<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="notice" value="0.767316,2.12714,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="162.130.174.132" dst_ip="163.226.190.159" src_port="443" dst_port="57919" proto="tcp"/>
        </slice>
        <from usec="0" sec="1639285504"/>
        <to usec="0" sec="1639285506"/>
    </anomaly>
    <anomaly type="notice" value="0.767316,2.12714,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.226.121.39" dst_ip="151.125.29.29" src_port="46890" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1639285667"/>
        <to usec="0" sec="1639285670"/>
    </anomaly>
    <anomaly type="notice" value="0.767316,2.12714,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="52.127.108.216" dst_ip="163.226.90.129" src_port="443" dst_port="38248" proto="tcp"/>
        </slice>
        <from usec="0" sec="1639285233"/>
        <to usec="0" sec="1639285234"/>
    </anomaly>
    <anomaly type="notice" value="0.767316,2.12714,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="54.57.255.46" dst_ip="163.226.181.74" src_port="443" dst_port="63763" proto="tcp"/>
        </slice>
        <from usec="0" sec="1639285512"/>
        <to usec="0" sec="1639285513"/>
    </anomaly>
    <anomaly type="notice" value="0.767316,2.12714,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.11.111.70" dst_ip="113.26.118.107" src_port="53401" dst_port="35529" proto="udp"/>
        </slice>
        <from usec="0" sec="1639285502"/>
        <to usec="0" sec="1639285503"/>
    </anomaly>
    <anomaly type="notice" value="0.767316,2.12714,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="47.147.116.63" dst_ip="31.13.93.81" src_port="57013" dst_port="443" proto="udp"/>
        </slice>
        <from usec="0" sec="1639285992"/>
        <to usec="0" sec="1639285994"/>
    </anomaly>
    <anomaly type="notice" value="0.767316,2.12714,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.172.38.231" dst_ip="20.210.84.248" src_port="55946" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1639285222"/>
        <to usec="0" sec="1639285377"/>
    </anomaly>
    <anomaly type="notice" value="0.767316,2.12714,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="13.137.164.222" dst_ip="163.226.180.100" src_port="443" dst_port="60595" proto="tcp"/>
        </slice>
        <from usec="0" sec="1639285656"/>
        <to usec="0" sec="1639285657"/>
    </anomaly>
    <anomaly type="notice" value="0.767316,2.12714,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="149.137.80.73" dst_ip="163.226.98.219" src_port="8801" dst_port="62223" proto="udp"/>
        </slice>
        <from usec="0" sec="1639286018"/>
        <to usec="0" sec="1639286020"/>
    </anomaly>
    <anomaly type="notice" value="0.767316,2.12714,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="157.88.218.94" dst_ip="203.216.113.246" src_port="35920" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1639285442"/>
        <to usec="0" sec="1639285444"/>
    </anomaly>
    <anomaly type="notice" value="0.767316,2.12714,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.226.82.53" dst_ip="185.146.74.98" src_port="52908" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1639285864"/>
        <to usec="0" sec="1639285866"/>
    </anomaly>
    <anomaly type="notice" value="0.767316,2.12714,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.226.63.199" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1639285896"/>
        <to usec="0" sec="1639285931"/>
    </anomaly>
    <anomaly type="notice" value="0.767316,2.12714,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="157.88.111.200" dst_ip="203.216.119.104" src_port="58185" dst_port="51517" proto="udp"/>
        </slice>
        <from usec="0" sec="1639285225"/>
        <to usec="0" sec="1639285321"/>
    </anomaly>
    <anomaly type="notice" value="0.767316,2.12714,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="198.72.38.33" dst_ip="163.226.40.104" src_port="8801" dst_port="63808" proto="udp"/>
        </slice>
        <from usec="0" sec="1639285232"/>
        <to usec="0" sec="1639286001"/>
    </anomaly>
    <anomaly type="notice" value="0.767316,2.12714,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="198.72.38.37" dst_ip="163.226.96.93" src_port="8801" dst_port="54119" proto="udp"/>
        </slice>
        <from usec="0" sec="1639285206"/>
        <to usec="0" sec="1639285879"/>
    </anomaly>
    <anomaly type="notice" value="0.767316,2.12714,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="157.88.55.7" dst_ip="8.209.99.13" src_port="59538" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1639285807"/>
        <to usec="0" sec="1639285809"/>
    </anomaly>
    <anomaly type="notice" value="0.767316,2.12714,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.11.109.163" dst_ip="162.130.220.122" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1639285380"/>
        <to usec="0" sec="1639285909"/>
    </anomaly>
    <anomaly type="notice" value="0.767316,2.12714,020,1 0 0 0 0 0 0 0 0 0 0 0,hostout">
        <slice>
            <filter src_ip="130.122.147.95" dst_ip="178.228.41.67" proto="icmp"/>
        </slice>
        <from usec="0" sec="1639285228"/>
        <to usec="0" sec="1639285229"/>
    </anomaly>
    <anomaly type="notice" value="0.767316,2.12714,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.216.123.35" dst_ip="52.124.46.137" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1639285222"/>
        <to usec="0" sec="1639286044"/>
    </anomaly>
    <anomaly type="notice" value="0.767316,2.12714,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.226.82.187"/>
        </slice>
        <from usec="0" sec="1639285741"/>
        <to usec="0" sec="1639285869"/>
    </anomaly>
    <anomaly type="notice" value="0.767316,2.12714,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="143.255.190.230" proto="icmp"/>
        </slice>
        <from usec="0" sec="1639285877"/>
        <to usec="0" sec="1639285880"/>
    </anomaly>
    <anomaly type="notice" value="0.767316,2.12714,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="61.158.169.131" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1639285804"/>
        <to usec="0" sec="1639285809"/>
    </anomaly>
    <anomaly type="notice" value="0.767316,2.12714,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="206.82.25.228" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1639285423"/>
        <to usec="0" sec="1639285424"/>
    </anomaly>
    <anomaly type="notice" value="0.767316,2.12714,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="112.130.11.177" dst_port="445" proto="tcp"/>
        </slice>
        <from usec="0" sec="1639285978"/>
        <to usec="0" sec="1639285981"/>
    </anomaly>
    <anomaly type="notice" value="0.767316,2.12714,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="121.29.227.228" dst_port="5900"/>
        </slice>
        <from usec="0" sec="1639286052"/>
        <to usec="0" sec="1639286054"/>
    </anomaly>
    <anomaly type="notice" value="0.767316,2.12714,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.201.113.225" proto="icmp"/>
        </slice>
        <from usec="0" sec="1639286030"/>
        <to usec="0" sec="1639286033"/>
    </anomaly>
    <anomaly type="notice" value="0.767316,2.12714,011,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="218.152.6.56" src_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1639286030"/>
        <to usec="0" sec="1639286031"/>
    </anomaly>
    <anomaly type="notice" value="0.767316,2.12714,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="129.201.190.225" proto="icmp"/>
        </slice>
        <from usec="0" sec="1639286005"/>
        <to usec="0" sec="1639286006"/>
    </anomaly>
