<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="notice" value="0.599851,1.33642,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.44.232.62" dst_ip="157.4.216.179" src_port="80" dst_port="54656" proto="tcp"/>
        </slice>
        <from usec="0" sec="1633842796"/>
        <to usec="0" sec="1633842798"/>
    </anomaly>
    <anomaly type="notice" value="0.599851,1.33642,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.50.18.199" dst_ip="20.102.45.48" src_port="57473" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1633842818"/>
        <to usec="0" sec="1633842820"/>
    </anomaly>
    <anomaly type="notice" value="0.599851,1.33642,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.106.217.27" dst_ip="163.44.182.209" src_port="80" dst_port="42138" proto="tcp"/>
        </slice>
        <from usec="0" sec="1633842287"/>
        <to usec="0" sec="1633842289"/>
    </anomaly>
    <anomaly type="notice" value="0.599851,1.33642,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="157.154.161.235" src_port="42185" dst_port="41698"/>
        </slice>
        <from usec="0" sec="1633842284"/>
        <to usec="0" sec="1633842307"/>
    </anomaly>
    <anomaly type="notice" value="0.599851,1.33642,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.204.120.9" proto="icmp"/>
        </slice>
        <from usec="0" sec="1633842418"/>
        <to usec="0" sec="1633842421"/>
    </anomaly>
    <anomaly type="notice" value="0.599851,1.33642,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="18.25.94.161"/>
        </slice>
        <from usec="0" sec="1633842026"/>
        <to usec="0" sec="1633842369"/>
    </anomaly>
    <anomaly type="notice" value="0.599851,1.33642,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.204.150.250" proto="icmp"/>
        </slice>
        <from usec="0" sec="1633842008"/>
        <to usec="0" sec="1633842011"/>
    </anomaly>
    <anomaly type="notice" value="0.599851,1.33642,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="151.141.87.248"/>
        </slice>
        <from usec="0" sec="1633842132"/>
        <to usec="0" sec="1633842135"/>
    </anomaly>
    <anomaly type="notice" value="0.599851,1.33642,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="151.141.64.59"/>
        </slice>
        <from usec="0" sec="1633842009"/>
        <to usec="0" sec="1633842012"/>
    </anomaly>
    <anomaly type="notice" value="0.599851,1.33642,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.204.50.248" proto="icmp"/>
        </slice>
        <from usec="0" sec="1633842081"/>
        <to usec="0" sec="1633842082"/>
    </anomaly>
    <anomaly type="notice" value="0.599851,1.33642,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.204.63.195" proto="icmp"/>
        </slice>
        <from usec="0" sec="1633842329"/>
        <to usec="0" sec="1633842333"/>
    </anomaly>
    <anomaly type="notice" value="0.599851,1.33642,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="112.170.159.242" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1633842422"/>
        <to usec="0" sec="1633842423"/>
    </anomaly>
    <anomaly type="notice" value="0.599851,1.33642,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="124.172.125.12" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1633842002"/>
        <to usec="0" sec="1633842003"/>
    </anomaly>
    <anomaly type="notice" value="0.599851,1.33642,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="194.177.207.10" dst_port="445" proto="tcp"/>
        </slice>
        <from usec="0" sec="1633842283"/>
        <to usec="0" sec="1633842285"/>
    </anomaly>
    <anomaly type="notice" value="0.599851,1.33642,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="171.14.73.41" dst_port="445"/>
        </slice>
        <from usec="0" sec="1633842471"/>
        <to usec="0" sec="1633842474"/>
    </anomaly>
    <anomaly type="notice" value="0.599851,1.33642,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="150.13.91.90" dst_port="6379" proto="tcp"/>
        </slice>
        <from usec="0" sec="1633842563"/>
        <to usec="0" sec="1633842566"/>
    </anomaly>
    <anomaly type="notice" value="0.599851,1.33642,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.204.158.6" proto="icmp"/>
        </slice>
        <from usec="0" sec="1633842379"/>
        <to usec="0" sec="1633842382"/>
    </anomaly>
    <anomaly type="notice" value="0.599851,1.33642,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.204.130.12" proto="icmp"/>
        </slice>
        <from usec="0" sec="1633842270"/>
        <to usec="0" sec="1633842273"/>
    </anomaly>
    <anomaly type="notice" value="0.599851,1.33642,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.204.133.204" proto="icmp"/>
        </slice>
        <from usec="0" sec="1633842421"/>
        <to usec="0" sec="1633842425"/>
    </anomaly>
    <anomaly type="notice" value="0.599851,1.33642,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.204.135.199" proto="icmp"/>
        </slice>
        <from usec="0" sec="1633842059"/>
        <to usec="0" sec="1633842062"/>
    </anomaly>
    <anomaly type="notice" value="0.599851,1.33642,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.204.141.252" proto="icmp"/>
        </slice>
        <from usec="0" sec="1633842254"/>
        <to usec="0" sec="1633842258"/>
    </anomaly>
    <anomaly type="notice" value="0.599851,1.33642,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="193.44.232.163" proto="icmp"/>
        </slice>
        <from usec="0" sec="1633842150"/>
        <to usec="0" sec="1633842357"/>
    </anomaly>
    <anomaly type="notice" value="0.599851,1.33642,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.204.38.1" proto="icmp"/>
        </slice>
        <from usec="0" sec="1633842047"/>
        <to usec="0" sec="1633842050"/>
    </anomaly>
    <anomaly type="notice" value="0.599851,1.33642,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="151.141.86.48" proto="icmp"/>
        </slice>
        <from usec="0" sec="1633842264"/>
        <to usec="0" sec="1633842333"/>
    </anomaly>
    <anomaly type="notice" value="0.599851,1.33642,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="151.141.85.241" proto="icmp"/>
        </slice>
        <from usec="0" sec="1633842390"/>
        <to usec="0" sec="1633842393"/>
    </anomaly>
    <anomaly type="notice" value="0.599851,1.33642,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.204.43.241" proto="icmp"/>
        </slice>
        <from usec="0" sec="1633842378"/>
        <to usec="0" sec="1633842421"/>
    </anomaly>
    <anomaly type="notice" value="0.599851,1.33642,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="45.183.25.36" proto="icmp"/>
        </slice>
        <from usec="0" sec="1633842124"/>
        <to usec="0" sec="1633842127"/>
    </anomaly>
    <anomaly type="notice" value="0.599851,1.33642,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.204.56.11" proto="icmp"/>
        </slice>
        <from usec="0" sec="1633842145"/>
        <to usec="0" sec="1633842147"/>
    </anomaly>
    <anomaly type="notice" value="0.599851,1.33642,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="220.56.229.149" proto="icmp"/>
        </slice>
        <from usec="0" sec="1633842174"/>
