usec="0" sec="1628399127"/>
        <to usec="0" sec="1628399297"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="47.26.252.29"/>
        </slice>
        <from usec="0" sec="1628399128"/>
        <to usec="0" sec="1628399289"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="39.26.117.29"/>
        </slice>
        <from usec="0" sec="1628399128"/>
        <to usec="0" sec="1628399289"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="40.175.215.125"/>
        </slice>
        <from usec="0" sec="1628399158"/>
        <to usec="0" sec="1628399346"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="147.133.126.167"/>
        </slice>
        <from usec="0" sec="1628399175"/>
        <to usec="0" sec="1628399218"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.243.36.47"/>
        </slice>
        <from usec="0" sec="1628399201"/>
        <to usec="0" sec="1628399353"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.9.50.100"/>
        </slice>
        <from usec="0" sec="1628399283"/>
        <to usec="0" sec="1628399358"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="217.159.7.181"/>
        </slice>
        <from usec="0" sec="1628399283"/>
        <to usec="0" sec="1628399322"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="114.77.201.89"/>
        </slice>
        <from usec="0" sec="1628399327"/>
        <to usec="0" sec="1628399336"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="192.109.28.123"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399443"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="89.0.61.71" src_port="8392" dst_port="50071"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="170.20.47.177" dst_ip="202.102.145.104" dst_port="8600"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399446"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="143.24.212.222"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399447"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.109.246.218" dst_port="22"/>
            <filter dst_ip="203.109.246.218"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="17.7.198.194" dst_ip="163.217.129.219" src_port="443" dst_port="56290"/>
            <filter src_ip="17.7.198.194" dst_ip="163.217.129.219" src_port="443" dst_port="56289"/>
            <filter src_ip="17.7.198.194" dst_ip="203.109.255.227" src_port="443" dst_port="62756"/>
            <filter src_ip="17.7.198.194" dst_ip="203.109.255.132" src_port="443" dst_port="57381"/>
        </slice>
        <from usec="0" sec="1628399109"/>
        <to usec="0" sec="1628399332"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="104.63.117.31" dst_ip="163.217.80.141" src_port="443"/>
        </slice>
        <from usec="0" sec="1628398807"/>
        <to usec="0" sec="1628399348"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.147.240.90"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399429"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="119.250.114.46" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398976"/>
        <to usec="0" sec="1628398986"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="134.33.45.97"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399408"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="35.79.185.168" dst_port="443"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399088"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="206.189.235.232"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="42.224.122.185" src_port="58914"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399444"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.221.2.220"/>
            <filter src_ip="202.102.144.248" dst_ip="43.67.8.172" src_port="9961"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="47.209.172.108"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399447"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="44.60.233.135"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399628"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="204.111.224.234"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="89.0.61.174"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.221.129.139" dst_ip="85.225.159.69" dst_port="443"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399442"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="123.22.136.199" src_port="13360" dst_port="23"/>
            <filter src_ip="123.22.136.199" src_port="61540" dst_port="23"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="98.22.205.36"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="88.203.190.128"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399446"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="45.100.13.87"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399446"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="162.138.146.227"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399446"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.102.145.161" dst_port="4468"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,502,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.196.252.39" dst_ip="201.5.199.31" src_port="22"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399358"/>
    </anomaly>
    <anomaly type="notice" value="0.611719,1.17065,010,0 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="139.196.192.0" src_port="49569"/>
        </slice>
        <from usec="0" sec="1628398966"/>
        <to usec="0" sec="1628399021"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="5.121.146.201"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.156.130.175"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628398996"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="60.82.181.147"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="84.106.125.216"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399430"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="138.59.149.158"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399446"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="204.240.184.180" dst_ip="133.196.95.70"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="42.75.105.38" dst_ip="133.196.245.199" dst_port="8080"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399446"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.217.129.20" src_port="443"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399625"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="202.244.220.205" dst_ip="52.234.211.238"/>
            <filter src_ip="202.244.220.205" dst_port="443"/>
            <filter dst_ip="52.234.211.238" dst_port="443"/>
            <filter dst_ip="20.12.93.116" dst_port="443"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399521"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="170.55.21.221"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399446"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="139.189.10.182"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="143.234.82.227"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="203.109.247.5" dst_port="22"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399445"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="71.199.117.187"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399446"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="165.253.42.119"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="71.199.117.94"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="165.240.210.225" src_port="61953" dst_port="8046"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399447"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="47.31.42.238"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399444"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="81.186.104.66"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399440"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="71.199.117.214" src_port="50880" dst_port="50880"/>