    <anomaly type="notice" value="0.767316,2.12714,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="35.94.157.223"/>
        </slice>
        <from usec="0" sec="1639285855"/>
        <to usec="0" sec="1639285856"/>
    </anomaly>
    <anomaly type="notice" value="1.30917,2.11565,504,1 1 1 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.11.143.142" dst_ip="193.249.224.212" dst_port="443"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639286056"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.88.151.16" dst_ip="65.26.227.203" src_port="55188" dst_port="443"/>
        </slice>
        <from usec="0" sec="1639285394"/>
        <to usec="0" sec="1639285396"/>
    </anomaly>
    <anomaly type="notice" value="0.857904,2.05669,999,1 1 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.11.92.181"/>
        </slice>
        <from usec="0" sec="1639285265"/>
        <to usec="0" sec="1639286098"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="39.3.105.96" dst_ip="163.226.244.221" dst_port="80"/>
        </slice>
        <from usec="0" sec="1639285222"/>
        <to usec="0" sec="1639285881"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.11.111.4" dst_ip="151.228.152.151" src_port="52317" dst_port="443"/>
        </slice>
        <from usec="0" sec="1639285388"/>
        <to usec="0" sec="1639285389"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="157.88.253.142" dst_ip="162.81.207.176" src_port="61454" dst_port="9999"/>
        </slice>
        <from usec="0" sec="1639285329"/>
        <to usec="0" sec="1639285709"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="157.88.169.170" dst_ip="23.178.59.42" dst_port="443"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285563"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.88.163.183" dst_ip="8.209.72.1" src_port="55017" dst_port="80"/>
        </slice>
        <from usec="0" sec="1639285914"/>
        <to usec="0" sec="1639285916"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.11.246.12" dst_ip="60.243.193.250" src_port="53156" dst_port="16406"/>
        </slice>
        <from usec="0" sec="1639285463"/>
        <to usec="0" sec="1639285465"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="157.88.12.4" dst_ip="52.100.54.56" src_port="44061" dst_port="443"/>
        </slice>
        <from usec="0" sec="1639285400"/>
        <to usec="0" sec="1639286094"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,503,1 1 0 0 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="157.88.182.56" dst_ip="188.94.174.67" dst_port="80"/>
        </slice>
        <from usec="0" sec="1639285355"/>
        <to usec="0" sec="1639285357"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="157.88.16.244"/>
        </slice>
        <from usec="0" sec="1639285493"/>
        <to usec="0" sec="1639285496"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="139.170.153.102"/>
        </slice>
        <from usec="0" sec="1639285380"/>
        <to usec="0" sec="1639286001"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.201.120.24"/>
        </slice>
        <from usec="0" sec="1639285897"/>
        <to usec="0" sec="1639285901"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.201.116.128"/>
        </slice>
        <from usec="0" sec="1639286049"/>
        <to usec="0" sec="1639286052"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.201.166.103"/>
        </slice>
        <from usec="0" sec="1639285441"/>
        <to usec="0" sec="1639285880"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="151.119.174.129"/>
        </slice>
        <from usec="0" sec="1639285893"/>
        <to usec="0" sec="1639285896"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.201.175.126"/>
        </slice>
        <from usec="0" sec="1639285702"/>
        <to usec="0" sec="1639285968"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="151.119.170.24"/>
        </slice>
        <from usec="0" sec="1639285682"/>
        <to usec="0" sec="1639285686"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.201.184.102"/>
        </slice>
        <from usec="0" sec="1639285714"/>
        <to usec="0" sec="1639285718"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.201.188.135"/>
        </slice>
        <from usec="0" sec="1639285782"/>
        <to usec="0" sec="1639286085"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.201.190.225"/>
        </slice>
        <from usec="0" sec="1639285366"/>
        <to usec="0" sec="1639285604"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.201.249.97"/>
        </slice>
        <from usec="0" sec="1639285320"/>
        <to usec="0" sec="1639285323"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="139.170.152.158"/>
        </slice>
        <from usec="0" sec="1639285350"/>
        <to usec="0" sec="1639285353"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.201.103.102"/>
        </slice>
        <from usec="0" sec="1639285581"/>
        <to usec="0" sec="1639285682"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.201.107.6"/>
        </slice>
        <from usec="0" sec="1639285249"/>
        <to usec="0" sec="1639285765"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.201.123.121"/>
        </slice>
        <from usec="0" sec="1639285456"/>
        <to usec="0" sec="1639285563"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.201.163.25"/>
        </slice>
        <from usec="0" sec="1639285660"/>
        <to usec="0" sec="1639285986"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.201.172.224"/>
        </slice>
        <from usec="0" sec="1639286052"/>
        <to usec="0" sec="1639286056"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.201.183.102"/>
        </slice>
        <from usec="0" sec="1639285295"/>
        <to usec="0" sec="1639285298"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.20.158.21" dst_port="5351"/>
        </slice>
        <from usec="0" sec="1639285475"/>
        <to usec="0" sec="1639285520"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="42.104.35.113" dst_port="445"/>
        </slice>
        <from usec="0" sec="1639285877"/>
        <to usec="0" sec="1639285883"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="49.151.82.26" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1639285868"/>
        <to usec="0" sec="1639285870"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="185.44.116.140" dst_port="445"/>
        </slice>
        <from usec="0" sec="1639285426"/>
        <to usec="0" sec="1639285432"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.126.96.154" dst_port="5351"/>
        </slice>
        <from usec="0" sec="1639285837"/>
        <to usec="0" sec="1639285843"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="5.116.21.252" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1639285480"/>
        <to usec="0" sec="1639285481"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="91.115.69.161" dst_port="5351"/>
        </slice>
        <from usec="0" sec="1639285242"/>
        <to usec="0" sec="1639286061"/>
    </anomaly>
    <anomaly type="notice" value="1.30917,2.11565,012,1 1 1 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="39.179.183.32" dst_port="6379"/>
            <filter src_ip="111.151.195.89" dst_port="6379"/>
            <filter src_ip="121.68.160.4" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1639285203"/>
        <to usec="0" sec="1639285672"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="58.146.112.214" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1639285582"/>
        <to usec="0" sec="1639285584"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.201.99.96"/>
        </slice>
        <from usec="0" sec="1639285822"/>
