<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="notice" value="0.534081,1.25988,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="210.179.9.93" dst_ip="203.77.124.87" src_port="59267" dst_port="143" proto="tcp"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164489"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="198.244.87.184" dst_ip="163.194.71.217" src_port="8801" proto="udp"/>
        </slice>
        <from usec="0" sec="1631163681"/>
        <to usec="0" sec="1631164237"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="17.249.87.243" dst_ip="163.194.20.55" src_port="443" dst_port="53076" proto="tcp"/>
        </slice>
        <from usec="0" sec="1631164233"/>
        <to usec="0" sec="1631164234"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="153.249.103.229" dst_ip="203.77.124.90" src_port="39638" dst_port="40017" proto="udp"/>
        </slice>
        <from usec="0" sec="1631163679"/>
        <to usec="0" sec="1631164258"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="198.244.92.72" dst_ip="163.194.129.176" src_port="8801" dst_port="51157" proto="udp"/>
        </slice>
        <from usec="0" sec="1631163795"/>
        <to usec="0" sec="1631163796"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="116.123.80.8" src_port="8801" proto="udp"/>
        </slice>
        <from usec="0" sec="1631163680"/>
        <to usec="0" sec="1631164249"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="31.146.214.84" dst_ip="163.194.131.9" src_port="443" dst_port="62970" proto="udp"/>
        </slice>
        <from usec="0" sec="1631164239"/>
        <to usec="0" sec="1631164413"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="113.2.187.170" dst_ip="203.77.118.23" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1631164413"/>
        <to usec="0" sec="1631164427"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.174.187.176" dst_ip="163.194.24.217" src_port="443" dst_port="52207" proto="tcp"/>
        </slice>
        <from usec="0" sec="1631163766"/>
        <to usec="0" sec="1631163767"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="31.146.214.76" dst_ip="163.194.70.253" src_port="443" dst_port="58745" proto="udp"/>
        </slice>
        <from usec="0" sec="1631164405"/>
        <to usec="0" sec="1631164407"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="3.239.109.170" dst_ip="163.194.36.46" src_port="8801" proto="udp"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164467"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="17.249.87.187" dst_ip="163.194.85.147" src_port="443" dst_port="60680" proto="tcp"/>
        </slice>
        <from usec="0" sec="1631164410"/>
        <to usec="0" sec="1631164411"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.194.1.199" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1631164407"/>
        <to usec="0" sec="1631164413"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="104.236.73.207" dst_ip="163.194.70.28" src_port="443" dst_port="52821" proto="tcp"/>
        </slice>
        <from usec="0" sec="1631164370"/>
        <to usec="0" sec="1631164371"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="198.244.42.236" dst_ip="163.194.71.70" src_port="8801" proto="udp"/>
        </slice>
        <from usec="0" sec="1631164359"/>
        <to usec="0" sec="1631164382"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.252.244.97" dst_ip="204.51.214.225" src_port="60409" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1631163903"/>
        <to usec="0" sec="1631163988"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="96.16.89.117" dst_ip="163.194.130.4" src_port="443" dst_port="49879" proto="tcp"/>
        </slice>
        <from usec="0" sec="1631164362"/>
        <to usec="0" sec="1631164363"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="204.51.214.225" dst_ip="203.77.118.23" src_port="8801" proto="udp"/>
        </slice>
        <from usec="0" sec="1631164242"/>
        <to usec="0" sec="1631164252"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.252.240.4"/>
        </slice>
        <from usec="0" sec="1631163690"/>
        <to usec="0" sec="1631163693"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="198.244.88.154" src_port="8801" proto="udp"/>
        </slice>
        <from usec="0" sec="1631163817"/>
        <to usec="0" sec="1631164340"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="150.205.199.93" src_port="9000" proto="udp"/>
        </slice>
        <from usec="0" sec="1631163642"/>
        <to usec="0" sec="1631164366"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="152.39.36.169" dst_ip="163.194.216.238" src_port="443" dst_port="64999" proto="tcp"/>
        </slice>
        <from usec="0" sec="1631164379"/>
        <to usec="0" sec="1631164381"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="149.148.155.77" dst_ip="163.194.70.0" src_port="8801" proto="udp"/>
        </slice>
        <from usec="0" sec="1631163983"/>
        <to usec="0" sec="1631163984"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.194.71.76" dst_ip="23.19.150.206" src_port="59072" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1631164233"/>
        <to usec="0" sec="1631164234"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="23.190.11.122" dst_ip="163.194.168.21" src_port="443" dst_port="64429" proto="tcp"/>
        </slice>
        <from usec="0" sec="1631164315"/>
        <to usec="0" sec="1631164316"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="119.152.44.91" dst_ip="18.155.181.233" src_port="60491" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1631164030"/>
        <to usec="0" sec="1631164032"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.152.131.33" dst_ip="54.237.137.64" src_port="1729" dst_port="9339" proto="tcp"/>
        </slice>
        <from usec="0" sec="1631164160"/>
        <to usec="0" sec="1631164169"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="198.244.43.50" dst_ip="163.194.97.106" src_port="8801" proto="udp"/>
        </slice>
        <from usec="0" sec="1631164011"/>
        <to usec="0" sec="1631164012"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.194.109.210" dst_ip="67.119.25.254" src_port="56571" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1631163680"/>
        <to usec="0" sec="1631163681"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.194.243.28"/>
        </slice>
        <from usec="0" sec="1631164416"/>
        <to usec="0" sec="1631164417"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.194.71.11" dst_ip="52.18.124.82" src_port="58586" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1631164142"/>
        <to usec="0" sec="1631164143"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.77.114.7" src_port="10001" dst_port="7777" proto="udp"/>
        </slice>
        <from usec="0" sec="1631163872"/>
        <to usec="0" sec="1631164463"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="163.194.115.50" dst_ip="31.146.214.113" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1631164277"/>
        <to usec="0" sec="1631164414"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="198.244.92.114" dst_ip="202.247.59.243" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1631164492"/>
        <to usec="0" sec="1631164493"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.20.135.142" proto="icmp"/>
        </slice>
        <from usec="0" sec="1631163887"/>
        <to usec="0" sec="1631163891"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="116.123.80.8" dst_ip="163.194.128.108" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1631163699"/>
        <to usec="0" sec="1631164375"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="163.194.130.36" dst_ip="198.244.45.73"/>
            <filter src_ip="163.194.130.36" dst_port="8801"/>
            <filter src_ip="163.194.7.86" dst_ip="198.244.45.73"/>
            <filter src_ip="163.194.7.86" dst_port="8801"/>
            <filter src_ip="133.132.64.95" dst_ip="198.244.45.73"/>
            <filter src_ip="133.132.64.95" dst_port="8801"/>
            <filter src_ip="163.194.131.131" dst_ip="198.244.45.73"/>
            <filter src_ip="163.194.131.131" dst_port="8801"/>
            <filter src_ip="163.194.70.25" dst_ip="198.244.45.73"/>
            <filter src_ip="163.194.70.25" dst_port="8801"/>
            <filter dst_ip="198.244.45.73" dst_port="8801"/>
            <filter dst_ip="198.244.45.73" dst_port="443"/>
        </slice>
        <from usec="0" sec="1631163966"/>
        <to usec="0" sec="1631164445"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICterp">
        <slice>
            <filter src_ip="202.247.8.192" dst_ip="163.194.18.205" proto="icmp"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164380"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.20.145.205" proto="icmp"/>
        </slice>
        <from usec="0" sec="1631164077"/>
        <to usec="0" sec="1631164380"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.20.147.134"/>
        </slice>
        <from usec="0" sec="1631163783"/>
        <to usec="0" sec="1631164203"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.20.154.22" proto="icmp"/>
        </slice>
        <from usec="0" sec="1631164141"/>
        <to usec="0" sec="1631164414"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="203.77.124.80" proto="icmp"/>
        </slice>
        <from usec="0" sec="1631163690"/>
        <to usec="0" sec="1631164101"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.20.66.186" proto="icmp"/>
        </slice>
        <from usec="0" sec="1631163710"/>
        <to usec="0" sec="1631163713"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="92.192.61.79" src_port="49551" proto="tcp"/>
        </slice>
        <from usec="0" sec="1631164219"/>
        <to usec="0" sec="1631164220"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICterp">
        <slice>
            <filter dst_ip="186.144.218.80" proto="icmp"/>
        </slice>
        <from usec="0" sec="1631164096"/>
        <to usec="0" sec="1631164097"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="202.252.244.241" proto="icmp"/>
        </slice>
        <from usec="0" sec="1631164393"/>
        <to usec="0" sec="1631164396"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="151.41.89.42" proto="icmp"/>
        </slice>
        <from usec="0" sec="1631163789"/>
        <to usec="0" sec="1631163929"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="143.100.92.102" proto="icmp"/>
        </slice>
        <from usec="0" sec="1631163986"/>