        <to usec="0" sec="1633842177"/>
    </anomaly>
    <anomaly type="notice" value="0.599851,1.33642,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="54.82.242.164"/>
        </slice>
        <from usec="0" sec="1633842053"/>
        <to usec="0" sec="1633842057"/>
    </anomaly>
    <anomaly type="notice" value="0.599851,1.33642,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="62.162.10.19" proto="icmp"/>
        </slice>
        <from usec="0" sec="1633842446"/>
        <to usec="0" sec="1633842447"/>
    </anomaly>
    <anomaly type="notice" value="0.599851,1.33642,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="5.59.239.149" proto="icmp"/>
        </slice>
        <from usec="0" sec="1633842272"/>
        <to usec="0" sec="1633842273"/>
    </anomaly>
    <anomaly type="notice" value="0.834922,1.37639,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.204.155.205"/>
        </slice>
        <from usec="0" sec="1633842282"/>
        <to usec="0" sec="1633842697"/>
    </anomaly>
    <anomaly type="notice" value="0.834922,1.37639,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.204.159.243"/>
        </slice>
        <from usec="0" sec="1633842891"/>
        <to usec="0" sec="1633842894"/>
    </anomaly>
    <anomaly type="notice" value="0.834922,1.37639,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="139.81.98.3"/>
        </slice>
        <from usec="0" sec="1633842348"/>
        <to usec="0" sec="1633842577"/>
    </anomaly>
    <anomaly type="notice" value="0.834922,1.37639,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.204.157.197"/>
        </slice>
        <from usec="0" sec="1633842856"/>
        <to usec="0" sec="1633842859"/>
    </anomaly>
    <anomaly type="notice" value="0.834922,1.37639,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.204.146.1"/>
        </slice>
        <from usec="0" sec="1633842641"/>
        <to usec="0" sec="1633842645"/>
    </anomaly>
    <anomaly type="notice" value="0.834922,1.37639,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.204.151.203"/>
        </slice>
        <from usec="0" sec="1633842763"/>
        <to usec="0" sec="1633842872"/>
    </anomaly>
    <anomaly type="notice" value="0.834922,1.37639,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="45.183.25.36"/>
        </slice>
        <from usec="0" sec="1633842888"/>
        <to usec="0" sec="1633842892"/>
    </anomaly>
    <anomaly type="notice" value="0.834922,1.37639,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.204.37.254"/>
        </slice>
        <from usec="0" sec="1633842138"/>
        <to usec="0" sec="1633842698"/>
    </anomaly>
    <anomaly type="notice" value="0.834922,1.37639,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="134.159.220.54"/>
        </slice>
        <from usec="0" sec="1633842505"/>
        <to usec="0" sec="1633842508"/>
    </anomaly>
    <anomaly type="notice" value="0.834922,1.37639,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.204.153.203"/>
        </slice>
        <from usec="0" sec="1633842800"/>
        <to usec="0" sec="1633842804"/>
    </anomaly>
    <anomaly type="notice" value="0.834922,1.37639,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="125.136.170.192" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1633842784"/>
        <to usec="0" sec="1633842785"/>
    </anomaly>
    <anomaly type="notice" value="0.834922,1.37639,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.204.131.251"/>
        </slice>
        <from usec="0" sec="1633842441"/>
        <to usec="0" sec="1633842887"/>
    </anomaly>
    <anomaly type="notice" value="0.834922,1.37639,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.204.136.241"/>
        </slice>
        <from usec="0" sec="1633842408"/>
        <to usec="0" sec="1633842412"/>
    </anomaly>
    <anomaly type="notice" value="0.834922,1.37639,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="204.219.157.2"/>
        </slice>
        <from usec="0" sec="1633842555"/>
        <to usec="0" sec="1633842699"/>
    </anomaly>
    <anomaly type="notice" value="0.834922,1.37639,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="151.141.84.251"/>
        </slice>
        <from usec="0" sec="1633842536"/>
        <to usec="0" sec="1633842539"/>
    </anomaly>
    <anomaly type="notice" value="0.834922,1.37639,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="151.141.81.6"/>
        </slice>
        <from usec="0" sec="1633842001"/>
        <to usec="0" sec="1633842606"/>
    </anomaly>
    <anomaly type="notice" value="0.834922,1.37639,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.204.54.0"/>
        </slice>
        <from usec="0" sec="1633842550"/>
        <to usec="0" sec="1633842554"/>
    </anomaly>
    <anomaly type="notice" value="0.834922,1.37639,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="218.73.246.9" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1633842279"/>
        <to usec="0" sec="1633842281"/>
    </anomaly>
    <anomaly type="notice" value="0.834922,1.37639,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="117.54.253.190" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1633842725"/>
        <to usec="0" sec="1633842745"/>
    </anomaly>
    <anomaly type="notice" value="0.834922,1.37639,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.204.144.2"/>
        </slice>
        <from usec="0" sec="1633842750"/>
        <to usec="0" sec="1633842753"/>
    </anomaly>
    <anomaly type="notice" value="0.834922,1.37639,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1633842864"/>
        <to usec="0" sec="1633842876"/>
    </anomaly>
    <anomaly type="notice" value="0.834922,1.37639,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.204.139.254"/>
        </slice>
        <from usec="0" sec="1633842611"/>
        <to usec="0" sec="1633842614"/>
    </anomaly>
    <anomaly type="notice" value="0.834922,1.37639,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.204.33.240"/>
        </slice>
        <from usec="0" sec="1633842583"/>
        <to usec="0" sec="1633842592"/>
    </anomaly>
    <anomaly type="notice" value="0.834922,1.37639,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="143.252.91.195"/>
        </slice>
        <from usec="0" sec="1633842513"/>
        <to usec="0" sec="1633842516"/>
    </anomaly>
    <anomaly type="notice" value="0.834922,1.37639,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="151.141.83.206"/>
        </slice>
        <from usec="0" sec="1633842519"/>
        <to usec="0" sec="1633842523"/>
    </anomaly>
    <anomaly type="notice" value="0.834922,1.37639,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="151.141.80.0"/>
        </slice>
        <from usec="0" sec="1633842539"/>
        <to usec="0" sec="1633842542"/>
    </anomaly>
    <anomaly type="notice" value="0.834922,1.37639,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="52.193.180.90"/>
        </slice>
        <from usec="0" sec="1633842215"/>
        <to usec="0" sec="1633842710"/>
    </anomaly>
    <anomaly type="notice" value="0.834922,1.37639,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.204.51.207"/>
        </slice>
        <from usec="0" sec="1633842480"/>
        <to usec="0" sec="1633842484"/>