        <to usec="0" sec="1639286049"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="39.23.91.71" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1639285835"/>
        <to usec="0" sec="1639285840"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="218.152.6.56" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1639286030"/>
        <to usec="0" sec="1639286032"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="60.21.121.196" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1639285232"/>
        <to usec="0" sec="1639285233"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="58.154.118.193" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1639285852"/>
        <to usec="0" sec="1639285854"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="58.31.219.221" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1639285817"/>
        <to usec="0" sec="1639285818"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="124.179.191.173" dst_port="445"/>
        </slice>
        <from usec="0" sec="1639285551"/>
        <to usec="0" sec="1639285554"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="124.88.130.126" dst_port="1433"/>
            <filter src_ip="124.88.130.126" dst_port="445"/>
        </slice>
        <from usec="0" sec="1639286046"/>
        <to usec="0" sec="1639286052"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="124.119.150.125" dst_port="445"/>
        </slice>
        <from usec="0" sec="1639286080"/>
        <to usec="0" sec="1639286083"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="122.91.189.11" dst_port="445"/>
        </slice>
        <from usec="0" sec="1639285455"/>
        <to usec="0" sec="1639285456"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="223.36.241.104" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1639286081"/>
        <to usec="0" sec="1639286082"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="71.6.232.243" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1639285887"/>
        <to usec="0" sec="1639285888"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="27.33.110.95" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1639285398"/>
        <to usec="0" sec="1639285400"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="27.33.110.86" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1639285398"/>
        <to usec="0" sec="1639285400"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="27.33.110.85" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1639285398"/>
        <to usec="0" sec="1639285400"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="27.90.231.172" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1639285961"/>
        <to usec="0" sec="1639285965"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="170.45.64.73" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1639285998"/>
        <to usec="0" sec="1639286044"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,999,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="81.123.74.76" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1639285818"/>
        <to usec="0" sec="1639285820"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="27.235.6.67" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1639285623"/>
        <to usec="0" sec="1639285625"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="34.67.165.179" dst_port="443"/>
        </slice>
        <from usec="0" sec="1639285752"/>
        <to usec="0" sec="1639285754"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,010,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="151.239.254.190" dst_port="445"/>
            <filter src_ip="151.239.254.190" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1639285792"/>
        <to usec="0" sec="1639285796"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,010,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="120.20.27.211" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1639285733"/>
        <to usec="0" sec="1639286089"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="50.7.68.30" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1639285612"/>
        <to usec="0" sec="1639285613"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="94.167.23.240" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1639285514"/>
        <to usec="0" sec="1639285791"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="45.164.13.221" dst_port="445"/>
        </slice>
        <from usec="0" sec="1639286051"/>
        <to usec="0" sec="1639286054"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="103.85.152.36" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1639285979"/>
        <to usec="0" sec="1639285983"/>
    </anomaly>
    <anomaly type="notice" value="1.30917,2.11565,010,1 1 1 1 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="139.251.178.44" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285668"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="171.55.88.62" dst_port="445"/>
            <filter src_ip="171.55.88.62" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1639285970"/>
        <to usec="0" sec="1639285976"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="170.150.252.196" dst_port="5351"/>
        </slice>
        <from usec="0" sec="1639285334"/>
        <to usec="0" sec="1639285811"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.85.30.53" dst_port="5351"/>
        </slice>
        <from usec="0" sec="1639285469"/>
        <to usec="0" sec="1639285470"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="188.147.172.6" dst_port="5351"/>
        </slice>
        <from usec="0" sec="1639285400"/>
        <to usec="0" sec="1639285401"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="139.170.159.120"/>
        </slice>
        <from usec="0" sec="1639285349"/>
        <to usec="0" sec="1639286023"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="139.170.157.120"/>
        </slice>
        <from usec="0" sec="1639285855"/>
        <to usec="0" sec="1639285858"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="180.131.150.199"/>
        </slice>
        <from usec="0" sec="1639285510"/>
        <to usec="0" sec="1639285850"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.201.102.127"/>
        </slice>
        <from usec="0" sec="1639285907"/>
        <to usec="0" sec="1639285910"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="139.170.146.152"/>
        </slice>
        <from usec="0" sec="1639285615"/>
        <to usec="0" sec="1639285618"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.201.126.128"/>
        </slice>
        <from usec="0" sec="1639285976"/>
        <to usec="0" sec="1639285979"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="204.194.1.222"/>
        </slice>
        <from usec="0" sec="1639285530"/>
        <to usec="0" sec="1639285533"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.201.114.225"/>
        </slice>
        <from usec="0" sec="1639285291"/>
        <to usec="0" sec="1639285294"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="151.119.161.120"/>
        </slice>
        <from usec="0" sec="1639285306"/>
        <to usec="0" sec="1639285309"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="151.119.191.31"/>
        </slice>
        <from usec="0" sec="1639286016"/>
        <to usec="0" sec="1639286020"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="133.11.68.69"/>
        </slice>
        <from usec="0" sec="1639285470"/>
        <to usec="0" sec="1639285473"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.201.244.152"/>
        </slice>
        <from usec="0" sec="1639285430"/>
        <to usec="0" sec="1639285611"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,999,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="198.127.23.226" src_port="6379"/>