        <to usec="0" sec="1631163989"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.20.11.57" proto="icmp"/>
        </slice>
        <from usec="0" sec="1631163785"/>
        <to usec="0" sec="1631164236"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.20.3.157" proto="icmp"/>
        </slice>
        <from usec="0" sec="1631164242"/>
        <to usec="0" sec="1631164246"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="46.50.206.97" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1631164380"/>
        <to usec="0" sec="1631164382"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="219.152.80.100" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1631164465"/>
        <to usec="0" sec="1631164467"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="220.162.59.238" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1631164443"/>
        <to usec="0" sec="1631164444"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="171.248.39.182" proto="tcp"/>
        </slice>
        <from usec="0" sec="1631164209"/>
        <to usec="0" sec="1631164491"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="190.53.123.187" dst_port="445" proto="tcp"/>
        </slice>
        <from usec="0" sec="1631164233"/>
        <to usec="0" sec="1631164246"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="201.195.236.12" dst_port="5555" proto="tcp"/>
        </slice>
        <from usec="0" sec="1631163630"/>
        <to usec="0" sec="1631163635"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="193.164.226.76" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1631163606"/>
        <to usec="0" sec="1631163617"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="5.18.240.45" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1631164149"/>
        <to usec="0" sec="1631164152"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.20.148.34" proto="icmp"/>
        </slice>
        <from usec="0" sec="1631164003"/>
        <to usec="0" sec="1631164006"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.20.150.74" proto="icmp"/>
        </slice>
        <from usec="0" sec="1631163872"/>
        <to usec="0" sec="1631163875"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.20.157.165" proto="icmp"/>
        </slice>
        <from usec="0" sec="1631164067"/>
        <to usec="0" sec="1631164070"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.20.140.5" proto="icmp"/>
        </slice>
        <from usec="0" sec="1631163923"/>
        <to usec="0" sec="1631163927"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.20.141.122" proto="icmp"/>
        </slice>
        <from usec="0" sec="1631164003"/>
        <to usec="0" sec="1631164006"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.20.131.210" proto="icmp"/>
        </slice>
        <from usec="0" sec="1631164347"/>
        <to usec="0" sec="1631164350"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.20.81.154" proto="icmp"/>
        </slice>
        <from usec="0" sec="1631164384"/>
        <to usec="0" sec="1631164388"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="151.41.88.5" proto="icmp"/>
        </slice>
        <from usec="0" sec="1631164401"/>
        <to usec="0" sec="1631164404"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.20.78.181" proto="icmp"/>
        </slice>
        <from usec="0" sec="1631163895"/>
        <to usec="0" sec="1631163898"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.20.70.53" proto="icmp"/>
        </slice>
        <from usec="0" sec="1631163862"/>
        <to usec="0" sec="1631164344"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.20.67.206" proto="icmp"/>
        </slice>
        <from usec="0" sec="1631163973"/>
        <to usec="0" sec="1631163977"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="150.205.196.125" proto="icmp"/>
        </slice>
        <from usec="0" sec="1631164041"/>
        <to usec="0" sec="1631164345"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.20.2.50" proto="icmp"/>
        </slice>
        <from usec="0" sec="1631163698"/>
        <to usec="0" sec="1631163702"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="18.76.17.94" proto="icmp"/>
        </slice>
        <from usec="0" sec="1631164049"/>
        <to usec="0" sec="1631164406"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,010,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="1.143.177.46" src_port="6379"/>
        </slice>
        <from usec="0" sec="1631164361"/>
        <to usec="0" sec="1631164363"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="203.77.118.23"/>
        </slice>
        <from usec="0" sec="1631163704"/>
        <to usec="0" sec="1631164474"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="185.176.71.42"/>
        </slice>
        <from usec="0" sec="1631163961"/>
        <to usec="0" sec="1631163963"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="171.151.172.82"/>
        </slice>
        <from usec="0" sec="1631163662"/>
        <to usec="0" sec="1631163663"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,012,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="209.115.77.89"/>
        </slice>
        <from usec="0" sec="1631164431"/>
        <to usec="0" sec="1631164432"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="132.133.8.162"/>
        </slice>
        <from usec="0" sec="1631164231"/>
        <to usec="0" sec="1631164232"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="192.240.35.150"/>
        </slice>
        <from usec="0" sec="1631164124"/>
        <to usec="0" sec="1631164126"/>
    </anomaly>
    <anomaly type="notice" value="0.534081,1.25988,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="38.233.245.187"/>
        </slice>
        <from usec="0" sec="1631164305"/>
        <to usec="0" sec="1631164306"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,504,1 1 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="17.249.87.222" dst_ip="163.194.85.78" src_port="443"/>
        </slice>
        <from usec="0" sec="1631164257"/>
        <to usec="0" sec="1631164258"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="38.233.245.144" dst_ip="116.123.80.8" src_port="80" dst_port="57498"/>
        </slice>
        <from usec="0" sec="1631164235"/>
        <to usec="0" sec="1631164236"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.194.97.106" dst_ip="198.244.43.50" src_port="62028" dst_port="8801"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164498"/>
    </anomaly>
    <anomaly type="notice" value="0.819099,1.26473,010,1 1 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="123.90.221.39" dst_port="22"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164476"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,999,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.194.243.77" dst_port="25"/>
        </slice>
        <from usec="0" sec="1631164180"/>
        <to usec="0" sec="1631164181"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.20.153.210"/>
        </slice>
        <from usec="0" sec="1631163606"/>
        <to usec="0" sec="1631163609"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.20.72.81"/>
        </slice>
        <from usec="0" sec="1631164016"/>
        <to usec="0" sec="1631164019"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="39.162.161.85" dst_port="22"/>
            <filter src_ip="39.162.161.85" dst_port="8728"/>
        </slice>
        <from usec="0" sec="1631163601"/>
        <to usec="0" sec="1631164498"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,999,1 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="113.244.141.30" src_port="29076" dst_port="65535"/>
        </slice>
        <from usec="0" sec="1631164315"/>
        <to usec="0" sec="1631164316"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="139.186.226.9"/>
        </slice>
        <from usec="0" sec="1631164438"/>
        <to usec="0" sec="1631164442"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.20.138.238"/>
        </slice>
        <from usec="0" sec="1631163822"/>
        <to usec="0" sec="1631164489"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.20.71.174"/>
        </slice>
        <from usec="0" sec="1631163848"/>
        <to usec="0" sec="1631163851"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="13.222.94.38"/>
        </slice>
        <from usec="0" sec="1631163661"/>
        <to usec="0" sec="1631164486"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.20.1.170"/>
        </slice>
        <from usec="0" sec="1631163656"/>
        <to usec="0" sec="1631164317"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.20.146.45"/>
        </slice>
        <from usec="0" sec="1631164431"/>
        <to usec="0" sec="1631164434"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.20.152.13"/>
        </slice>
        <from usec="0" sec="1631164244"/>
        <to usec="0" sec="1631164481"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.20.137.10"/>
        </slice>
        <from usec="0" sec="1631163972"/>
        <to usec="0" sec="1631164289"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.20.142.29"/>
        </slice>
        <from usec="0" sec="1631164060"/>
        <to usec="0" sec="1631164064"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.20.128.233"/>
        </slice>
        <from usec="0" sec="1631163730"/>
        <to usec="0" sec="1631164361"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.20.87.189"/>
        </slice>
        <from usec="0" sec="1631163797"/>
        <to usec="0" sec="1631164113"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="151.41.94.186"/>
        </slice>
        <from usec="0" sec="1631164475"/>
        <to usec="0" sec="1631164478"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.20.79.166"/>
        </slice>
        <from usec="0" sec="1631164307"/>
        <to usec="0" sec="1631164473"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="45.100.50.73"/>
        </slice>
        <from usec="0" sec="1631163853"/>
        <to usec="0" sec="1631163857"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.20.73.73"/>
        </slice>
        <from usec="0" sec="1631163847"/>
        <to usec="0" sec="1631163851"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.20.68.98"/>
        </slice>
        <from usec="0" sec="1631164005"/>
        <to usec="0" sec="1631164464"/>
    </anomaly>
    <anomaly type="notice" value="0.819099,1.26473,010,1 1 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="74.233.99.26" dst_port="22"/>
            <filter src_ip="74.233.99.26" dst_port="8728"/>