    </anomaly>
    <anomaly type="notice" value="0.834922,1.37639,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.204.58.8"/>
        </slice>
        <from usec="0" sec="1633842888"/>
        <to usec="0" sec="1633842891"/>
    </anomaly>
    <anomaly type="notice" value="0.834922,1.37639,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.204.62.59"/>
        </slice>
        <from usec="0" sec="1633842856"/>
        <to usec="0" sec="1633842860"/>
    </anomaly>
    <anomaly type="notice" value="0.834922,1.37639,010,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.44.84.90" src_port="3389"/>
        </slice>
        <from usec="0" sec="1633842444"/>
        <to usec="0" sec="1633842808"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="45.48.96.141" dst_port="50568"/>
            <filter dst_ip="45.48.96.141"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842288"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="137.123.149.123"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842129"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="192.157.98.175"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842288"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="40.74.147.135"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842091"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="47.127.193.199" src_port="43020" dst_port="41849"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842108"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="143.176.142.228"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842104"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="103.67.103.186"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842108"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.44.181.209" src_port="443"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842196"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.13.1.11" src_port="53"/>
            <filter dst_ip="133.13.1.11" dst_port="53"/>
            <filter src_ip="14.80.182.230" dst_ip="133.13.1.11" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1633842001"/>
        <to usec="0" sec="1633842108"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="13.118.2.102"/>
        </slice>
        <from usec="0" sec="1633842003"/>
        <to usec="0" sec="1633842108"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.44.180.139"/>
        </slice>
        <from usec="0" sec="1633842003"/>
        <to usec="0" sec="1633842187"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="69.18.87.70"/>
        </slice>
        <from usec="0" sec="1633842011"/>
        <to usec="0" sec="1633842086"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="91.135.101.9"/>
        </slice>
        <from usec="0" sec="1633842053"/>
        <to usec="0" sec="1633842135"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="209.197.72.99"/>
        </slice>
        <from usec="0" sec="1633842058"/>
        <to usec="0" sec="1633842108"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="54.210.118.38"/>
        </slice>
        <from usec="0" sec="1633842072"/>
        <to usec="0" sec="1633842073"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="5.66.201.53"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842198"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,004,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="178.182.7.55"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842198"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="18.78.203.112"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842198"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="43.127.40.164"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842648"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="52.7.222.210"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842198"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,011,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="143.186.71.164"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842094"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="195.21.92.234" dst_port="55773"/>
            <filter dst_ip="195.21.92.234"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842198"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="94.14.41.61"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842287"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="198.125.206.149"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842288"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.13.212.163"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842196"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="202.16.154.45"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842198"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.103.223.168"/>
        </slice>
        <from usec="0" sec="1633842001"/>
        <to usec="0" sec="1633842190"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="208.89.228.110"/>
        </slice>
        <from usec="0" sec="1633842001"/>
        <to usec="0" sec="1633842197"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="167.204.19.127" src_port="44184" dst_port="42035"/>
        </slice>
        <from usec="0" sec="1633842001"/>
        <to usec="0" sec="1633842198"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.44.43.235"/>
        </slice>
        <from usec="0" sec="1633842002"/>
        <to usec="0" sec="1633842195"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.44.44.88"/>
        </slice>
        <from usec="0" sec="1633842002"/>
        <to usec="0" sec="1633842187"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.44.132.162"/>
        </slice>
        <from usec="0" sec="1633842003"/>
        <to usec="0" sec="1633842196"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.13.55.157" dst_port="8645"/>
        </slice>
        <from usec="0" sec="1633842003"/>
        <to usec="0" sec="1633842647"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.170.240.44"/>
        </slice>
        <from usec="0" sec="1633842006"/>
        <to usec="0" sec="1633842153"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="54.240.90.62"/>
        </slice>
        <from usec="0" sec="1633842011"/>
        <to usec="0" sec="1633842013"/>
    </anomaly>
    <anomaly type="notice" value="0.612614,1.32625,020,1 0 0 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.204.52.4"/>
        </slice>
        <from usec="0" sec="1633842012"/>
        <to usec="0" sec="1633842197"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="163.44.84.90"/>
        </slice>
        <from usec="0" sec="1633842017"/>
        <to usec="0" sec="1633842188"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.44.95.57"/>
        </slice>
        <from usec="0" sec="1633842017"/>
        <to usec="0" sec="1633842179"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="18.190.72.142"/>
        </slice>
        <from usec="0" sec="1633842032"/>
        <to usec="0" sec="1633842185"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="91.249.37.20"/>
        </slice>
        <from usec="0" sec="1633842059"/>
        <to usec="0" sec="1633842198"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="23.19.141.165"/>
        </slice>
        <from usec="0" sec="1633842072"/>