        </slice>
        <from usec="0" sec="1639286011"/>
        <to usec="0" sec="1639286023"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,011,1 1 1 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="71.6.216.232" src_port="6379"/>
        </slice>
        <from usec="0" sec="1639285658"/>
        <to usec="0" sec="1639285660"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,011,1 1 1 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="111.151.195.89" src_port="6379"/>
        </slice>
        <from usec="0" sec="1639285536"/>
        <to usec="0" sec="1639285537"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,011,1 1 1 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="39.179.183.32" src_port="6379"/>
        </slice>
        <from usec="0" sec="1639285568"/>
        <to usec="0" sec="1639285569"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,011,1 1 1 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="81.123.74.76" src_port="6379"/>
        </slice>
        <from usec="0" sec="1639285818"/>
        <to usec="0" sec="1639285820"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,011,1 1 1 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="39.180.224.176" src_port="6379"/>
        </slice>
        <from usec="0" sec="1639285691"/>
        <to usec="0" sec="1639285693"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,011,1 1 1 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="120.20.27.211" src_port="6379"/>
        </slice>
        <from usec="0" sec="1639285733"/>
        <to usec="0" sec="1639285735"/>
    </anomaly>
    <anomaly type="notice" value="1.39872,2.16707,011,1 1 1 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="121.68.160.4" src_port="6379"/>
        </slice>
        <from usec="0" sec="1639285513"/>
        <to usec="0" sec="1639285514"/>
    </anomaly>
    <anomaly type="notice" value="0.989186,2.10954,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="27.33.110.93" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1639285398"/>
        <to usec="0" sec="1639285400"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.4.190.163"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285304"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.4.140.159"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285308"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.216.119.213"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285307"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="185.168.180.152"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285283"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="126.77.161.247"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285308"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="167.145.138.249"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285303"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="130.122.159.18"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285394"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="133.246.90.251"/>
        </slice>
        <from usec="0" sec="1639285202"/>
        <to usec="0" sec="1639285306"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="167.23.101.70"/>
        </slice>
        <from usec="0" sec="1639285204"/>
        <to usec="0" sec="1639285305"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="206.81.232.80"/>
        </slice>
        <from usec="0" sec="1639285216"/>
        <to usec="0" sec="1639285233"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.226.90.129"/>
        </slice>
        <from usec="0" sec="1639285220"/>
        <to usec="0" sec="1639285306"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="34.209.143.236"/>
        </slice>
        <from usec="0" sec="1639285248"/>
        <to usec="0" sec="1639285267"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="13.112.253.71"/>
        </slice>
        <from usec="0" sec="1639285251"/>
        <to usec="0" sec="1639285307"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="5.227.226.191"/>
        </slice>
        <from usec="0" sec="1639285285"/>
        <to usec="0" sec="1639285298"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.226.45.9"/>
        </slice>
        <from usec="0" sec="1639285204"/>
        <to usec="0" sec="1639285395"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285668"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285668"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="17.95.78.10" dst_ip="163.226.96.244" src_port="443"/>
            <filter src_ip="17.15.83.104" dst_ip="163.226.96.244" src_port="443"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285488"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="54.112.129.124"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285485"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="13.102.229.122"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285477"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="111.7.25.22"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285488"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="45.6.128.73" src_port="5038" dst_port="43423"/>
            <filter dst_ip="45.6.128.73"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285488"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter dst_ip="52.108.235.36"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285488"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,002,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.165.38.127"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285488"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="119.169.31.108"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285488"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="157.206.106.37"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285484"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="82.12.17.179"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285488"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="80.72.27.131"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285666"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.184.181.193"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285484"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="52.124.79.101"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285488"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="52.233.4.127"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285488"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="185.33.172.253"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285440"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="162.14.61.28"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285488"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="183.75.14.35"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285467"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="119.139.9.170"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285487"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="54.158.225.236" dst_ip="163.226.153.36" src_port="443"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285488"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="162.14.61.27"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285488"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="54.42.130.252"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639285488"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="18.228.154.109"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639285488"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="84.225.40.193"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639285474"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.216.25.22"/>
        </slice>