        </slice>
        <from usec="0" sec="1628398807"/>
        <to usec="0" sec="1628399358"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="206.189.21.230"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399536"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="128.196.239.92"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399447"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="203.90.147.107" src_port="15840"/>
            <filter dst_ip="203.90.147.107"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399358"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="117.61.202.148"/>
        </slice>
        <from usec="0" sec="1628398802"/>
        <to usec="0" sec="1628399438"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="62.134.33.94"/>
        </slice>
        <from usec="0" sec="1628398802"/>
        <to usec="0" sec="1628399436"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="120.75.246.31"/>
        </slice>
        <from usec="0" sec="1628398802"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="123.23.212.209"/>
        </slice>
        <from usec="0" sec="1628398802"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.156.130.24"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399356"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="162.138.146.234"/>
        </slice>
        <from usec="0" sec="1628398802"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="71.199.117.50"/>
        </slice>
        <from usec="0" sec="1628398802"/>
        <to usec="0" sec="1628399437"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="117.232.169.73"/>
        </slice>
        <from usec="0" sec="1628398802"/>
        <to usec="0" sec="1628399447"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="131.110.56.101" src_port="6889"/>
            <filter dst_ip="183.149.27.146" dst_port="443"/>
            <filter src_ip="131.110.56.101"/>
        </slice>
        <from usec="0" sec="1628398802"/>
        <to usec="0" sec="1628399445"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="111.26.9.0"/>
        </slice>
        <from usec="0" sec="1628398802"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="192.156.84.68"/>
        </slice>
        <from usec="0" sec="1628398802"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="5.67.184.232"/>
        </slice>
        <from usec="0" sec="1628398802"/>
        <to usec="0" sec="1628399436"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="77.214.14.174"/>
        </slice>
        <from usec="0" sec="1628398802"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="178.247.216.226"/>
        </slice>
        <from usec="0" sec="1628398802"/>
        <to usec="0" sec="1628399404"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="163.217.190.124"/>
        </slice>
        <from usec="0" sec="1628398803"/>
        <to usec="0" sec="1628399441"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="87.10.130.201" dst_ip="133.196.95.91"/>
            <filter src_ip="204.240.184.180" dst_ip="133.196.95.91"/>
        </slice>
        <from usec="0" sec="1628398803"/>
        <to usec="0" sec="1628399444"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="176.125.164.32"/>
        </slice>
        <from usec="0" sec="1628398803"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="54.234.81.38"/>
        </slice>
        <from usec="0" sec="1628398803"/>
        <to usec="0" sec="1628399537"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.156.130.124"/>
        </slice>
        <from usec="0" sec="1628398803"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="99.10.251.194"/>
        </slice>
        <from usec="0" sec="1628398803"/>
        <to usec="0" sec="1628399532"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="163.217.240.220" dst_port="443"/>
            <filter dst_ip="13.139.2.213" dst_port="443"/>
            <filter dst_ip="38.83.103.191" dst_port="8883"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399625"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="13.13.39.97"/>
        </slice>
        <from usec="0" sec="1628398804"/>
        <to usec="0" sec="1628399445"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="18.97.255.86"/>
        </slice>
        <from usec="0" sec="1628398804"/>
        <to usec="0" sec="1628399445"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="71.199.117.151"/>
        </slice>
        <from usec="0" sec="1628398804"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="185.45.218.249" src_port="443"/>
        </slice>
        <from usec="0" sec="1628398804"/>
        <to usec="0" sec="1628399447"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="133.196.255.98"/>
        </slice>
        <from usec="0" sec="1628398804"/>
        <to usec="0" sec="1628399447"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.217.51.20"/>
        </slice>
        <from usec="0" sec="1628398804"/>
        <to usec="0" sec="1628399447"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="164.212.228.94"/>
        </slice>
        <from usec="0" sec="1628398804"/>
        <to usec="0" sec="1628399446"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="103.88.156.114"/>
        </slice>
        <from usec="0" sec="1628398805"/>
        <to usec="0" sec="1628399431"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="171.188.134.227" dst_ip="133.196.241.153"/>
            <filter src_ip="171.188.135.231" dst_ip="133.196.241.153"/>
            <filter src_ip="171.188.135.225" dst_ip="133.196.241.153"/>
        </slice>
        <from usec="0" sec="1628398805"/>
        <to usec="0" sec="1628399446"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="156.31.207.28"/>
        </slice>
        <from usec="0" sec="1628398806"/>
        <to usec="0" sec="1628399446"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="161.246.142.46" dst_port="443"/>
            <filter src_ip="163.217.240.73" dst_ip="143.48.177.247" dst_port="443"/>
        </slice>
        <from usec="0" sec="1628398816"/>
        <to usec="0" sec="1628399350"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="163.217.183.121"/>
        </slice>
        <from usec="0" sec="1628398808"/>
        <to usec="0" sec="1628399447"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,502,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="74.23.240.135" src_port="22"/>
            <filter dst_ip="74.23.240.135"/>
        </slice>
        <from usec="0" sec="1628398808"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="119.62.183.76" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398956"/>
        <to usec="0" sec="1628398961"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="190.50.106.204"/>
        </slice>
        <from usec="0" sec="1628398811"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="106.202.223.214"/>
        </slice>
        <from usec="0" sec="1628398811"/>
        <to usec="0" sec="1628399446"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="58.44.222.23"/>
        </slice>
        <from usec="0" sec="1628398813"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="200.79.72.40" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398965"/>
        <to usec="0" sec="1628398976"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="54.7.82.157" src_port="80"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399358"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="52.197.121.125"/>
        </slice>
        <from usec="0" sec="1628398820"/>