            <filter src_ip="74.233.99.26" dst_port="8291"/>
        </slice>
        <from usec="0" sec="1631163604"/>
        <to usec="0" sec="1631164485"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="222.18.167.251" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1631163733"/>
        <to usec="0" sec="1631163735"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="183.46.195.169" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1631164403"/>
        <to usec="0" sec="1631164405"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="58.51.236.41" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1631163797"/>
        <to usec="0" sec="1631163799"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="218.135.204.92" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1631164373"/>
        <to usec="0" sec="1631164375"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="124.134.84.11" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1631164491"/>
        <to usec="0" sec="1631164496"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="1.66.219.200" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1631164008"/>
        <to usec="0" sec="1631164013"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="192.43.109.42" dst_port="445"/>
        </slice>
        <from usec="0" sec="1631163744"/>
        <to usec="0" sec="1631163747"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="218.177.25.173" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1631164246"/>
        <to usec="0" sec="1631164247"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="118.56.162.72" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1631164096"/>
        <to usec="0" sec="1631164100"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="59.210.189.156" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1631164381"/>
        <to usec="0" sec="1631164385"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="106.207.233.114" dst_port="22"/>
            <filter src_ip="106.207.233.114" dst_port="8728"/>
            <filter src_ip="106.207.233.114" dst_port="8291"/>
        </slice>
        <from usec="0" sec="1631163679"/>
        <to usec="0" sec="1631163959"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="1.143.177.46" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1631164361"/>
        <to usec="0" sec="1631164363"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="164.227.151.8" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1631164419"/>
        <to usec="0" sec="1631164423"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.20.144.53"/>
        </slice>
        <from usec="0" sec="1631163715"/>
        <to usec="0" sec="1631163797"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="139.186.239.150"/>
        </slice>
        <from usec="0" sec="1631164461"/>
        <to usec="0" sec="1631164464"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="116.123.80.8"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164174"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.20.136.53"/>
        </slice>
        <from usec="0" sec="1631163801"/>
        <to usec="0" sec="1631164335"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="151.41.91.153"/>
        </slice>
        <from usec="0" sec="1631164487"/>
        <to usec="0" sec="1631164490"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.20.88.121"/>
        </slice>
        <from usec="0" sec="1631163711"/>
        <to usec="0" sec="1631164428"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="151.41.92.106"/>
        </slice>
        <from usec="0" sec="1631163653"/>
        <to usec="0" sec="1631163729"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="151.41.76.90"/>
        </slice>
        <from usec="0" sec="1631163819"/>
        <to usec="0" sec="1631163822"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.20.64.34"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164412"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.20.9.166"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164465"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.194.5.139" dst_ip="20.222.140.44" src_port="49729" dst_port="443"/>
            <filter src_ip="163.194.5.139" dst_ip="20.222.140.44" src_port="49722" dst_port="443"/>
            <filter src_ip="163.194.5.139" dst_ip="65.246.193.219" src_port="49764" dst_port="80"/>
        </slice>
        <from usec="0" sec="1631164492"/>
        <to usec="0" sec="1631164494"/>
    </anomaly>
    <anomaly type="notice" value="0.819099,1.26473,999,1 1 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.194.243.29" dst_ip="67.228.24.100" src_port="47109" dst_port="25"/>
            <filter src_ip="163.194.243.29" dst_ip="67.252.51.189" src_port="53017" dst_port="25"/>
            <filter src_ip="163.194.243.29" dst_ip="104.208.198.166" src_port="33678" dst_port="25"/>
        </slice>
        <from usec="0" sec="1631164038"/>
        <to usec="0" sec="1631164088"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.194.128.253" dst_ip="91.226.134.192" src_port="60774" dst_port="8883"/>
            <filter src_ip="163.194.128.253" dst_ip="163.194.128.108" src_port="61220" dst_port="443"/>
            <filter src_ip="163.194.128.253" dst_ip="38.233.245.144" src_port="61522" dst_port="80"/>
            <filter src_ip="163.194.128.253" dst_ip="99.53.189.77" src_port="61515" dst_port="443"/>
        </slice>
        <from usec="0" sec="1631163714"/>
        <to usec="0" sec="1631163715"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,053,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="47.3.147.116" dst_port="80"/>
        </slice>
        <from usec="0" sec="1631164306"/>
        <to usec="0" sec="1631164308"/>
    </anomaly>
    <anomaly type="notice" value="0.78269,1.27703,503,1 1 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.77.126.179" dst_port="80"/>
        </slice>
        <from usec="0" sec="1631164068"/>
        <to usec="0" sec="1631164100"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164338"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164338"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="69.115.95.186"/>
        </slice>
        <from usec="0" sec="1631163606"/>
        <to usec="0" sec="1631163671"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.194.131.229"/>
        </slice>
        <from usec="0" sec="1631163607"/>
        <to usec="0" sec="1631163704"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="159.96.237.253"/>
        </slice>
        <from usec="0" sec="1631163628"/>
        <to usec="0" sec="1631163705"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="209.123.111.108"/>
        </slice>
        <from usec="0" sec="1631163640"/>
        <to usec="0" sec="1631163705"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="52.81.101.244"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163622"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="126.225.27.140"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163678"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,052,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="45.108.245.185"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163798"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="54.176.194.6"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163797"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="17.142.73.101" dst_ip="163.194.128.189" src_port="443"/>
            <filter src_ip="17.241.135.231" dst_ip="163.194.128.189" src_port="443"/>
            <filter src_ip="17.56.188.16" dst_ip="163.194.128.189" src_port="443"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163798"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="163.194.97.47"/>
            <filter src_ip="163.194.129.75"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163798"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="192.206.63.15"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163798"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="167.200.125.84"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163798"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.77.116.11"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163798"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.194.129.40" dst_ip="13.84.171.236" dst_port="443"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163798"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="129.37.121.25"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163784"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.194.3.74"/>
        </slice>
        <from usec="0" sec="1631163601"/>
        <to usec="0" sec="1631163795"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="190.85.81.115" dst_port="22414"/>
            <filter dst_ip="190.85.81.115" dst_port="445"/>
        </slice>
        <from usec="0" sec="1631163601"/>
        <to usec="0" sec="1631163798"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.194.130.121"/>
        </slice>
        <from usec="0" sec="1631163603"/>
        <to usec="0" sec="1631163795"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.194.129.89"/>
        </slice>
        <from usec="0" sec="1631163605"/>
        <to usec="0" sec="1631163797"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="161.205.109.53"/>
        </slice>
        <from usec="0" sec="1631163606"/>
        <to usec="0" sec="1631164068"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="118.76.223.56"/>
        </slice>
        <from usec="0" sec="1631163609"/>
        <to usec="0" sec="1631163682"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="172.168.194.213"/>
        </slice>
        <from usec="0" sec="1631163609"/>
        <to usec="0" sec="1631163787"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="54.162.21.17"/>
        </slice>
        <from usec="0" sec="1631163635"/>
        <to usec="0" sec="1631163667"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="162.112.117.42"/>
        </slice>
        <from usec="0" sec="1631163641"/>
        <to usec="0" sec="1631163785"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="18.102.45.189"/>
        </slice>
        <from usec="0" sec="1631163676"/>
        <to usec="0" sec="1631163730"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="3.191.132.141"/>
        </slice>
        <from usec="0" sec="1631163699"/>
        <to usec="0" sec="1631163786"/>
    </anomaly>
    <anomaly type="notice" value="0.586141,1.24741,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="139.155.239.227" dst_ip="163.194.168.21" src_port="80"/>