        <from usec="0" sec="1639285202"/>
        <to usec="0" sec="1639285485"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.246.46.154"/>
        </slice>
        <from usec="0" sec="1639285203"/>
        <to usec="0" sec="1639285487"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="113.240.0.9"/>
        </slice>
        <from usec="0" sec="1639285203"/>
        <to usec="0" sec="1639285488"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="35.75.212.204"/>
        </slice>
        <from usec="0" sec="1639285204"/>
        <to usec="0" sec="1639285485"/>
    </anomaly>
    <anomaly type="notice" value="0.588458,2.07473,504,1 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="133.11.91.184" dst_ip="54.106.110.194" src_port="57230" dst_port="443"/>
            <filter src_ip="130.122.166.228" dst_ip="54.106.110.194" src_port="49334" dst_port="443"/>
        </slice>
        <from usec="0" sec="1639285204"/>
        <to usec="0" sec="1639285697"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="222.251.224.221"/>
        </slice>
        <from usec="0" sec="1639285204"/>
        <to usec="0" sec="1639285486"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="109.211.32.219"/>
        </slice>
        <from usec="0" sec="1639285205"/>
        <to usec="0" sec="1639285755"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="143.179.81.75"/>
        </slice>
        <from usec="0" sec="1639285205"/>
        <to usec="0" sec="1639285446"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="44.16.66.94"/>
        </slice>
        <from usec="0" sec="1639285206"/>
        <to usec="0" sec="1639285485"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.226.76.54"/>
        </slice>
        <from usec="0" sec="1639285209"/>
        <to usec="0" sec="1639285465"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.11.90.152" dst_port="53"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285929"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,501,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.88.253.96"/>
        </slice>
        <from usec="0" sec="1639285222"/>
        <to usec="0" sec="1639285463"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="185.42.240.204"/>
        </slice>
        <from usec="0" sec="1639285251"/>
        <to usec="0" sec="1639285469"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="104.80.139.166"/>
        </slice>
        <from usec="0" sec="1639285266"/>
        <to usec="0" sec="1639285358"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="44.26.233.239"/>
        </slice>
        <from usec="0" sec="1639285275"/>
        <to usec="0" sec="1639285456"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="34.222.59.245"/>
        </slice>
        <from usec="0" sec="1639285293"/>
        <to usec="0" sec="1639285352"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="113.240.0.218"/>
        </slice>
        <from usec="0" sec="1639285295"/>
        <to usec="0" sec="1639285350"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="35.226.83.213"/>
        </slice>
        <from usec="0" sec="1639285309"/>
        <to usec="0" sec="1639285427"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.26.199.39"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639286028"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="34.194.255.104"/>
        </slice>
        <from usec="0" sec="1639285354"/>
        <to usec="0" sec="1639285413"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="82.12.17.179"/>
        </slice>
        <from usec="0" sec="1639285401"/>
        <to usec="0" sec="1639285458"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="46.93.35.2"/>
        </slice>
        <from usec="0" sec="1639285403"/>
        <to usec="0" sec="1639285488"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="18.224.168.218"/>
        </slice>
        <from usec="0" sec="1639285407"/>
        <to usec="0" sec="1639285653"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="104.120.109.152"/>
        </slice>
        <from usec="0" sec="1639285413"/>
        <to usec="0" sec="1639285449"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICecrqICecrqdurmterp">
        <slice>
            <filter dst_ip="61.134.26.74"/>
        </slice>
        <from usec="0" sec="1639285425"/>
        <to usec="0" sec="1639285488"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="165.104.156.190"/>
        </slice>
        <from usec="0" sec="1639285465"/>
        <to usec="0" sec="1639285487"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="143.179.81.152"/>
        </slice>
        <from usec="0" sec="1639285470"/>
        <to usec="0" sec="1639285472"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="146.147.27.216"/>
        </slice>
        <from usec="0" sec="1639285471"/>
        <to usec="0" sec="1639285480"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="162.130.220.122" dst_ip="133.11.109.163" dst_port="443"/>
            <filter src_ip="163.226.68.216" dst_ip="133.11.109.163" dst_port="443"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285578"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="187.249.200.186"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285936"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="61.155.211.8"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285578"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="125.193.43.69"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285566"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.246.199.249"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285471"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="162.91.49.15"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639285848"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="91.73.111.33"/>
        </slice>
        <from usec="0" sec="1639285202"/>
        <to usec="0" sec="1639285574"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="168.102.32.47"/>
        </slice>
        <from usec="0" sec="1639285202"/>
        <to usec="0" sec="1639285575"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="163.226.223.229"/>
        </slice>
        <from usec="0" sec="1639285202"/>
        <to usec="0" sec="1639285578"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.4.191.121"/>
        </slice>
        <from usec="0" sec="1639285202"/>
        <to usec="0" sec="1639285576"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="82.12.17.179"/>
        </slice>
        <from usec="0" sec="1639285206"/>
        <to usec="0" sec="1639285406"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.226.39.240"/>
        </slice>
        <from usec="0" sec="1639285208"/>
        <to usec="0" sec="1639285573"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="3.242.191.151"/>
        </slice>
        <from usec="0" sec="1639285209"/>
        <to usec="0" sec="1639285666"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.246.101.52"/>
        </slice>
        <from usec="0" sec="1639285209"/>
        <to usec="0" sec="1639285570"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="68.211.49.111"/>
        </slice>
        <from usec="0" sec="1639285215"/>
        <to usec="0" sec="1639285520"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="18.65.228.247"/>
        </slice>
        <from usec="0" sec="1639285246"/>
        <to usec="0" sec="1639285488"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="106.180.98.114"/>
        </slice>
        <from usec="0" sec="1639285290"/>
        <to usec="0" sec="1639285446"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="187.100.132.59"/>
        </slice>
        <from usec="0" sec="1639285349"/>