        <to usec="0" sec="1628399425"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="175.83.48.161"/>
        </slice>
        <from usec="0" sec="1628398821"/>
        <to usec="0" sec="1628399272"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.217.59.228" src_port="53"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399442"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="189.92.171.140"/>
        </slice>
        <from usec="0" sec="1628398823"/>
        <to usec="0" sec="1628399354"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="115.145.5.74"/>
        </slice>
        <from usec="0" sec="1628398823"/>
        <to usec="0" sec="1628399423"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="35.176.151.109"/>
        </slice>
        <from usec="0" sec="1628398823"/>
        <to usec="0" sec="1628399435"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="201.85.154.162"/>
        </slice>
        <from usec="0" sec="1628398823"/>
        <to usec="0" sec="1628399439"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.109.252.185"/>
        </slice>
        <from usec="0" sec="1628398827"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="163.217.223.139"/>
        </slice>
        <from usec="0" sec="1628398827"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="91.27.58.112" src_port="8883"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399358"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="163.217.129.71" src_port="443"/>
            <filter dst_ip="163.217.244.171" src_port="443"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399447"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.217.179.233" dst_ip="52.197.144.16" dst_port="443"/>
        </slice>
        <from usec="0" sec="1628398820"/>
        <to usec="0" sec="1628399436"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="5.167.173.176"/>
        </slice>
        <from usec="0" sec="1628398851"/>
        <to usec="0" sec="1628399429"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.93.170.142"/>
        </slice>
        <from usec="0" sec="1628398868"/>
        <to usec="0" sec="1628399435"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.217.132.119"/>
        </slice>
        <from usec="0" sec="1628398809"/>
        <to usec="0" sec="1628399535"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="89.92.40.17"/>
        </slice>
        <from usec="0" sec="1628399006"/>
        <to usec="0" sec="1628399358"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="218.84.79.48"/>
        </slice>
        <from usec="0" sec="1628399058"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="216.53.3.154"/>
        </slice>
        <from usec="0" sec="1628399070"/>
        <to usec="0" sec="1628399440"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.227.124.178"/>
        </slice>
        <from usec="0" sec="1628399110"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="54.7.108.233"/>
        </slice>
        <from usec="0" sec="1628399123"/>
        <to usec="0" sec="1628399311"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="47.26.252.83"/>
        </slice>
        <from usec="0" sec="1628399136"/>
        <to usec="0" sec="1628399438"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="64.27.2.161"/>
        </slice>
        <from usec="0" sec="1628399141"/>
        <to usec="0" sec="1628399282"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.227.106.194"/>
        </slice>
        <from usec="0" sec="1628399190"/>
        <to usec="0" sec="1628399420"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="50.147.167.148"/>
        </slice>
        <from usec="0" sec="1628399190"/>
        <to usec="0" sec="1628399409"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="185.68.143.141"/>
        </slice>
        <from usec="0" sec="1628399198"/>
        <to usec="0" sec="1628399437"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,012,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="163.217.6.133"/>
        </slice>
        <from usec="0" sec="1628399198"/>
        <to usec="0" sec="1628399392"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="20.31.97.240"/>
        </slice>
        <from usec="0" sec="1628399263"/>
        <to usec="0" sec="1628399271"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="192.167.234.69"/>
        </slice>
        <from usec="0" sec="1628399325"/>
        <to usec="0" sec="1628399335"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="131.110.121.14"/>
        </slice>
        <from usec="0" sec="1628399350"/>
        <to usec="0" sec="1628399352"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.217.222.65"/>
        </slice>
        <from usec="0" sec="1628399366"/>
        <to usec="0" sec="1628399445"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="161.197.62.105"/>
        </slice>
        <from usec="0" sec="1628399409"/>
        <to usec="0" sec="1628399413"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="68.73.202.179"/>
        </slice>
        <from usec="0" sec="1628399412"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="103.166.77.13"/>
        </slice>
        <from usec="0" sec="1628399417"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="143.234.87.104" src_port="61953" dst_port="12500"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.90.147.61" src_port="2060" dst_port="50730"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="148.241.10.98" dst_ip="202.102.145.162" dst_port="445"/>
            <filter src_ip="148.241.10.98" dst_ip="202.102.145.164" dst_port="445"/>
            <filter src_ip="148.241.10.98" dst_ip="202.102.145.165" dst_port="445"/>
            <filter src_ip="148.241.10.98" dst_ip="202.102.145.167" dst_port="445"/>
            <filter src_ip="148.241.10.98" dst_ip="202.102.145.166" dst_port="445"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399358"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.221.146.156"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="202.244.220.205" dst_ip="13.139.3.196" dst_port="80"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399086"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="89.0.61.205" src_port="42720"/>
            <filter src_ip="89.0.61.66" src_port="49591" dst_port="4001"/>
            <filter src_ip="89.0.61.66" src_port="49591" dst_port="5010"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,020,0 0 0 1 0 0 0 0 0 0 0 0,hostout">
        <slice>
            <filter src_ip="163.217.6.42"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399628"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="3.144.231.67"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.217.81.5" src_port="443"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399088"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="162.138.146.222"/>
            <filter dst_ip="109.104.144.170" src_port="22"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399496"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.217.1.92" dst_ip="185.114.236.34" dst_port="443"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399357"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="126.180.88.253"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="194.2.235.126"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628398998"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="24.136.152.146"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="47.210.47.44"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="167.24.133.110"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399268"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="13.139.4.98" dst_port="443"/>