        <to usec="0" sec="1633842556"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="52.20.35.130"/>
        </slice>
        <from usec="0" sec="1633842102"/>
        <to usec="0" sec="1633842104"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="168.139.53.172"/>
        </slice>
        <from usec="0" sec="1633842172"/>
        <to usec="0" sec="1633842177"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="80.209.211.105"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842288"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="40.78.63.2" src_port="30187" dst_port="41911"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842288"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="157.154.161.235" src_port="34995"/>
            <filter dst_ip="157.154.161.235" src_port="41698" dst_port="42185"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842288"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="212.190.113.163" src_port="1859"/>
            <filter dst_ip="212.190.113.163"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842288"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="162.29.54.31"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842288"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,011,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="213.60.188.109"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842288"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="34.3.128.179"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842286"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="162.101.33.133"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842288"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="27.99.115.137" src_port="50000"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842288"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="18.29.119.211"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842279"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="3.82.74.184"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842276"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="62.212.101.235"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842282"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.44.236.231" src_port="53" dst_port="58108"/>
            <filter dst_ip="163.44.236.231" src_port="53" dst_port="50053"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842286"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.50.29.185" dst_port="53"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842288"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="143.136.63.111"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842287"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="47.108.90.56" src_port="2375" dst_port="41840"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842288"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,502,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="218.198.189.60"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842286"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="169.248.135.11" dst_ip="203.50.22.141" dst_port="53"/>
        </slice>
        <from usec="0" sec="1633842001"/>
        <to usec="0" sec="1633842287"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.44.183.161" src_port="33434"/>
            <filter dst_ip="163.44.183.161" src_port="5004"/>
            <filter dst_ip="163.44.183.161" src_port="443"/>
            <filter dst_ip="163.44.183.161" src_port="9000"/>
        </slice>
        <from usec="0" sec="1633842001"/>
        <to usec="0" sec="1633842557"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,010,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="27.7.254.173"/>
        </slice>
        <from usec="0" sec="1633842002"/>
        <to usec="0" sec="1633842285"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="40.74.70.18"/>
        </slice>
        <from usec="0" sec="1633842004"/>
        <to usec="0" sec="1633842284"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="3.10.206.204"/>
        </slice>
        <from usec="0" sec="1633842004"/>
        <to usec="0" sec="1633842286"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="126.189.111.63"/>
        </slice>
        <from usec="0" sec="1633842007"/>
        <to usec="0" sec="1633842201"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="14.39.152.28"/>
        </slice>
        <from usec="0" sec="1633842019"/>
        <to usec="0" sec="1633842648"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="106.242.59.94" src_port="2375" dst_port="42038"/>
        </slice>
        <from usec="0" sec="1633842039"/>
        <to usec="0" sec="1633842288"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="13.146.208.16"/>
        </slice>
        <from usec="0" sec="1633842052"/>
        <to usec="0" sec="1633842288"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="113.110.43.255"/>
        </slice>
        <from usec="0" sec="1633842253"/>
        <to usec="0" sec="1633842260"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="3.143.246.47"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842218"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="40.107.177.141" dst_ip="163.44.27.202" src_port="443"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842378"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="195.21.92.126" dst_port="58226"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842378"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="140.93.143.229"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842377"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="161.60.9.223" src_port="30190" dst_port="51638"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842378"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="1.192.254.55" dst_ip="203.50.29.133" src_port="53"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842378"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="3.140.160.168"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842378"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="151.132.140.95"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842378"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,004,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="188.84.32.215"/>
        </slice>
        <from usec="0" sec="1633842002"/>
        <to usec="0" sec="1633842376"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="210.131.143.87" src_port="9098" dst_port="23"/>
        </slice>
        <from usec="0" sec="1633842002"/>
        <to usec="0" sec="1633842375"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="126.179.89.77"/>
        </slice>
        <from usec="0" sec="1633842003"/>
        <to usec="0" sec="1633842324"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="143.105.154.227"/>
        </slice>
        <from usec="0" sec="1633842003"/>
        <to usec="0" sec="1633842377"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="218.199.228.22"/>
        </slice>
        <from usec="0" sec="1633842009"/>
        <to usec="0" sec="1633842373"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.225.15.156" dst_port="24557"/>
        </slice>
        <from usec="0" sec="1633842024"/>