        <to usec="0" sec="1639285560"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="59.160.88.231"/>
        </slice>
        <from usec="0" sec="1639285353"/>
        <to usec="0" sec="1639285497"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="95.101.83.234"/>
        </slice>
        <from usec="0" sec="1639285562"/>
        <to usec="0" sec="1639285570"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="99.86.103.170"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285666"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="167.145.158.242"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285668"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="117.234.44.205" dst_ip="203.216.123.19" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285663"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="167.145.158.251"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285668"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="49.152.176.161"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285667"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="167.23.101.104"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285668"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.226.62.93"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285662"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="167.145.157.3"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285668"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="75.251.197.14"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285661"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="144.248.242.229"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285842"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="162.14.61.164"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639285667"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="47.76.244.96" src_port="34892"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639285666"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="35.176.60.129"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639285666"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="114.206.186.81"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639285665"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.184.181.164"/>
        </slice>
        <from usec="0" sec="1639285202"/>
        <to usec="0" sec="1639285668"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="163.226.24.255"/>
        </slice>
        <from usec="0" sec="1639285203"/>
        <to usec="0" sec="1639285661"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.88.121.215"/>
        </slice>
        <from usec="0" sec="1639285203"/>
        <to usec="0" sec="1639285648"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="218.240.48.69"/>
        </slice>
        <from usec="0" sec="1639285205"/>
        <to usec="0" sec="1639285623"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.226.52.15"/>
        </slice>
        <from usec="0" sec="1639285205"/>
        <to usec="0" sec="1639285664"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="128.129.254.215"/>
        </slice>
        <from usec="0" sec="1639285205"/>
        <to usec="0" sec="1639285664"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.226.117.2"/>
        </slice>
        <from usec="0" sec="1639285206"/>
        <to usec="0" sec="1639285668"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="112.115.73.91"/>
        </slice>
        <from usec="0" sec="1639285207"/>
        <to usec="0" sec="1639285503"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="17.84.166.114"/>
        </slice>
        <from usec="0" sec="1639285207"/>
        <to usec="0" sec="1639285523"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="35.234.105.123"/>
        </slice>
        <from usec="0" sec="1639285207"/>
        <to usec="0" sec="1639285655"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.11.246.203"/>
        </slice>
        <from usec="0" sec="1639285209"/>
        <to usec="0" sec="1639285668"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="116.206.78.38"/>
        </slice>
        <from usec="0" sec="1639285210"/>
        <to usec="0" sec="1639285668"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="52.181.88.21"/>
        </slice>
        <from usec="0" sec="1639285210"/>
        <to usec="0" sec="1639285668"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="185.184.173.170"/>
        </slice>
        <from usec="0" sec="1639285210"/>
        <to usec="0" sec="1639285660"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="5.194.179.216"/>
        </slice>
        <from usec="0" sec="1639285211"/>
        <to usec="0" sec="1639285668"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="163.226.201.96"/>
        </slice>
        <from usec="0" sec="1639285211"/>
        <to usec="0" sec="1639285664"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="163.226.93.120"/>
        </slice>
        <from usec="0" sec="1639285211"/>
        <to usec="0" sec="1639285660"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="163.226.229.37"/>
        </slice>
        <from usec="0" sec="1639285211"/>
        <to usec="0" sec="1639285660"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="218.205.203.19"/>
        </slice>
        <from usec="0" sec="1639285212"/>
        <to usec="0" sec="1639285651"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="130.122.189.26" dst_ip="138.94.236.122" src_port="23"/>
        </slice>
        <from usec="0" sec="1639285212"/>
        <to usec="0" sec="1639285668"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="168.104.118.77"/>
        </slice>
        <from usec="0" sec="1639285212"/>
        <to usec="0" sec="1639285561"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="3.147.160.158"/>
        </slice>
        <from usec="0" sec="1639285215"/>
        <to usec="0" sec="1639285743"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="34.200.37.18"/>
        </slice>
        <from usec="0" sec="1639285222"/>
        <to usec="0" sec="1639285658"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="34.254.252.198"/>
        </slice>
        <from usec="0" sec="1639285224"/>
        <to usec="0" sec="1639285666"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="104.120.110.193"/>
        </slice>
        <from usec="0" sec="1639285233"/>
        <to usec="0" sec="1639285598"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="23.167.14.30"/>
        </slice>
        <from usec="0" sec="1639285237"/>
        <to usec="0" sec="1639285629"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="157.88.16.244"/>
        </slice>
        <from usec="0" sec="1639285203"/>
        <to usec="0" sec="1639285668"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="161.77.38.150"/>
        </slice>
        <from usec="0" sec="1639285250"/>
        <to usec="0" sec="1639285594"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="99.84.91.106"/>
        </slice>
        <from usec="0" sec="1639285260"/>
        <to usec="0" sec="1639285580"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="99.84.218.255"/>
        </slice>
        <from usec="0" sec="1639285262"/>
        <to usec="0" sec="1639285585"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="54.70.112.247"/>
        </slice>
        <from usec="0" sec="1639285263"/>
        <to usec="0" sec="1639285668"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="18.222.94.120"/>
        </slice>
        <from usec="0" sec="1639285343"/>
        <to usec="0" sec="1639285555"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="54.20.50.255"/>
        </slice>
        <from usec="0" sec="1639285375"/>
        <to usec="0" sec="1639285641"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="40.183.157.210"/>