            <filter dst_ip="40.180.103.58" dst_port="443"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399443"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="161.189.237.241" src_port="49165" dst_port="10170"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="43.67.9.229" dst_ip="202.102.144.104" dst_port="9908"/>
            <filter src_ip="170.20.180.216" dst_ip="202.102.144.104" dst_port="8089"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399628"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="80.44.21.216"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="142.33.248.17" src_port="61953" dst_port="8816"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399536"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="207.149.253.86"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="103.51.57.7" dst_port="53"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399444"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="47.252.204.111"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399533"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="198.12.92.57"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399532"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="170.20.47.177" dst_ip="202.102.149.68" dst_port="9598"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="13.249.200.39" src_port="50880"/>
        </slice>
        <from usec="0" sec="1628398807"/>
        <to usec="0" sec="1628399357"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="181.225.228.43"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399535"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="71.199.117.106"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399537"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.107.33.231" dst_port="443"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399535"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="47.251.248.194"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399535"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.239.4.127" dst_ip="13.139.177.5" dst_port="53"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="206.33.22.135" src_port="61953" dst_port="1935"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="24.98.195.237" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398958"/>
        <to usec="0" sec="1628398978"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="107.65.141.20"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399536"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ipv4gretun">
        <slice>
            <filter src_ip="70.3.2.255"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399535"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="162.99.225.67"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399535"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="139.196.220.143"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="71.149.69.110" dst_port="23"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399537"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="113.154.255.41"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399536"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="170.232.138.243"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.217.83.143"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399530"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="20.23.4.210" src_port="46727" dst_port="33891"/>
            <filter src_ip="20.23.4.210" src_port="46727" dst_port="3388"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="3.243.135.12"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399536"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="185.184.227.118" src_port="56614" dst_port="22"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="200.93.164.13"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399526"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.217.240.220" src_port="443"/>
            <filter dst_ip="163.217.240.220"/>
        </slice>
        <from usec="0" sec="1628398803"/>
        <to usec="0" sec="1628399088"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,502,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="222.171.239.51" src_port="22"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399537"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="52.184.6.153" dst_ip="163.217.195.177" src_port="443"/>
        </slice>
        <from usec="0" sec="1628398848"/>
        <to usec="0" sec="1628399293"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="162.138.146.155"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="71.142.116.113"/>
        </slice>
        <from usec="0" sec="1628398802"/>
        <to usec="0" sec="1628399535"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="14.190.230.46"/>
        </slice>
        <from usec="0" sec="1628398803"/>
        <to usec="0" sec="1628399535"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="118.185.121.230" dst_port="445"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399530"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="118.82.127.38"/>
        </slice>
        <from usec="0" sec="1628398803"/>
        <to usec="0" sec="1628399627"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="71.199.117.95"/>
        </slice>
        <from usec="0" sec="1628398803"/>
        <to usec="0" sec="1628399537"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="118.76.46.181" src_port="6881"/>
        </slice>
        <from usec="0" sec="1628398804"/>
        <to usec="0" sec="1628399534"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="77.47.171.148"/>
        </slice>
        <from usec="0" sec="1628398804"/>
        <to usec="0" sec="1628399537"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="177.122.203.224"/>
        </slice>
        <from usec="0" sec="1628398804"/>
        <to usec="0" sec="1628399526"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="164.212.228.68"/>
        </slice>
        <from usec="0" sec="1628398805"/>
        <to usec="0" sec="1628399533"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="1.14.147.228"/>
        </slice>
        <from usec="0" sec="1628398806"/>
        <to usec="0" sec="1628399527"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="17.2.156.204" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="1628398806"/>
        <to usec="0" sec="1628399535"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="111.188.176.240"/>
        </slice>
        <from usec="0" sec="1628398806"/>
        <to usec="0" sec="1628399529"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="8.143.1.128"/>
        </slice>
        <from usec="0" sec="1628398806"/>
        <to usec="0" sec="1628399535"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="3.223.20.225"/>
        </slice>
        <from usec="0" sec="1628398807"/>
        <to usec="0" sec="1628399530"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="106.140.20.152"/>
        </slice>
        <from usec="0" sec="1628398808"/>
        <to usec="0" sec="1628399536"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="116.127.38.89"/>
        </slice>
        <from usec="0" sec="1628398808"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="178.21.93.153"/>
        </slice>
        <from usec="0" sec="1628398808"/>
        <to usec="0" sec="1628399521"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.217.59.230" src_port="53"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="71.199.117.165" src_port="50880" dst_port="50880"/>
        </slice>
        <from usec="0" sec="1628398809"/>
        <to usec="0" sec="1628399531"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="177.185.143.160"/>
        </slice>
        <from usec="0" sec="1628398809"/>