        </slice>
        <from usec="0" sec="1631163785"/>
        <to usec="0" sec="1631163794"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="163.194.128.108"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163888"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="104.55.1.203"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163888"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="147.134.100.213"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163772"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="119.32.66.176"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163885"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,004,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="202.24.212.161" dst_port="445"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163887"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="203.77.113.162"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163888"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="65.246.196.231"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163879"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="202.24.212.138" dst_ip="167.172.57.184" src_port="8009"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163888"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="118.28.222.180"/>
        </slice>
        <from usec="0" sec="1631163601"/>
        <to usec="0" sec="1631163886"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="35.86.175.177"/>
        </slice>
        <from usec="0" sec="1631163622"/>
        <to usec="0" sec="1631163837"/>
    </anomaly>
    <anomaly type="notice" value="0.586141,1.24741,504,1 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.194.70.28" dst_port="443"/>
        </slice>
        <from usec="0" sec="1631163636"/>
        <to usec="0" sec="1631164380"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,011,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.182.247.234"/>
        </slice>
        <from usec="0" sec="1631163720"/>
        <to usec="0" sec="1631163888"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="38.239.142.131"/>
        </slice>
        <from usec="0" sec="1631163801"/>
        <to usec="0" sec="1631163882"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter src_ip="103.76.118.182" dst_ip="202.24.212.85"/>
            <filter dst_ip="202.24.212.85" dst_port="445"/>
            <filter dst_ip="202.24.212.85" dst_port="8009"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163978"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="103.52.48.145"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163977"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.164.226.154"/>
        </slice>
        <from usec="0" sec="1631163601"/>
        <to usec="0" sec="1631163805"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="209.115.80.129"/>
        </slice>
        <from usec="0" sec="1631163601"/>
        <to usec="0" sec="1631163977"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="117.211.128.129"/>
        </slice>
        <from usec="0" sec="1631163601"/>
        <to usec="0" sec="1631163976"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="31.172.154.15"/>
        </slice>
        <from usec="0" sec="1631163602"/>
        <to usec="0" sec="1631163978"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="198.244.40.252"/>
        </slice>
        <from usec="0" sec="1631163603"/>
        <to usec="0" sec="1631163978"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="36.2.196.103"/>
        </slice>
        <from usec="0" sec="1631163603"/>
        <to usec="0" sec="1631163978"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="163.172.246.51" dst_ip="133.106.92.29" src_port="4040"/>
        </slice>
        <from usec="0" sec="1631163603"/>
        <to usec="0" sec="1631163976"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="91.249.19.64"/>
        </slice>
        <from usec="0" sec="1631163604"/>
        <to usec="0" sec="1631163943"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="23.230.247.42"/>
        </slice>
        <from usec="0" sec="1631163613"/>
        <to usec="0" sec="1631164246"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="163.194.0.111"/>
        </slice>
        <from usec="0" sec="1631163673"/>
        <to usec="0" sec="1631163978"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.8.109.112"/>
        </slice>
        <from usec="0" sec="1631163703"/>
        <to usec="0" sec="1631163972"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="116.188.204.227"/>
        </slice>
        <from usec="0" sec="1631163705"/>
        <to usec="0" sec="1631163864"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="54.222.186.170"/>
        </slice>
        <from usec="0" sec="1631163891"/>
        <to usec="0" sec="1631163935"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.46.211.51"/>
        </slice>
        <from usec="0" sec="1631163914"/>
        <to usec="0" sec="1631163924"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.194.253.200"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164067"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="13.196.119.183"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164067"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="167.172.57.184"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163897"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="74.233.99.26" src_port="22"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164067"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.77.118.232"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164038"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.24.213.185" src_port="445"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164068"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.194.131.77"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164068"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="202.24.212.174" dst_ip="50.96.146.212" src_port="53"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164068"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="181.54.101.229"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164068"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="45.239.219.102" dst_port="2303"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164068"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="185.44.148.96"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164056"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="163.194.223.228"/>
        </slice>
        <from usec="0" sec="1631163601"/>
        <to usec="0" sec="1631164068"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="162.110.130.184"/>
        </slice>
        <from usec="0" sec="1631163601"/>
        <to usec="0" sec="1631164068"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="209.254.170.6"/>
        </slice>
        <from usec="0" sec="1631163601"/>
        <to usec="0" sec="1631164067"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="162.110.130.220"/>
        </slice>
        <from usec="0" sec="1631163601"/>
        <to usec="0" sec="1631164068"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="209.49.81.211"/>
        </slice>
        <from usec="0" sec="1631163601"/>
        <to usec="0" sec="1631164068"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="218.246.93.179"/>
        </slice>
        <from usec="0" sec="1631163601"/>
        <to usec="0" sec="1631164068"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.164.226.239"/>
        </slice>
        <from usec="0" sec="1631163601"/>
        <to usec="0" sec="1631164068"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="176.62.244.0"/>
        </slice>
        <from usec="0" sec="1631163601"/>
        <to usec="0" sec="1631164065"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="176.154.89.154"/>
        </slice>
        <from usec="0" sec="1631163602"/>
        <to usec="0" sec="1631164066"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.164.226.100"/>
        </slice>
        <from usec="0" sec="1631163602"/>
        <to usec="0" sec="1631164064"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.164.226.97"/>
        </slice>
        <from usec="0" sec="1631163603"/>
        <to usec="0" sec="1631164065"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,020,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.194.125.161"/>
        </slice>
        <from usec="0" sec="1631163603"/>
        <to usec="0" sec="1631164058"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="198.244.90.83"/>
        </slice>
        <from usec="0" sec="1631163604"/>
        <to usec="0" sec="1631164057"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="91.249.19.64"/>
        </slice>
        <from usec="0" sec="1631163604"/>
        <to usec="0" sec="1631164052"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.194.129.163"/>
        </slice>
        <from usec="0" sec="1631163605"/>
        <to usec="0" sec="1631164068"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="198.244.87.184"/>
        </slice>
        <from usec="0" sec="1631163606"/>
        <to usec="0" sec="1631164067"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="163.181.119.239"/>
        </slice>
        <from usec="0" sec="1631163607"/>
        <to usec="0" sec="1631163932"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="122.251.202.40"/>
        </slice>
        <from usec="0" sec="1631163609"/>
        <to usec="0" sec="1631164238"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="18.106.90.252"/>
        </slice>
        <from usec="0" sec="1631163612"/>
        <to usec="0" sec="1631163914"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,020,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.194.169.163"/>
        </slice>
        <from usec="0" sec="1631163616"/>
        <to usec="0" sec="1631164066"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="164.186.24.152"/>
        </slice>
        <from usec="0" sec="1631163618"/>
        <to usec="0" sec="1631164048"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="13.73.223.161"/>
        </slice>
        <from usec="0" sec="1631163632"/>
        <to usec="0" sec="1631164058"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="87.10.19.91"/>
        </slice>
        <from usec="0" sec="1631163666"/>
        <to usec="0" sec="1631164068"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.252.241.62"/>