        </slice>
        <from usec="0" sec="1639285414"/>
        <to usec="0" sec="1639285666"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="69.182.225.21"/>
        </slice>
        <from usec="0" sec="1639285453"/>
        <to usec="0" sec="1639285514"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="23.191.186.70"/>
        </slice>
        <from usec="0" sec="1639285458"/>
        <to usec="0" sec="1639285563"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="87.247.224.221"/>
        </slice>
        <from usec="0" sec="1639285460"/>
        <to usec="0" sec="1639285566"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="222.201.85.19"/>
        </slice>
        <from usec="0" sec="1639285509"/>
        <to usec="0" sec="1639285596"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="126.147.167.199"/>
        </slice>
        <from usec="0" sec="1639285550"/>
        <to usec="0" sec="1639285571"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="18.131.212.15"/>
        </slice>
        <from usec="0" sec="1639285552"/>
        <to usec="0" sec="1639285580"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.11.57.9"/>
        </slice>
        <from usec="0" sec="1639285572"/>
        <to usec="0" sec="1639285651"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="143.179.81.16"/>
        </slice>
        <from usec="0" sec="1639285593"/>
        <to usec="0" sec="1639285606"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="167.23.101.17"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285758"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.88.107.120"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285651"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="162.91.48.172"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285745"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="173.153.149.237"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285757"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="167.23.101.101"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285758"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.4.189.184" dst_port="50348"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285758"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.11.223.202" src_port="6889"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285758"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.24.239.72"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285755"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="205.169.8.20" dst_port="22"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285724"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="138.94.236.125"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285717"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.11.97.117"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285754"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="14.118.159.190"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639285748"/>
    </anomaly>
    <anomaly type="notice" value="1.30917,2.11565,999,1 1 1 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.88.142.49" dst_port="53"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285930"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.11.129.228"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639285752"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="34.215.84.252" dst_ip="163.226.180.60" src_port="443"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639285758"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="8.216.178.75"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639285753"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="180.157.78.94"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639285749"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="5.44.238.7"/>
        </slice>
        <from usec="0" sec="1639285202"/>
        <to usec="0" sec="1639285758"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="163.226.222.225"/>
        </slice>
        <from usec="0" sec="1639285202"/>
        <to usec="0" sec="1639285758"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="157.88.97.100" src_port="25"/>
            <filter src_ip="157.88.97.100" dst_port="443"/>
            <filter src_ip="133.24.248.159" dst_ip="198.28.247.61" dst_port="443"/>
        </slice>
        <from usec="0" sec="1639285202"/>
        <to usec="0" sec="1639285842"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.216.126.20" dst_port="443"/>
        </slice>
        <from usec="0" sec="1639285202"/>
        <to usec="0" sec="1639285758"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="146.212.96.238"/>
        </slice>
        <from usec="0" sec="1639285202"/>
        <to usec="0" sec="1639285630"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.184.181.99"/>
        </slice>
        <from usec="0" sec="1639285202"/>
        <to usec="0" sec="1639285752"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="157.181.170.62"/>
        </slice>
        <from usec="0" sec="1639285202"/>
        <to usec="0" sec="1639285754"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.226.43.247"/>
        </slice>
        <from usec="0" sec="1639285203"/>
        <to usec="0" sec="1639285758"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="123.62.130.177"/>
        </slice>
        <from usec="0" sec="1639285203"/>
        <to usec="0" sec="1639285752"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.88.234.144"/>
        </slice>
        <from usec="0" sec="1639285203"/>
        <to usec="0" sec="1639285753"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="40.136.243.73"/>
        </slice>
        <from usec="0" sec="1639285203"/>
        <to usec="0" sec="1639285758"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="18.212.105.244"/>
        </slice>
        <from usec="0" sec="1639285203"/>
        <to usec="0" sec="1639285741"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="17.84.161.1"/>
        </slice>
        <from usec="0" sec="1639285204"/>
        <to usec="0" sec="1639285755"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="116.206.175.228"/>
        </slice>
        <from usec="0" sec="1639285204"/>
        <to usec="0" sec="1639285753"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="163.226.87.102"/>
        </slice>
        <from usec="0" sec="1639285204"/>
        <to usec="0" sec="1639285753"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.139.12.87"/>
        </slice>
        <from usec="0" sec="1639285205"/>
        <to usec="0" sec="1639285752"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="170.133.104.111"/>
        </slice>
        <from usec="0" sec="1639285205"/>
        <to usec="0" sec="1639285758"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="34.193.60.248"/>
        </slice>
        <from usec="0" sec="1639285205"/>
        <to usec="0" sec="1639285757"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="117.194.63.243"/>
        </slice>
        <from usec="0" sec="1639285206"/>
        <to usec="0" sec="1639285757"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="123.217.226.104"/>
        </slice>
        <from usec="0" sec="1639285208"/>
        <to usec="0" sec="1639285758"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="93.184.153.185"/>
        </slice>
        <from usec="0" sec="1639285209"/>
        <to usec="0" sec="1639285750"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.197.216.166"/>
        </slice>
        <from usec="0" sec="1639285213"/>
        <to usec="0" sec="1639285658"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="140.207.149.138"/>
        </slice>