        <to usec="0" sec="1628399516"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.109.252.174" src_port="53"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399626"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="61.170.252.204"/>
        </slice>
        <from usec="0" sec="1628398811"/>
        <to usec="0" sec="1628399531"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="167.67.82.249"/>
        </slice>
        <from usec="0" sec="1628398811"/>
        <to usec="0" sec="1628399532"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="121.201.119.201"/>
        </slice>
        <from usec="0" sec="1628398811"/>
        <to usec="0" sec="1628399535"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="3.45.54.41"/>
        </slice>
        <from usec="0" sec="1628398813"/>
        <to usec="0" sec="1628399534"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,052,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="203.109.245.57"/>
            <filter dst_ip="141.28.245.20" src_port="22"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399535"/>
    </anomaly>
    <anomaly type="notice" value="0.579598,1.16673,999,0 1 0 1 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="62.34.242.237" src_port="9999" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399552"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="216.69.75.48"/>
        </slice>
        <from usec="0" sec="1628398823"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="101.185.214.176"/>
        </slice>
        <from usec="0" sec="1628398825"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="190.54.169.235"/>
        </slice>
        <from usec="0" sec="1628398826"/>
        <to usec="0" sec="1628399515"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="111.149.246.11"/>
        </slice>
        <from usec="0" sec="1628398827"/>
        <to usec="0" sec="1628399535"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="123.128.226.213"/>
        </slice>
        <from usec="0" sec="1628398827"/>
        <to usec="0" sec="1628399536"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="47.254.166.64"/>
        </slice>
        <from usec="0" sec="1628398830"/>
        <to usec="0" sec="1628399535"/>
    </anomaly>
    <anomaly type="notice" value="0.65651,1.18804,010,1 1 0 1 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="77.243.188.3" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398838"/>
        <to usec="0" sec="1628399532"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="163.217.129.125" src_port="443"/>
            <filter src_ip="47.236.85.190" src_port="4589" dst_port="23"/>
        </slice>
        <from usec="0" sec="1628398803"/>
        <to usec="0" sec="1628399522"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="58.78.28.73"/>
        </slice>
        <from usec="0" sec="1628398846"/>
        <to usec="0" sec="1628399526"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="165.253.22.118"/>
        </slice>
        <from usec="0" sec="1628398871"/>
        <to usec="0" sec="1628399455"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="190.255.41.153"/>
        </slice>
        <from usec="0" sec="1628398902"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="81.145.189.143"/>
        </slice>
        <from usec="0" sec="1628398922"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="3.34.250.118"/>
        </slice>
        <from usec="0" sec="1628398999"/>
        <to usec="0" sec="1628399521"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="110.52.247.183" src_port="65183"/>
        </slice>
        <from usec="0" sec="1628399035"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="20.129.13.92"/>
        </slice>
        <from usec="0" sec="1628399054"/>
        <to usec="0" sec="1628399503"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="143.48.177.161"/>
        </slice>
        <from usec="0" sec="1628399056"/>
        <to usec="0" sec="1628399516"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="17.7.198.229"/>
        </slice>
        <from usec="0" sec="1628399163"/>
        <to usec="0" sec="1628399513"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="142.33.244.232"/>
        </slice>
        <from usec="0" sec="1628399202"/>
        <to usec="0" sec="1628399537"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="202.102.144.115" dst_ip="23.95.193.104" src_port="3272"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="198.12.42.226"/>
        </slice>
        <from usec="0" sec="1628399452"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.102.144.90"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="147.187.34.60" src_port="12022"/>
            <filter dst_ip="147.187.34.60"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399628"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="74.23.240.157"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399628"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.180.167.218"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399628"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="104.127.195.172" src_port="80"/>
            <filter dst_ip="104.127.195.172" src_port="443"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399628"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="185.50.6.85"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399628"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="5.16.70.180"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399628"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="121.72.180.232" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398963"/>
        <to usec="0" sec="1628398975"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="74.23.240.145"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399178"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="96.233.97.8"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399622"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,502,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.254.235.174" dst_port="22"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399626"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.117.184.164"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399628"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="64.102.222.182"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399624"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="202.102.149.232"/>
            <filter dst_ip="162.138.146.152"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399627"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="13.159.215.24"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399572"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="113.234.21.217"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399623"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,004,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="187.87.132.220" dst_ip="202.102.145.14"/>
            <filter src_ip="187.87.132.220" dst_port="445"/>
            <filter src_ip="134.11.36.154" dst_ip="202.102.145.14"/>
            <filter src_ip="134.11.36.154" dst_port="445"/>
            <filter dst_ip="202.102.145.14" dst_port="445"/>
        </slice>
        <from usec="0" sec="1628398809"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="188.141.109.62" dst_ip="202.102.144.143" dst_port="445"/>
            <filter src_ip="188.141.109.62" dst_ip="202.102.144.142" dst_port="445"/>
            <filter src_ip="188.141.109.62" dst_ip="202.102.144.141" dst_port="445"/>
        </slice>
        <from usec="0" sec="1628398821"/>
        <to usec="0" sec="1628399447"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="74.23.240.130"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399622"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.109.249.95" dst_port="53"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399625"/>