        </slice>
        <from usec="0" sec="1631163667"/>
        <to usec="0" sec="1631163893"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="13.220.227.252"/>
        </slice>
        <from usec="0" sec="1631163928"/>
        <to usec="0" sec="1631163970"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="165.14.111.211"/>
        </slice>
        <from usec="0" sec="1631163943"/>
        <to usec="0" sec="1631164020"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="54.222.186.135"/>
        </slice>
        <from usec="0" sec="1631163954"/>
        <to usec="0" sec="1631164068"/>
    </anomaly>
    <anomaly type="notice" value="0.804609,1.3082,504,1 0 0 1 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="116.123.80.8" dst_ip="163.194.128.108" src_port="443"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164142"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="13.84.135.126"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164158"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,020,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="84.209.209.68"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164158"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.194.223.86" src_port="53"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164158"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.194.171.45" src_port="443"/>
            <filter dst_ip="163.194.171.45"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164158"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="111.246.224.16"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164155"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="162.110.130.93"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164158"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="217.239.183.133"/>
        </slice>
        <from usec="0" sec="1631163601"/>
        <to usec="0" sec="1631164155"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="107.178.190.73"/>
        </slice>
        <from usec="0" sec="1631163603"/>
        <to usec="0" sec="1631164158"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.194.223.198"/>
        </slice>
        <from usec="0" sec="1631163604"/>
        <to usec="0" sec="1631164142"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.194.10.90" dst_port="443"/>
        </slice>
        <from usec="0" sec="1631163605"/>
        <to usec="0" sec="1631164337"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="52.81.125.252"/>
        </slice>
        <from usec="0" sec="1631163607"/>
        <to usec="0" sec="1631164073"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="52.25.166.176"/>
        </slice>
        <from usec="0" sec="1631163608"/>
        <to usec="0" sec="1631164154"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.24.210.159"/>
        </slice>
        <from usec="0" sec="1631163608"/>
        <to usec="0" sec="1631164157"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="54.193.30.159"/>
        </slice>
        <from usec="0" sec="1631163609"/>
        <to usec="0" sec="1631164152"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="44.253.189.170"/>
        </slice>
        <from usec="0" sec="1631163617"/>
        <to usec="0" sec="1631164156"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="52.111.187.28"/>
        </slice>
        <from usec="0" sec="1631163621"/>
        <to usec="0" sec="1631164153"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="18.76.116.209"/>
        </slice>
        <from usec="0" sec="1631163753"/>
        <to usec="0" sec="1631164093"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,012,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="14.57.45.26"/>
        </slice>
        <from usec="0" sec="1631163926"/>
        <to usec="0" sec="1631164156"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,004,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="66.73.168.233"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164229"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="202.24.212.202" dst_ip="198.244.90.83" src_port="8009"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164248"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="71.230.244.26"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164248"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="115.107.51.103"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164247"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.24.213.174" src_port="445"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164338"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,004,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.24.213.185" dst_port="445"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164248"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="209.115.65.47"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164246"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,004,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.24.213.141" dst_port="445"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164248"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="164.186.24.148"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164214"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="162.110.130.214"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164248"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="202.24.213.214"/>
            <filter src_ip="163.194.97.37"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164337"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="182.112.225.188"/>
        </slice>
        <from usec="0" sec="1631163603"/>
        <to usec="0" sec="1631164247"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="23.190.11.156"/>
        </slice>
        <from usec="0" sec="1631163605"/>
        <to usec="0" sec="1631164248"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="163.194.48.119"/>
        </slice>
        <from usec="0" sec="1631163607"/>
        <to usec="0" sec="1631164242"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="203.77.118.232" src_port="53"/>
            <filter dst_ip="45.112.55.158" src_port="53"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164248"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="113.162.9.249"/>
        </slice>
        <from usec="0" sec="1631163618"/>
        <to usec="0" sec="1631164245"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="24.151.122.18"/>
        </slice>
        <from usec="0" sec="1631163629"/>
        <to usec="0" sec="1631164235"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="51.252.8.159"/>
        </slice>
        <from usec="0" sec="1631163637"/>
        <to usec="0" sec="1631164237"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="13.223.87.157"/>
        </slice>
        <from usec="0" sec="1631163658"/>
        <to usec="0" sec="1631164239"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="18.75.231.15"/>
        </slice>
        <from usec="0" sec="1631163720"/>
        <to usec="0" sec="1631164245"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="40.195.123.104"/>
        </slice>
        <from usec="0" sec="1631163828"/>
        <to usec="0" sec="1631164211"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.218.56.140"/>
        </slice>
        <from usec="0" sec="1631163829"/>
        <to usec="0" sec="1631164247"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="66.217.223.159"/>
        </slice>
        <from usec="0" sec="1631163921"/>
        <to usec="0" sec="1631164154"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.82.8.3"/>
        </slice>
        <from usec="0" sec="1631163956"/>
        <to usec="0" sec="1631164181"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="66.217.223.191"/>
        </slice>
        <from usec="0" sec="1631164152"/>
        <to usec="0" sec="1631164239"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="200.203.31.207"/>
        </slice>
        <from usec="0" sec="1631164188"/>
        <to usec="0" sec="1631164248"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="18.155.199.146"/>
        </slice>
        <from usec="0" sec="1631164221"/>
        <to usec="0" sec="1631164222"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="36.107.209.89"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164338"/>
    </anomaly>
    <anomaly type="notice" value="0.798135,1.21336,999,1 0 0 1 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="149.148.180.189" dst_ip="203.77.117.217" src_port="8801" dst_port="56342"/>
            <filter src_ip="149.148.180.189" dst_ip="203.77.117.217" src_port="8801" dst_port="52047"/>
            <filter src_ip="149.148.180.189" dst_ip="203.77.117.217" src_port="8801" dst_port="49441"/>
            <filter src_ip="149.148.180.189" dst_ip="203.77.117.217" src_port="443" dst_port="61781"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.24.212.182"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164428"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.194.36.46" dst_port="443"/>
            <filter src_ip="163.194.36.46"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164338"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="91.11.88.83" dst_port="8291"/>
            <filter src_ip="91.11.88.83" dst_port="22"/>
            <filter src_ip="91.11.88.83" dst_port="8728"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164338"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,004,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="202.24.210.210" dst_port="445"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164338"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="162.110.130.179"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164337"/>
    </anomaly>
    <anomaly type="notice" value="0.819099,1.26473,010,1 1 0 1 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="192.240.35.115" dst_port="83"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164338"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="163.194.69.29"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164322"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="62.147.109.18" src_port="1900"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164335"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="212.248.94.139" dst_ip="163.194.17.112" src_port="47579"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164337"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter src_ip="121.45.218.206"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164338"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.77.118.23"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164337"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="88.245.24.70"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164334"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="34.133.125.123"/>