        <to usec="0" sec="1633842376"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="13.140.224.158"/>
        </slice>
        <from usec="0" sec="1633842031"/>
        <to usec="0" sec="1633842372"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="192.103.80.162"/>
        </slice>
        <from usec="0" sec="1633842203"/>
        <to usec="0" sec="1633842372"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="18.190.25.220"/>
        </slice>
        <from usec="0" sec="1633842275"/>
        <to usec="0" sec="1633842369"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="20.196.221.227" dst_port="5678"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842466"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.156.130.88"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842466"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="149.26.232.12"/>
        </slice>
        <from usec="0" sec="1633842007"/>
        <to usec="0" sec="1633842464"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="180.82.66.222"/>
        </slice>
        <from usec="0" sec="1633842016"/>
        <to usec="0" sec="1633842456"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="194.213.19.39"/>
        </slice>
        <from usec="0" sec="1633842028"/>
        <to usec="0" sec="1633842437"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.44.87.97"/>
        </slice>
        <from usec="0" sec="1633842035"/>
        <to usec="0" sec="1633842456"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="143.176.142.211"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842549"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="216.188.135.14"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842555"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="193.44.232.163"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842558"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="89.238.37.73" dst_ip="203.50.25.193" src_port="43402"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842558"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="212.95.30.178"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842558"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="78.214.41.51"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842558"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="147.106.151.193"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842557"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.13.173.98" dst_port="23"/>
        </slice>
        <from usec="0" sec="1633842001"/>
        <to usec="0" sec="1633842557"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,010,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="165.252.248.207"/>
        </slice>
        <from usec="0" sec="1633842001"/>
        <to usec="0" sec="1633842556"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.156.130.191"/>
        </slice>
        <from usec="0" sec="1633842002"/>
        <to usec="0" sec="1633842558"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="180.27.230.251"/>
        </slice>
        <from usec="0" sec="1633842002"/>
        <to usec="0" sec="1633842423"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="3.99.213.49"/>
        </slice>
        <from usec="0" sec="1633842002"/>
        <to usec="0" sec="1633842558"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="13.195.61.3"/>
        </slice>
        <from usec="0" sec="1633842003"/>
        <to usec="0" sec="1633842557"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="45.78.63.224"/>
        </slice>
        <from usec="0" sec="1633842003"/>
        <to usec="0" sec="1633842514"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="18.26.247.67"/>
        </slice>
        <from usec="0" sec="1633842003"/>
        <to usec="0" sec="1633842554"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.44.84.78" src_port="53"/>
        </slice>
        <from usec="0" sec="1633842005"/>
        <to usec="0" sec="1633842645"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="200.108.19.118"/>
        </slice>
        <from usec="0" sec="1633842007"/>
        <to usec="0" sec="1633842558"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="104.118.41.34"/>
        </slice>
        <from usec="0" sec="1633842010"/>
        <to usec="0" sec="1633842534"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="219.103.202.140"/>
        </slice>
        <from usec="0" sec="1633842010"/>
        <to usec="0" sec="1633842536"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="163.44.81.241"/>
        </slice>
        <from usec="0" sec="1633842025"/>
        <to usec="0" sec="1633842530"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="54.225.186.29"/>
        </slice>
        <from usec="0" sec="1633842044"/>
        <to usec="0" sec="1633842558"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="18.190.72.224"/>
        </slice>
        <from usec="0" sec="1633842053"/>
        <to usec="0" sec="1633842552"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="54.225.162.130"/>
        </slice>
        <from usec="0" sec="1633842060"/>
        <to usec="0" sec="1633842485"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="69.21.38.168"/>
        </slice>
        <from usec="0" sec="1633842417"/>
        <to usec="0" sec="1633842528"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPICrp">
        <slice>
            <filter dst_ip="139.1.169.216"/>
        </slice>
        <from usec="0" sec="1633842478"/>
        <to usec="0" sec="1633842487"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,011,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPRSTrp">
        <slice>
            <filter dst_ip="17.121.118.189" dst_port="443"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842648"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="60.81.188.114"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842646"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="78.214.41.51"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842648"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="49.63.76.14"/>
        </slice>
        <from usec="0" sec="1633842001"/>
        <to usec="0" sec="1633842648"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="65.23.117.214"/>
        </slice>
        <from usec="0" sec="1633842002"/>
        <to usec="0" sec="1633842634"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,020,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.44.205.241"/>
        </slice>
        <from usec="0" sec="1633842006"/>
        <to usec="0" sec="1633842646"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="38.93.31.220" dst_port="80"/>
        </slice>
        <from usec="0" sec="1633842009"/>
        <to usec="0" sec="1633842648"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,011,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="27.113.121.96" src_port="6379"/>
        </slice>
        <from usec="0" sec="1633842430"/>
        <to usec="0" sec="1633842555"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="89.238.37.240"/>
        </slice>
        <from usec="0" sec="1633842457"/>
        <to usec="0" sec="1633842648"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="52.91.162.46"/>
        </slice>