    </anomaly>
    <anomaly type="notice" value="0.65651,1.18804,010,1 1 0 1 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="117.162.90.1" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399628"/>
    </anomaly>
    <anomaly type="notice" value="0.542037,1.13991,999,1 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="133.117.5.5" dst_port="53"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399627"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="147.133.147.91"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399625"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="89.0.55.26"/>
        </slice>
        <from usec="0" sec="1628398802"/>
        <to usec="0" sec="1628399628"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="5.120.127.114" dst_ip="163.217.195.72" src_port="443" dst_port="61181"/>
            <filter src_ip="5.120.127.114" dst_ip="163.217.195.231" src_port="80" dst_port="57015"/>
        </slice>
        <from usec="0" sec="1628398802"/>
        <to usec="0" sec="1628399446"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ipv4gretun">
        <slice>
            <filter src_ip="115.43.48.180"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399447"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPDNS">
        <slice>
            <filter src_ip="192.156.84.172"/>
        </slice>
        <from usec="0" sec="1628398802"/>
        <to usec="0" sec="1628399623"/>
    </anomaly>
    <anomaly type="notice" value="0.65651,1.18804,010,1 1 0 1 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="91.16.248.229" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399626"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="123.22.182.198"/>
        </slice>
        <from usec="0" sec="1628398803"/>
        <to usec="0" sec="1628399624"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="223.62.250.62"/>
        </slice>
        <from usec="0" sec="1628398803"/>
        <to usec="0" sec="1628399628"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="47.224.69.187" dst_port="22"/>
        </slice>
        <from usec="0" sec="1628399207"/>
        <to usec="0" sec="1628399209"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.217.133.140" dst_port="443"/>
            <filter src_ip="163.217.133.140" src_port="123" dst_port="123"/>
            <filter src_ip="163.217.133.140"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="89.92.118.126" src_port="46554" dst_port="5038"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399625"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="185.101.31.203"/>
        </slice>
        <from usec="0" sec="1628398807"/>
        <to usec="0" sec="1628399622"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="107.70.245.105" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="52.223.132.180"/>
        </slice>
        <from usec="0" sec="1628398807"/>
        <to usec="0" sec="1628399618"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="167.130.157.45" src_port="58785"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399447"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="52.188.170.255" src_port="443"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.254.221.148" dst_ip="193.71.229.248" src_port="5900"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399627"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="205.78.163.49" src_port="8080"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399627"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="111.9.221.3"/>
        </slice>
        <from usec="0" sec="1628398811"/>
        <to usec="0" sec="1628399606"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="217.173.30.48"/>
        </slice>
        <from usec="0" sec="1628398811"/>
        <to usec="0" sec="1628399619"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="121.120.10.116" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398960"/>
        <to usec="0" sec="1628398970"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="208.171.0.138"/>
        </slice>
        <from usec="0" sec="1628398818"/>
        <to usec="0" sec="1628399628"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="162.99.225.246"/>
        </slice>
        <from usec="0" sec="1628398819"/>
        <to usec="0" sec="1628399625"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,020,0 0 0 1 0 0 0 0 0 0 0 0,DDoSIC">
        <slice>
            <filter dst_ip="202.254.222.34"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399601"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="113.170.58.20"/>
        </slice>
        <from usec="0" sec="1628398821"/>
        <to usec="0" sec="1628399625"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="180.176.218.51" dst_ip="202.254.210.130" dst_port="23"/>
        </slice>
        <from usec="0" sec="1628398822"/>
        <to usec="0" sec="1628399627"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="91.60.155.192"/>
        </slice>
        <from usec="0" sec="1628398826"/>
        <to usec="0" sec="1628399608"/>
    </anomaly>
    <anomaly type="notice" value="0.685034,1.19188,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="125.128.173.251" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1628398963"/>
        <to usec="0" sec="1628398976"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="39.30.3.4"/>
        </slice>
        <from usec="0" sec="1628398830"/>
        <to usec="0" sec="1628399622"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="178.191.13.203" src_port="61953" dst_port="2126"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399446"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.58.102.211"/>
        </slice>
        <from usec="0" sec="1628398839"/>
        <to usec="0" sec="1628399590"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="143.58.128.33" src_port="61953" dst_port="9010"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="192.192.107.72"/>
        </slice>
        <from usec="0" sec="1628398865"/>
        <to usec="0" sec="1628399616"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="61.176.151.133"/>
        </slice>
        <from usec="0" sec="1628399279"/>
        <to usec="0" sec="1628399568"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="185.68.143.67"/>
        </slice>
        <from usec="0" sec="1628399334"/>
        <to usec="0" sec="1628399493"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="5.203.51.2"/>
        </slice>
        <from usec="0" sec="1628399418"/>
        <to usec="0" sec="1628399450"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="13.148.188.2"/>
        </slice>
        <from usec="0" sec="1628398821"/>
        <to usec="0" sec="1628399536"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="66.1.209.111"/>
        </slice>
        <from usec="0" sec="1628399459"/>
        <to usec="0" sec="1628399474"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="13.34.79.182"/>
        </slice>
        <from usec="0" sec="1628399461"/>
        <to usec="0" sec="1628399470"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="103.68.119.171"/>
        </slice>
        <from usec="0" sec="1628399544"/>
        <to usec="0" sec="1628399628"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="68.67.142.69"/>
        </slice>
        <from usec="0" sec="1628399554"/>
        <to usec="0" sec="1628399628"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="103.223.247.97" dst_ip="163.217.129.92" src_port="443" dst_port="10702"/>
            <filter src_ip="103.223.247.97" dst_ip="163.217.129.92" src_port="443" dst_port="4753"/>