        </slice>
        <from usec="0" sec="1631163601"/>
        <to usec="0" sec="1631164337"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.194.130.172" dst_port="443"/>
        </slice>
        <from usec="0" sec="1631163601"/>
        <to usec="0" sec="1631164338"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="112.130.15.58"/>
        </slice>
        <from usec="0" sec="1631163602"/>
        <to usec="0" sec="1631164338"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.164.226.225"/>
        </slice>
        <from usec="0" sec="1631163602"/>
        <to usec="0" sec="1631164338"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="49.187.249.117"/>
        </slice>
        <from usec="0" sec="1631163602"/>
        <to usec="0" sec="1631164334"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="170.8.254.15"/>
        </slice>
        <from usec="0" sec="1631163602"/>
        <to usec="0" sec="1631164337"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="122.50.32.232"/>
        </slice>
        <from usec="0" sec="1631163602"/>
        <to usec="0" sec="1631164324"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="189.128.217.151"/>
        </slice>
        <from usec="0" sec="1631163604"/>
        <to usec="0" sec="1631164333"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.194.115.39"/>
        </slice>
        <from usec="0" sec="1631163606"/>
        <to usec="0" sec="1631164328"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="188.109.240.230"/>
        </slice>
        <from usec="0" sec="1631163606"/>
        <to usec="0" sec="1631164214"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="167.125.152.134"/>
        </slice>
        <from usec="0" sec="1631163607"/>
        <to usec="0" sec="1631164334"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,004,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.24.212.98" dst_port="445"/>
        </slice>
        <from usec="0" sec="1631163602"/>
        <to usec="0" sec="1631164336"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="168.195.231.85"/>
        </slice>
        <from usec="0" sec="1631163610"/>
        <to usec="0" sec="1631164337"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.194.130.94"/>
        </slice>
        <from usec="0" sec="1631163611"/>
        <to usec="0" sec="1631164336"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,020,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="79.207.110.6" dst_port="52869"/>
            <filter dst_ip="163.194.144.30"/>
        </slice>
        <from usec="0" sec="1631163611"/>
        <to usec="0" sec="1631164324"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="106.11.32.25"/>
        </slice>
        <from usec="0" sec="1631163611"/>
        <to usec="0" sec="1631164334"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.77.116.26"/>
        </slice>
        <from usec="0" sec="1631163612"/>
        <to usec="0" sec="1631164335"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.194.19.249"/>
        </slice>
        <from usec="0" sec="1631163617"/>
        <to usec="0" sec="1631164333"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="187.115.190.101"/>
        </slice>
        <from usec="0" sec="1631163622"/>
        <to usec="0" sec="1631164318"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="187.89.228.180"/>
        </slice>
        <from usec="0" sec="1631163624"/>
        <to usec="0" sec="1631164331"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.77.118.23"/>
        </slice>
        <from usec="0" sec="1631163626"/>
        <to usec="0" sec="1631164331"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="46.8.230.131"/>
        </slice>
        <from usec="0" sec="1631163627"/>
        <to usec="0" sec="1631164338"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="18.76.25.10"/>
        </slice>
        <from usec="0" sec="1631163627"/>
        <to usec="0" sec="1631164324"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.194.118.222"/>
        </slice>
        <from usec="0" sec="1631163632"/>
        <to usec="0" sec="1631164331"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.247.23.212"/>
        </slice>
        <from usec="0" sec="1631163632"/>
        <to usec="0" sec="1631164316"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="18.105.105.46"/>
        </slice>
        <from usec="0" sec="1631164118"/>
        <to usec="0" sec="1631164201"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,012,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="203.171.121.94"/>
        </slice>
        <from usec="0" sec="1631164176"/>
        <to usec="0" sec="1631164337"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.24.210.217" src_port="3328"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164427"/>
    </anomaly>
    <anomaly type="notice" value="0.729248,1.33422,012,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="202.24.213.197"/>
            <filter src_ip="159.235.54.3" dst_ip="202.24.213.200" dst_port="23"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164428"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,011,0 0 0 1 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="203.77.123.229" dst_ip="180.193.84.116"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164387"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.24.212.243" src_port="53"/>
        </slice>
        <from usec="0" sec="1631163601"/>
        <to usec="0" sec="1631164428"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="183.201.215.254"/>
        </slice>
        <from usec="0" sec="1631163602"/>
        <to usec="0" sec="1631164420"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="163.194.156.234"/>
        </slice>
        <from usec="0" sec="1631164230"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="5.127.162.10"/>
        </slice>
        <from usec="0" sec="1631163605"/>
        <to usec="0" sec="1631164425"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="43.39.130.82"/>
        </slice>
        <from usec="0" sec="1631163609"/>
        <to usec="0" sec="1631164426"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="104.237.50.149"/>
        </slice>
        <from usec="0" sec="1631163610"/>
        <to usec="0" sec="1631164424"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="46.143.147.111"/>
        </slice>
        <from usec="0" sec="1631163646"/>
        <to usec="0" sec="1631164418"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="13.36.207.141"/>
        </slice>
        <from usec="0" sec="1631164104"/>
        <to usec="0" sec="1631164389"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="23.122.85.26"/>
        </slice>
        <from usec="0" sec="1631164249"/>
        <to usec="0" sec="1631164383"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="13.75.189.181"/>
        </slice>
        <from usec="0" sec="1631164271"/>
        <to usec="0" sec="1631164419"/>
    </anomaly>
    <anomaly type="notice" value="0.47746,1.27466,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="165.219.69.3"/>
        </slice>
        <from usec="0" sec="1631164301"/>
        <to usec="0" sec="1631164428"/>
    </anomaly>
    <anomaly type="notice" value="0.729248,1.33422,999,0 0 0 1 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.194.223.72" dst_port="53"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164337"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="44.237.156.69"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163646"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.194.172.50" dst_port="53"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163646"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.77.116.78" src_port="53"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163646"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="128.246.133.160"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163646"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="49.98.183.151"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163646"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.247.46.31" dst_port="53"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163646"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,004,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="45.51.196.31" dst_ip="133.132.75.214" dst_port="445"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163646"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,999,0 0 0 0 0 0 1 0 0 0 0 0,DDoSUDP">
        <slice>
            <filter dst_ip="204.79.201.166"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163646"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="104.40.24.41" dst_ip="203.77.126.111" dst_port="161"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163646"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="3.157.123.241"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163646"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.132.64.77"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163646"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="133.132.215.133"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163646"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="68.230.73.7"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163646"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="54.132.66.197"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163646"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,011,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="45.110.181.31"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163646"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,999,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="216.251.23.80"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163646"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="44.196.144.151"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163646"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,504,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="71.134.61.143" dst_ip="203.77.119.225" src_port="443"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163646"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.194.223.94" src_port="53"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163646"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.194.222.77" src_port="53"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163646"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,502,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="23.83.111.61"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163646"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.77.121.41" dst_port="53"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163646"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="54.211.242.193"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163646"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,999,0 0 0 0 0 0 1 0 0 0 0 0,DDoSUDP">