        <from usec="0" sec="1633842483"/>
        <to usec="0" sec="1633842622"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="91.249.38.22"/>
        </slice>
        <from usec="0" sec="1633842539"/>
        <to usec="0" sec="1633842588"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="5.246.249.207"/>
        </slice>
        <from usec="0" sec="1633842575"/>
        <to usec="0" sec="1633842637"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter src_ip="178.0.143.250" dst_ip="163.44.123.165" src_port="80"/>
            <filter dst_ip="163.44.123.165"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842738"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="5.66.183.76" dst_port="50809"/>
            <filter dst_ip="5.66.183.76"/>
        </slice>
        <from usec="0" sec="1633842001"/>
        <to usec="0" sec="1633842738"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="126.22.69.109"/>
        </slice>
        <from usec="0" sec="1633842001"/>
        <to usec="0" sec="1633842734"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="196.90.60.23"/>
        </slice>
        <from usec="0" sec="1633842002"/>
        <to usec="0" sec="1633842733"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="185.35.149.43"/>
        </slice>
        <from usec="0" sec="1633842003"/>
        <to usec="0" sec="1633842738"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,999,0 0 0 1 0 0 0 0 0 0 0 0,DDoSUDP">
        <slice>
            <filter dst_ip="13.140.86.236" dst_port="53"/>
            <filter dst_ip="104.212.139.244" dst_port="53"/>
        </slice>
        <from usec="0" sec="1633842001"/>
        <to usec="0" sec="1633842736"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="103.84.253.7"/>
        </slice>
        <from usec="0" sec="1633842019"/>
        <to usec="0" sec="1633842713"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="159.203.157.151"/>
        </slice>
        <from usec="0" sec="1633842032"/>
        <to usec="0" sec="1633842722"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="91.135.99.211"/>
        </slice>
        <from usec="0" sec="1633842668"/>
        <to usec="0" sec="1633842691"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="152.120.84.91"/>
        </slice>
        <from usec="0" sec="1633842681"/>
        <to usec="0" sec="1633842728"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="202.235.39.153" src_port="25566"/>
            <filter dst_ip="202.235.39.153"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842828"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,010,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="211.54.161.62"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842828"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="20.100.215.156"/>
        </slice>
        <from usec="0" sec="1633842038"/>
        <to usec="0" sec="1633842821"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.251.161.121"/>
        </slice>
        <from usec="0" sec="1633842053"/>
        <to usec="0" sec="1633842825"/>
    </anomaly>
    <anomaly type="notice" value="0.439689,1.328,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="8.248.108.139"/>
        </slice>
        <from usec="0" sec="1633842784"/>
        <to usec="0" sec="1633842798"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,504,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="54.94.46.64"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842046"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="39.105.251.106" src_port="42001" dst_port="2375"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842046"/>
    </anomaly>
    <anomaly type="notice" value="0.834922,1.37639,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="13.146.208.16"/>
        </slice>
        <from usec="0" sec="1633842027"/>
        <to usec="0" sec="1633842715"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="163.44.169.50"/>
        </slice>
        <from usec="0" sec="1633842360"/>
        <to usec="0" sec="1633842406"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="69.140.75.247"/>
        </slice>
        <from usec="0" sec="1633842360"/>
        <to usec="0" sec="1633842406"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="69.140.75.241"/>
        </slice>
        <from usec="0" sec="1633842360"/>
        <to usec="0" sec="1633842406"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="192.241.168.201" src_port="443"/>
        </slice>
        <from usec="0" sec="1633842360"/>
        <to usec="0" sec="1633842406"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="52.94.165.196"/>
        </slice>
        <from usec="0" sec="1633842360"/>
        <to usec="0" sec="1633842406"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.50.21.74" dst_port="53"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842901"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,020,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="194.112.184.83" src_port="35699" dst_port="42330"/>
            <filter dst_ip="194.112.184.83"/>
        </slice>
        <from usec="0" sec="1633842360"/>
        <to usec="0" sec="1633842406"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="3.97.176.168"/>
        </slice>
        <from usec="0" sec="1633842360"/>
        <to usec="0" sec="1633842406"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="193.242.103.34"/>
        </slice>
        <from usec="0" sec="1633842360"/>
        <to usec="0" sec="1633842406"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="13.196.44.115"/>
        </slice>
        <from usec="0" sec="1633842360"/>
        <to usec="0" sec="1633842406"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="52.93.163.115"/>
        </slice>
        <from usec="0" sec="1633842360"/>
        <to usec="0" sec="1633842406"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,999,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="216.243.73.73"/>
        </slice>
        <from usec="0" sec="1633842360"/>
        <to usec="0" sec="1633842406"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="69.140.74.42"/>
        </slice>
        <from usec="0" sec="1633842360"/>
        <to usec="0" sec="1633842406"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="13.212.48.196"/>
        </slice>
        <from usec="0" sec="1633842360"/>
        <to usec="0" sec="1633842406"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="54.160.171.9"/>
        </slice>
        <from usec="0" sec="1633842360"/>
        <to usec="0" sec="1633842406"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,012,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="212.92.10.237" dst_port="21995"/>
        </slice>
        <from usec="0" sec="1633842585"/>
        <to usec="0" sec="1633842631"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="69.140.75.247"/>
        </slice>
        <from usec="0" sec="1633842630"/>
        <to usec="0" sec="1633842676"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,011,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="180.183.98.193" src_port="6379"/>
        </slice>
        <from usec="0" sec="1633842630"/>
        <to usec="0" sec="1633842676"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="3.57.60.7"/>