            <filter src_ip="103.223.247.97" dst_ip="163.217.132.185" src_port="443" dst_port="50973"/>
        </slice>
        <from usec="0" sec="1628398943"/>
        <to usec="0" sec="1628399303"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="162.29.111.138" dst_ip="163.217.82.220" src_port="443" dst_port="54289"/>
        </slice>
        <from usec="0" sec="1628398805"/>
        <to usec="0" sec="1628398811"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.244.220.34" dst_ip="52.241.248.101" dst_port="443"/>
        </slice>
        <from usec="0" sec="1628398804"/>
        <to usec="0" sec="1628398901"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.217.132.32" dst_ip="54.158.201.33" src_port="443" dst_port="53549"/>
            <filter src_ip="163.217.132.32" dst_ip="54.158.201.33" src_port="443" dst_port="24438"/>
        </slice>
        <from usec="0" sec="1628398923"/>
        <to usec="0" sec="1628398930"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.102.144.140" src_port="445"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399357"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="3.46.5.71" dst_ip="163.217.161.183" src_port="443" dst_port="59936"/>
        </slice>
        <from usec="0" sec="1628398806"/>
        <to usec="0" sec="1628399535"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="50.222.237.71" dst_ip="163.217.253.170" dst_port="3702"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399358"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,011,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="203.109.255.44" dst_ip="54.82.70.122" src_port="30303"/>
        </slice>
        <from usec="0" sec="1628398844"/>
        <to usec="0" sec="1628399336"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="107.70.240.66" src_port="808"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="170.20.47.177" dst_ip="202.102.149.108" dst_port="9193"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399536"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="91.27.57.84" dst_ip="163.217.57.118" src_port="80"/>
        </slice>
        <from usec="0" sec="1628398830"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="170.20.47.177" dst_ip="202.102.149.91" dst_port="5391"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.109.255.57"/>
        </slice>
        <from usec="0" sec="1628398803"/>
        <to usec="0" sec="1628399531"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="163.217.123.49"/>
            <filter dst_ip="163.217.144.129" src_port="443"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399625"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="35.176.252.37" dst_ip="163.217.92.211" src_port="8883" dst_port="56842"/>
        </slice>
        <from usec="0" sec="1628398802"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.217.202.169"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399628"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.109.255.127" src_port="22"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399535"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.217.231.196" dst_port="443"/>
            <filter src_ip="163.217.231.196"/>
        </slice>
        <from usec="0" sec="1628398803"/>
        <to usec="0" sec="1628399626"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="54.234.253.220" dst_ip="203.109.245.175" dst_port="80"/>
        </slice>
        <from usec="0" sec="1628398819"/>
        <to usec="0" sec="1628399512"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.217.144.130" src_port="443"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399356"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="99.88.113.42" dst_ip="163.217.129.92" src_port="443" dst_port="5125"/>
        </slice>
        <from usec="0" sec="1628398836"/>
        <to usec="0" sec="1628399512"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="163.217.138.126" dst_port="443"/>
            <filter src_ip="163.217.195.12" dst_port="443"/>
            <filter src_ip="163.217.195.177" dst_port="443"/>
        </slice>
        <from usec="0" sec="1628398802"/>
        <to usec="0" sec="1628399531"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="18.71.235.29" dst_ip="203.109.255.44" dst_port="30303"/>
        </slice>
        <from usec="0" sec="1628398802"/>
        <to usec="0" sec="1628399357"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.109.253.117"/>
        </slice>
        <from usec="0" sec="1628398809"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="80.46.84.182" dst_ip="203.109.252.182" src_port="50018" dst_port="40023"/>
        </slice>
        <from usec="0" sec="1628398942"/>
        <to usec="0" sec="1628398983"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.217.195.231" src_port="443"/>
        </slice>
        <from usec="0" sec="1628398802"/>
        <to usec="0" sec="1628399628"/>
    </anomaly>
    <anomaly type="notice" value="0.611719,1.17065,503,0 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="126.179.80.171" dst_ip="203.109.252.191" src_port="52838" dst_port="80"/>
        </slice>
        <from usec="0" sec="1628398999"/>
        <to usec="0" sec="1628399000"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="13.30.34.227" dst_ip="163.217.129.92" src_port="443"/>
        </slice>
        <from usec="0" sec="1628399540"/>
        <to usec="0" sec="1628399613"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,020,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.217.202.170"/>
        </slice>
        <from usec="0" sec="1628398810"/>
        <to usec="0" sec="1628399534"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.217.81.111" src_port="443"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="163.217.224.240" src_port="443"/>
        </slice>
        <from usec="0" sec="1628398806"/>
        <to usec="0" sec="1628399088"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.7.255.62" dst_port="443"/>
        </slice>
        <from usec="0" sec="1628398858"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.217.226.215" src_port="443"/>
            <filter dst_ip="163.217.226.215"/>
        </slice>
        <from usec="0" sec="1628398805"/>
        <to usec="0" sec="1628399536"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="17.13.196.88" dst_ip="203.109.255.227" src_port="443"/>
        </slice>
        <from usec="0" sec="1628399682"/>
        <to usec="0" sec="1628399684"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.217.139.77"/>
        </slice>
        <from usec="0" sec="1628398808"/>
        <to usec="0" sec="1628399613"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="162.138.146.133"/>
            <filter dst_ip="167.24.133.36"/>
            <filter dst_ip="74.23.240.240"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399628"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="162.138.146.140"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399535"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="35.174.34.241" src_port="50880"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399626"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="162.138.146.93"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399356"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="202.102.149.166"/>
            <filter dst_ip="37.64.246.25"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,999,1 0 0 0 0 0 0 0 0 0 0 0,ipv4gretun">
        <slice>
            <filter src_ip="50.8.85.241" dst_ip="203.109.245.8"/>
        </slice>
        <from usec="0" sec="1628398961"/>
        <to usec="0" sec="1628399199"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="163.217.174.30" src_port="443"/>