        <slice>
            <filter dst_ip="13.84.33.11"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163646"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="207.38.68.41" dst_port="11443"/>
        </slice>
        <from usec="0" sec="1631163780"/>
        <to usec="0" sec="1631163826"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="192.240.35.115" dst_port="83"/>
        </slice>
        <from usec="0" sec="1631163870"/>
        <to usec="0" sec="1631163916"/>
    </anomaly>
    <anomaly type="notice" value="0.804609,1.3082,010,1 0 0 1 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="192.240.37.119" dst_port="83"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164143"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="3.144.181.221"/>
        </slice>
        <from usec="0" sec="1631163915"/>
        <to usec="0" sec="1631163961"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="3.218.36.70"/>
        </slice>
        <from usec="0" sec="1631163915"/>
        <to usec="0" sec="1631163961"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.77.116.78" src_port="53"/>
        </slice>
        <from usec="0" sec="1631163915"/>
        <to usec="0" sec="1631163961"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,011,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="106.75.167.182" src_port="6379"/>
        </slice>
        <from usec="0" sec="1631163915"/>
        <to usec="0" sec="1631163961"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="219.208.212.106"/>
        </slice>
        <from usec="0" sec="1631163915"/>
        <to usec="0" sec="1631163961"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,999,0 0 0 0 0 0 1 0 0 0 0 0,DDoSUDP">
        <slice>
            <filter dst_ip="38.233.245.155"/>
        </slice>
        <from usec="0" sec="1631163915"/>
        <to usec="0" sec="1631163961"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="18.46.66.123"/>
        </slice>
        <from usec="0" sec="1631163915"/>
        <to usec="0" sec="1631163961"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="52.39.65.170"/>
        </slice>
        <from usec="0" sec="1631163915"/>
        <to usec="0" sec="1631163961"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.194.29.155"/>
        </slice>
        <from usec="0" sec="1631163915"/>
        <to usec="0" sec="1631163961"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,011,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="91.233.224.115"/>
        </slice>
        <from usec="0" sec="1631163915"/>
        <to usec="0" sec="1631163961"/>
    </anomaly>
    <anomaly type="notice" value="0.729248,1.33422,020,0 0 0 1 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="68.111.52.31"/>
            <filter dst_ip="54.217.35.233"/>
            <filter dst_ip="18.47.109.124"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,999,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="91.249.19.64" dst_ip="216.251.23.85" dst_port="53"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163961"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="34.228.9.178"/>
        </slice>
        <from usec="0" sec="1631163915"/>
        <to usec="0" sec="1631163961"/>
    </anomaly>
    <anomaly type="notice" value="0.729248,1.33422,020,0 0 0 1 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="133.152.245.246"/>
            <filter dst_ip="34.233.192.47"/>
            <filter dst_ip="3.146.189.171"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164322"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,504,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="116.123.80.8" dst_ip="203.77.119.225" src_port="443"/>
            <filter src_ip="17.160.52.107" dst_ip="203.77.119.225" src_port="443"/>
        </slice>
        <from usec="0" sec="1631163915"/>
        <to usec="0" sec="1631163961"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="54.225.72.156"/>
        </slice>
        <from usec="0" sec="1631163915"/>
        <to usec="0" sec="1631163961"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="18.58.34.183"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163961"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="18.60.96.134"/>
        </slice>
        <from usec="0" sec="1631163915"/>
        <to usec="0" sec="1631163961"/>
    </anomaly>
    <anomaly type="notice" value="0.729248,1.33422,901,0 0 0 1 0 0 1 0 0 0 0 0,empty">
        <slice/>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="54.243.137.190"/>
        </slice>
        <from usec="0" sec="1631163915"/>
        <to usec="0" sec="1631163961"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="141.37.250.214"/>
        </slice>
        <from usec="0" sec="1631163915"/>
        <to usec="0" sec="1631163961"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="68.111.36.207"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.729248,1.33422,999,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="23.178.12.126" src_port="53"/>
            <filter dst_ip="163.194.223.75" src_port="53"/>
            <filter dst_ip="163.194.223.73" src_port="53"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631163798"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="163.194.67.163" dst_port="18245"/>
        </slice>
        <from usec="0" sec="1631164095"/>
        <to usec="0" sec="1631164141"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="192.240.45.101" dst_port="18245"/>
        </slice>
        <from usec="0" sec="1631164095"/>
        <to usec="0" sec="1631164141"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="64.32.247.133" dst_ip="133.106.184.101" src_port="55407"/>
            <filter src_ip="64.32.247.133" dst_ip="133.106.184.101" src_port="37222"/>
        </slice>
        <from usec="0" sec="1631164230"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.729248,1.33422,999,0 0 0 1 0 0 1 0 0 0 0 0,DDoSUDP">
        <slice>
            <filter dst_ip="163.194.171.246"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164338"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="194.8.137.5" dst_port="53"/>
        </slice>
        <from usec="0" sec="1631164230"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="194.8.137.3" dst_port="53"/>
        </slice>
        <from usec="0" sec="1631164230"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,502,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="222.185.249.214"/>
        </slice>
        <from usec="0" sec="1631164230"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="54.233.225.26"/>
        </slice>
        <from usec="0" sec="1631164230"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.77.116.78" src_port="53"/>
        </slice>
        <from usec="0" sec="1631164230"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,999,0 0 0 0 0 0 1 0 0 0 0 0,DDoSUDP">
        <slice>
            <filter dst_ip="210.155.54.152" dst_port="53"/>
        </slice>
        <from usec="0" sec="1631164230"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="34.225.167.142"/>
        </slice>
        <from usec="0" sec="1631163915"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="3.146.237.52"/>
        </slice>
        <from usec="0" sec="1631163915"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="69.232.103.184"/>
        </slice>
        <from usec="0" sec="1631164230"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="69.232.103.190"/>
        </slice>
        <from usec="0" sec="1631164230"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="52.39.56.193"/>
        </slice>
        <from usec="0" sec="1631164230"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="52.41.16.41"/>
        </slice>
        <from usec="0" sec="1631164230"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,999,0 0 0 0 0 0 1 0 0 0 0 0,DDoSUDP">
        <slice>
            <filter dst_ip="38.233.245.149"/>
        </slice>
        <from usec="0" sec="1631164230"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="52.39.123.239"/>
        </slice>
        <from usec="0" sec="1631164230"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="128.246.133.160" dst_ip="203.77.126.111" dst_port="161"/>
            <filter src_ip="104.40.24.41" dst_ip="203.77.126.111" dst_port="161"/>
        </slice>
        <from usec="0" sec="1631164230"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="59.225.65.133"/>
        </slice>
        <from usec="0" sec="1631163915"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.77.119.192" dst_port="53"/>
        </slice>
        <from usec="0" sec="1631164230"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.132.64.45" dst_port="50356"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.77.126.41" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="1631164230"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,011,0 0 0 0 0 0 1 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="91.233.227.206"/>
        </slice>
        <from usec="0" sec="1631164230"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.77.126.53" dst_port="30303"/>
            <filter src_ip="137.75.74.132" dst_ip="203.77.126.53" src_port="32766"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.729248,1.33422,999,0 0 0 1 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.152.251.237" src_port="53"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164338"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="54.236.206.93"/>
        </slice>
        <from usec="0" sec="1631164230"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="54.214.107.234"/>
        </slice>
        <from usec="0" sec="1631164230"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="52.41.80.225"/>
        </slice>