        </slice>
        <from usec="0" sec="1633842630"/>
        <to usec="0" sec="1633842676"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="34.33.239.238"/>
        </slice>
        <from usec="0" sec="1633842630"/>
        <to usec="0" sec="1633842676"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,999,0 0 0 0 0 0 1 0 0 0 0 0,DDoSUDP">
        <slice>
            <filter dst_ip="38.93.31.237" dst_port="53"/>
        </slice>
        <from usec="0" sec="1633842360"/>
        <to usec="0" sec="1633842676"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="69.140.75.233"/>
        </slice>
        <from usec="0" sec="1633842630"/>
        <to usec="0" sec="1633842676"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.50.29.16" dst_port="53"/>
        </slice>
        <from usec="0" sec="1633842630"/>
        <to usec="0" sec="1633842676"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,504,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.44.124.27"/>
        </slice>
        <from usec="0" sec="1633842630"/>
        <to usec="0" sec="1633842676"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="69.140.75.225"/>
        </slice>
        <from usec="0" sec="1633842630"/>
        <to usec="0" sec="1633842676"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="54.150.197.17"/>
        </slice>
        <from usec="0" sec="1633842630"/>
        <to usec="0" sec="1633842676"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="177.67.127.156"/>
        </slice>
        <from usec="0" sec="1633842630"/>
        <to usec="0" sec="1633842676"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="54.68.106.46"/>
        </slice>
        <from usec="0" sec="1633842630"/>
        <to usec="0" sec="1633842676"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.50.19.193"/>
        </slice>
        <from usec="0" sec="1633842630"/>
        <to usec="0" sec="1633842676"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,020,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.50.27.174"/>
        </slice>
        <from usec="0" sec="1633842630"/>
        <to usec="0" sec="1633842676"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="163.44.84.90"/>
        </slice>
        <from usec="0" sec="1633842630"/>
        <to usec="0" sec="1633842676"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="18.123.133.91"/>
        </slice>
        <from usec="0" sec="1633842630"/>
        <to usec="0" sec="1633842676"/>
    </anomaly>
    <anomaly type="notice" value="0.706739,1.3579,999,0 0 0 1 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="117.174.70.191" dst_ip="163.44.61.123" dst_port="53"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842676"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="3.80.107.149"/>
        </slice>
        <from usec="0" sec="1633842630"/>
        <to usec="0" sec="1633842676"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="45.172.106.59" dst_port="8080"/>
            <filter dst_ip="45.172.106.59"/>
        </slice>
        <from usec="0" sec="1633842630"/>
        <to usec="0" sec="1633842676"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="54.224.115.11"/>
        </slice>
        <from usec="0" sec="1633842630"/>
        <to usec="0" sec="1633842676"/>
    </anomaly>
    <anomaly type="notice" value="0.706739,1.3579,999,0 0 0 1 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.235.27.130" dst_ip="34.42.229.166" src_port="587"/>
        </slice>
        <from usec="0" sec="1633842000"/>
        <to usec="0" sec="1633842901"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="35.37.35.53"/>
        </slice>
        <from usec="0" sec="1633842630"/>
        <to usec="0" sec="1633842676"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="52.95.48.172"/>
        </slice>
        <from usec="0" sec="1633842630"/>
        <to usec="0" sec="1633842676"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.44.141.86" dst_port="9253"/>
            <filter dst_ip="163.44.141.86" dst_port="23332"/>
        </slice>
        <from usec="0" sec="1633842360"/>
        <to usec="0" sec="1633842676"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="3.90.141.200"/>
        </slice>
        <from usec="0" sec="1633842630"/>
        <to usec="0" sec="1633842676"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="134.159.220.54"/>
        </slice>
        <from usec="0" sec="1633842630"/>
        <to usec="0" sec="1633842676"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="54.167.47.31"/>
        </slice>
        <from usec="0" sec="1633842630"/>
        <to usec="0" sec="1633842676"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,504,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.44.84.56" dst_ip="52.70.110.192" dst_port="443"/>
        </slice>
        <from usec="0" sec="1633842630"/>
        <to usec="0" sec="1633842676"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="68.75.21.170"/>
        </slice>
        <from usec="0" sec="1633842360"/>
        <to usec="0" sec="1633842676"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="157.154.74.80" src_port="55695" dst_port="42631"/>
        </slice>
        <from usec="0" sec="1633842630"/>
        <to usec="0" sec="1633842676"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="3.88.1.120"/>
        </slice>
        <from usec="0" sec="1633842630"/>
        <to usec="0" sec="1633842676"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="3.87.200.132"/>
        </slice>
        <from usec="0" sec="1633842630"/>
        <to usec="0" sec="1633842676"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="18.3.64.201"/>
        </slice>
        <from usec="0" sec="1633842360"/>
        <to usec="0" sec="1633842721"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="38.93.31.247"/>
        </slice>
        <from usec="0" sec="1633842855"/>
        <to usec="0" sec="1633842901"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="38.93.31.242"/>
        </slice>
        <from usec="0" sec="1633842855"/>
        <to usec="0" sec="1633842901"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,999,0 0 0 0 0 0 1 0 0 0 0 0,DDoSUDP">
        <slice>
            <filter dst_ip="202.16.157.172" dst_port="53"/>
        </slice>
        <from usec="0" sec="1633842630"/>
        <to usec="0" sec="1633842901"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.50.25.182" dst_port="53"/>
            <filter dst_ip="203.50.25.182" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="1633842855"/>
        <to usec="0" sec="1633842901"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="207.226.201.235" dst_port="58660"/>
        </slice>
        <from usec="0" sec="1633842855"/>
        <to usec="0" sec="1633842901"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,011,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="192.241.165.124" src_port="47808"/>
        </slice>
        <from usec="0" sec="1633842855"/>
        <to usec="0" sec="1633842901"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="117.101.196.204"/>
        </slice>
        <from usec="0" sec="1633842855"/>
        <to usec="0" sec="1633842901"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,504,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="17.56.119.132" dst_ip="203.50.25.75" src_port="443"/>