            <filter dst_ip="163.217.151.152"/>
            <filter dst_ip="163.217.151.152"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628398998"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="163.217.8.229"/>
            <filter dst_ip="163.217.8.229"/>
            <filter dst_ip="163.217.241.59"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399604"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="106.179.86.70" dst_ip="133.196.95.117"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399088"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="202.102.144.178" dst_ip="71.186.177.104"/>
            <filter src_ip="202.102.144.178" src_port="443"/>
            <filter src_ip="202.102.144.178" src_port="80"/>
            <filter src_ip="202.102.144.150" dst_ip="71.186.177.104"/>
            <filter src_ip="202.102.144.150" src_port="443"/>
            <filter src_ip="202.102.144.150" src_port="80"/>
            <filter src_ip="202.102.144.55" dst_ip="71.186.177.104"/>
            <filter src_ip="202.102.144.55" src_port="443"/>
            <filter src_ip="202.102.144.55" src_port="80"/>
            <filter dst_ip="71.186.177.104" src_port="443"/>
            <filter dst_ip="71.186.177.104" src_port="80"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="13.30.17.115" dst_ip="163.217.144.130" src_port="443" dst_port="41718"/>
            <filter src_ip="13.30.17.115" dst_ip="163.217.144.130" src_port="443" dst_port="41626"/>
        </slice>
        <from usec="0" sec="1628398912"/>
        <to usec="0" sec="1628399347"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="142.33.50.118" src_port="61953" dst_port="9077"/>
        </slice>
        <from usec="0" sec="1628398805"/>
        <to usec="0" sec="1628399535"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="69.82.31.253" dst_ip="163.217.80.244" src_port="443"/>
            <filter src_ip="69.82.31.253" dst_ip="163.217.224.136" src_port="443"/>
        </slice>
        <from usec="0" sec="1628399359"/>
        <to usec="0" sec="1628399434"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="199.12.193.236" dst_ip="133.196.95.88" src_port="1194"/>
        </slice>
        <from usec="0" sec="1628398962"/>
        <to usec="0" sec="1628398979"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="117.197.24.149" dst_port="445"/>
        </slice>
        <from usec="0" sec="1628398809"/>
        <to usec="0" sec="1628399530"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="170.20.180.13" dst_ip="202.102.149.106" dst_port="9190"/>
            <filter src_ip="121.198.24.121" dst_ip="202.102.149.106" dst_port="990"/>
        </slice>
        <from usec="0" sec="1628398803"/>
        <to usec="0" sec="1628399530"/>
    </anomaly>
    <anomaly type="notice" value="0.542037,1.13991,010,1 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="103.51.57.30" dst_port="7777"/>
        </slice>
        <from usec="0" sec="1628398802"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="202.102.149.35"/>
            <filter src_port="445"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399628"/>
    </anomaly>
    <anomaly type="notice" value="0.576255,1.14391,011,1 0 0 0 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="203.109.255.44" dst_ip="91.23.225.38" dst_port="59414"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399576"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="119.120.89.250" dst_ip="163.217.225.9" src_port="443" dst_port="60979"/>
            <filter src_ip="119.120.89.250" dst_ip="163.217.225.9" src_port="443" dst_port="60978"/>
            <filter src_ip="119.120.89.250" dst_ip="163.217.225.9" src_port="443" dst_port="60136"/>
            <filter src_ip="119.120.89.250" dst_ip="163.217.225.9" src_port="443" dst_port="56797"/>
            <filter src_ip="119.120.89.250" dst_ip="163.217.225.9" src_port="443" dst_port="50883"/>
        </slice>
        <from usec="0" sec="1628399299"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="13.14.77.117" dst_port="443"/>
        </slice>
        <from usec="0" sec="1628398803"/>
        <to usec="0" sec="1628398902"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.244.218.155" dst_ip="18.190.43.7" src_port="56606" dst_port="443"/>
            <filter src_ip="202.244.218.155" dst_ip="18.190.43.7" src_port="56605" dst_port="443"/>
            <filter src_ip="202.244.218.155" dst_ip="18.190.43.7" src_port="56604" dst_port="443"/>
            <filter src_ip="202.244.218.155" dst_ip="18.190.43.7" src_port="56603" dst_port="443"/>
            <filter src_ip="202.244.218.155" dst_ip="18.190.43.7" src_port="56602" dst_port="443"/>
        </slice>
        <from usec="0" sec="1628399325"/>
        <to usec="0" sec="1628399369"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.109.252.191" dst_ip="101.250.40.127" src_port="443"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628398995"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.109.252.182" dst_ip="172.111.217.1" src_port="443"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399358"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,011,0 0 0 1 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="203.109.255.44" dst_ip="67.49.201.191" dst_port="32766"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399628"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,999,0 0 0 1 0 0 0 0 0 0 0 0,ipv4gretun">
        <slice>
            <filter src_ip="203.109.245.8" dst_ip="206.215.124.14"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="163.217.240.113"/>
            <filter src_ip="45.248.13.120" dst_ip="133.196.245.133" dst_port="80"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399434"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,502,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.109.253.116"/>
        </slice>
        <from usec="0" sec="1628398813"/>
        <to usec="0" sec="1628399535"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="206.189.29.220" src_port="61953" dst_port="2222"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="163.217.82.173" src_port="443"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399448"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="198.12.92.57" dst_ip="163.217.225.9" src_port="443"/>
        </slice>
        <from usec="0" sec="1628398850"/>
        <to usec="0" sec="1628398993"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="163.217.230.56"/>
            <filter src_ip="162.29.7.106" src_port="443"/>
            <filter dst_ip="163.217.176.18" src_port="443"/>
        </slice>
        <from usec="0" sec="1628398801"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.217.81.123" src_port="443"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399088"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="104.146.86.212" dst_ip="163.217.132.181" src_port="443" dst_port="34864"/>
            <filter src_ip="104.146.86.212" dst_ip="163.217.132.181" src_port="443" dst_port="34832"/>
            <filter src_ip="104.146.86.212" dst_ip="163.217.132.181" src_port="443" dst_port="34762"/>
            <filter src_ip="104.146.86.212" dst_ip="163.217.132.182" src_port="443" dst_port="42702"/>
        </slice>
        <from usec="0" sec="1628398810"/>
        <to usec="0" sec="1628399538"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.102.149.144"/>
        </slice>
        <from usec="0" sec="1628398803"/>
        <to usec="0" sec="1628399447"/>
    </anomaly>
    <anomaly type="notice" value="0.445793,1.11768,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="18.43.111.34" dst_port="443"/>
        </slice>
        <from usec="0" sec="1628398800"/>
        <to usec="0" sec="1628399357"/>
    </anomaly>
</admd:annotation>