        <from usec="0" sec="1631163915"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,011,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="111.183.96.102" src_port="10216"/>
        </slice>
        <from usec="0" sec="1631164230"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="52.55.69.239"/>
        </slice>
        <from usec="0" sec="1631164230"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrqdurmterp">
        <slice>
            <filter dst_ip="133.132.64.90"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.77.113.87" src_port="53"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="34.226.240.138"/>
        </slice>
        <from usec="0" sec="1631164230"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="161.67.105.179"/>
        </slice>
        <from usec="0" sec="1631163915"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="68.111.17.67"/>
        </slice>
        <from usec="0" sec="1631164230"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="13.51.135.89"/>
        </slice>
        <from usec="0" sec="1631164230"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="34.227.157.77"/>
        </slice>
        <from usec="0" sec="1631164230"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="3.148.213.112"/>
        </slice>
        <from usec="0" sec="1631163915"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="54.131.143.64"/>
        </slice>
        <from usec="0" sec="1631164230"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="52.37.4.191"/>
        </slice>
        <from usec="0" sec="1631164230"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="163.194.8.11"/>
        </slice>
        <from usec="0" sec="1631164230"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.729248,1.33422,020,0 0 0 1 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="52.48.9.42"/>
        </slice>
        <from usec="0" sec="1631163604"/>
        <to usec="0" sec="1631164331"/>
    </anomaly>
    <anomaly type="notice" value="0.729248,1.33422,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.77.114.28" src_port="53"/>
        </slice>
        <from usec="0" sec="1631163601"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="34.205.160.252"/>
        </slice>
        <from usec="0" sec="1631164230"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.68052,1.25389,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="121.133.43.142"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.68052,1.25389,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="126.228.250.217"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.68052,1.25389,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="133.152.98.107"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.875752,1.31438,020,0 0 0 0 0 0 1 0 0 1 0 0,ttl_error">
        <slice>
            <filter src_ip="133.152.235.207"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.68052,1.25389,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="204.51.214.225" dst_ip="61.119.12.43" src_port="587"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.68052,1.25389,011,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="133.132.64.45"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.68052,1.25389,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="156.145.18.104"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.68052,1.25389,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="163.194.131.115" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.68052,1.25389,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="163.194.131.21"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.68052,1.25389,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="163.194.129.15"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.68052,1.25389,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="167.71.202.154" dst_port="19482"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.688102,1.34588,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="91.249.19.64" src_port="53"/>
            <filter dst_ip="91.249.19.64" dst_port="53"/>
        </slice>
        <from usec="0" sec="1631163600"/>
        <to usec="0" sec="1631164276"/>
    </anomaly>
    <anomaly type="notice" value="0.68052,1.25389,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="182.209.23.110" src_port="53846" dst_port="23"/>
            <filter src_ip="182.209.23.110" src_port="53846" dst_port="26"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.722099,1.24136,999,0 0 0 1 0 0 0 0 0 1 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="184.149.185.160" dst_port="161"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.68052,1.25389,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="185.141.200.86"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.68052,1.25389,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="18.155.129.1"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.722099,1.24136,999,0 0 0 1 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="202.247.46.31" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.68052,1.25389,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="202.24.213.140" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.722099,1.24136,999,0 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="203.77.114.217" dst_ip="31.122.91.220" src_port="25"/>
            <filter src_ip="202.247.59.251" dst_ip="173.90.80.169" src_port="53"/>
            <filter src_ip="91.249.19.64" dst_ip="173.90.80.169" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.875752,1.31438,020,0 0 0 0 0 0 1 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="203.77.113.38"/>
            <filter dst_ip="45.100.50.75"/>
            <filter dst_ip="45.100.50.75" dst_port="8080"/>
            <filter dst_ip="45.100.50.75"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.68052,1.25389,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="209.115.91.44" dst_port="81"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.68052,1.25389,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="209.181.175.44"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.68052,1.25389,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="210.66.184.57"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.722099,1.24136,999,0 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter dst_ip="202.24.213.177"/>
            <filter src_ip="50.96.146.214" dst_port="53"/>
            <filter dst_ip="202.24.212.224" dst_port="31485"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.68052,1.25389,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="52.206.25.228"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.68052,1.25389,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="61.151.170.78"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.68052,1.25389,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="192.240.62.126"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.68052,1.25389,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="74.72.254.69"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.68052,1.25389,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="80.206.7.113"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.68052,1.25389,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="121.148.125.24"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.68052,1.25389,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="126.32.249.194"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.68052,1.25389,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter src_ip="104.61.21.68" dst_ip="163.194.115.196" src_port="443"/>
            <filter src_ip="104.61.21.206" dst_ip="163.194.115.196" src_port="443"/>
            <filter src_ip="104.61.21.49" dst_ip="163.194.115.196" src_port="443"/>
            <filter src_ip="45.112.55.158" dst_ip="163.194.115.196" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.798135,1.21336,999,1 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter dst_ip="163.194.97.36"/>
            <filter dst_ip="163.194.97.38"/>
            <filter dst_ip="163.194.97.48"/>
            <filter src_ip="54.188.112.113" src_port="5802"/>
            <filter src_ip="54.32.119.216" src_port="3478"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.760724,1.22617,504,1 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.194.18.231" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.875752,1.31438,504,0 0 0 0 0 0 1 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="54.134.213.249" dst_ip="163.194.18.56" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.722099,1.24136,502,0 0 0 1 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="173.246.217.131" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.68052,1.25389,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="173.9.254.148"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.68052,1.25389,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="198.244.44.127"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.68052,1.25389,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="202.24.213.58"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.68052,1.25389,999,0 0 0 0 0 0 0 0 0 1 0 0,point_to_point">
        <slice>
            <filter src_ip="103.76.118.182" dst_ip="202.24.213.28"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.722099,1.24136,004,0 0 0 1 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="202.24.212.76" dst_port="445"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.722099,1.24136,004,0 0 0 1 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="202.24.212.250" dst_port="445"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.68052,1.25389,004,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="202.24.210.81" dst_port="445"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.760724,1.22617,504,1 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="203.77.121.24" src_port="443"/>
            <filter src_ip="1.133.114.61" dst_ip="203.77.121.24" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.68052,1.25389,502,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="203.77.116.11" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.68052,1.25389,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="37.121.229.112"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.68052,1.25389,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="52.14.91.134"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.68052,1.25389,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="52.97.218.72"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