        </slice>
        <from usec="0" sec="1633842630"/>
        <to usec="0" sec="1633842901"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,504,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.44.84.56" dst_ip="52.70.110.192" dst_port="443"/>
        </slice>
        <from usec="0" sec="1633842855"/>
        <to usec="0" sec="1633842901"/>
    </anomaly>
    <anomaly type="notice" value="0.695705,1.36784,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="49.72.19.91"/>
        </slice>
        <from usec="0" sec="1633842855"/>
        <to usec="0" sec="1633842901"/>
    </anomaly>
    <anomaly type="notice" value="0.644225,1.297,004,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="109.0.110.93"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644225,1.297,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="52.193.180.90" dst_port="10001"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644225,1.297,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="131.158.65.200"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644225,1.297,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.235.24.71"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.656125,1.28651,999,0 0 0 1 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter src_ip="133.250.190.44" dst_ip="185.43.119.227" src_port="8001"/>
            <filter src_ip="133.250.190.62" dst_ip="185.43.119.227" src_port="21048"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.656125,1.28651,999,0 0 0 1 0 0 0 0 0 1 0 0,heavy_hitter">
        <slice>
            <filter src_ip="133.250.190.40" dst_ip="87.19.99.102"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.656125,1.28651,999,0 0 0 1 0 0 0 0 0 1 0 0,heavy_hitter">
        <slice>
            <filter src_ip="133.250.190.36" dst_ip="87.19.99.102"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644225,1.297,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="161.96.180.74"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644225,1.297,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="142.90.116.62" src_port="61953" dst_port="8454"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644225,1.297,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="89.238.37.237" src_port="61953" dst_port="9091"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644225,1.297,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="157.154.147.218" src_port="61953" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.858285,1.31735,999,0 0 0 1 0 0 1 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="210.137.124.83" dst_ip="0.0.0.0" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.656125,1.28651,504,0 0 0 1 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="163.44.180.29" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644225,1.297,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.44.124.239"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644225,1.297,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="163.44.124.30"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644225,1.297,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="163.44.87.122"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644225,1.297,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="165.21.178.2" src_port="61953" dst_port="2561"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644225,1.297,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="167.204.151.133" src_port="61953" dst_port="8090"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644225,1.297,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="167.99.159.106"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644225,1.297,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="167.99.95.120" src_port="44810"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.858285,1.31735,010,0 0 0 1 0 0 1 0 0 1 0 0,ntscSYN">
        <slice>
            <filter src_ip="192.241.173.241" dst_port="443"/>
            <filter src_ip="192.241.168.151" dst_port="443"/>
            <filter src_ip="192.241.173.111" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644225,1.297,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="202.225.37.133"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.656125,1.28651,010,0 0 0 1 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="66.255.53.245"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.656125,1.28651,999,0 0 0 1 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="71.180.24.28" dst_ip="203.50.30.99" dst_port="53"/>
            <filter src_ip="71.180.24.28" dst_ip="202.225.21.57" dst_port="53"/>
            <filter src_ip="71.180.24.28" dst_ip="202.16.154.205" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.656125,1.28651,503,0 0 0 1 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.44.221.132" dst_ip="126.80.11.164" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644225,1.297,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.44.188.110" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644225,1.297,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.44.183.183" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.656125,1.28651,999,0 0 0 1 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter src_ip="54.162.33.209" dst_ip="163.44.64.225" src_port="5802"/>
            <filter src_ip="54.68.84.73" dst_ip="163.44.64.225" src_port="3478"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644225,1.297,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.44.192.241" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644225,1.297,502,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="176.107.173.158" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644225,1.297,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="18.9.172.92"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644225,1.297,010,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="195.21.92.122" dst_port="58449"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644225,1.297,010,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="195.21.92.123" dst_port="58361"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644225,1.297,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.50.22.250" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644225,1.297,010,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="204.219.157.2" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644225,1.297,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="54.172.157.101"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644225,1.297,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="76.219.5.194"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644225,1.297,010,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="193.44.232.163" src_port="33312"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644225,1.297,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="94.14.41.160"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.656125,1.28651,504,0 0 0 1 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.44.181.28" src_port="443"/>
            <filter dst_ip="163.44.181.28"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