        <from usec="0" sec="1639285214"/>
        <to usec="0" sec="1639285748"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="61.2.4.212"/>
        </slice>
        <from usec="0" sec="1639285215"/>
        <to usec="0" sec="1639285753"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.195.224.241"/>
        </slice>
        <from usec="0" sec="1639285220"/>
        <to usec="0" sec="1639285752"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="13.103.41.183" src_port="57723" dst_port="23"/>
            <filter src_ip="13.103.41.183" src_port="55115" dst_port="23"/>
        </slice>
        <from usec="0" sec="1639285222"/>
        <to usec="0" sec="1639285758"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,012,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="23.253.30.102"/>
        </slice>
        <from usec="0" sec="1639285224"/>
        <to usec="0" sec="1639285757"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="18.65.228.154"/>
        </slice>
        <from usec="0" sec="1639285227"/>
        <to usec="0" sec="1639285757"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="114.132.133.22"/>
        </slice>
        <from usec="0" sec="1639285231"/>
        <to usec="0" sec="1639285752"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="163.226.25.70"/>
        </slice>
        <from usec="0" sec="1639285234"/>
        <to usec="0" sec="1639285733"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="45.142.50.89"/>
        </slice>
        <from usec="0" sec="1639285238"/>
        <to usec="0" sec="1639285746"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="13.118.58.83"/>
        </slice>
        <from usec="0" sec="1639285241"/>
        <to usec="0" sec="1639285741"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="5.45.154.10"/>
        </slice>
        <from usec="0" sec="1639285246"/>
        <to usec="0" sec="1639285755"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="116.170.243.212"/>
        </slice>
        <from usec="0" sec="1639285292"/>
        <to usec="0" sec="1639285684"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="116.170.195.194"/>
        </slice>
        <from usec="0" sec="1639285310"/>
        <to usec="0" sec="1639285755"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="104.235.254.158"/>
        </slice>
        <from usec="0" sec="1639285338"/>
        <to usec="0" sec="1639285745"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="95.105.218.10"/>
        </slice>
        <from usec="0" sec="1639285339"/>
        <to usec="0" sec="1639285583"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.11.63.143"/>
        </slice>
        <from usec="0" sec="1639285416"/>
        <to usec="0" sec="1639285613"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="47.78.234.245"/>
        </slice>
        <from usec="0" sec="1639285530"/>
        <to usec="0" sec="1639285742"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="138.250.104.123"/>
        </slice>
        <from usec="0" sec="1639285590"/>
        <to usec="0" sec="1639285758"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="185.24.42.200"/>
        </slice>
        <from usec="0" sec="1639285663"/>
        <to usec="0" sec="1639285757"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="35.75.155.169"/>
        </slice>
        <from usec="0" sec="1639285699"/>
        <to usec="0" sec="1639285748"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="161.125.37.151"/>
        </slice>
        <from usec="0" sec="1639285704"/>
        <to usec="0" sec="1639285742"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.226.183.60" src_port="443"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285848"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.24.83.186"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285844"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="167.145.138.145"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285848"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="3.180.225.15"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285848"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="163.226.223.231"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285847"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="101.223.63.136"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285812"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.88.16.241"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285806"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="1.6.224.128" dst_ip="203.216.112.249" src_port="53"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285824"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="139.191.92.181"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285847"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="183.220.126.18"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285846"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="66.16.212.101" src_port="29011"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285989"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="157.88.110.24" dst_ip="165.126.212.124"/>
            <filter src_ip="157.88.110.24" dst_port="443"/>
            <filter dst_ip="165.126.212.124" dst_port="443"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285847"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,502,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="157.88.131.66" dst_ip="137.184.84.101" src_port="22"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285848"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="180.157.78.233" dst_port="10001"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285840"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="161.37.183.13" src_port="15320" dst_port="443"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285848"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="52.199.67.139" dst_ip="163.226.43.250" src_port="9930"/>
            <filter src_ip="52.195.171.248" dst_ip="163.226.43.250" src_port="9930"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285848"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="99.83.126.154"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285848"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="183.220.161.254"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285845"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="131.130.106.24" src_port="5900"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639286026"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="137.184.1.241" src_port="32767" dst_port="28082"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285848"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.216.113.169" dst_port="443"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285848"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="101.75.157.229"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285844"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="61.163.22.133"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639286027"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="154.31.31.92"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285847"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.88.218.94"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285842"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="120.215.20.254" dst_ip="133.4.190.252" dst_port="2222"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639285848"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="34.66.62.249" dst_port="27017"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639285843"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="52.183.69.232"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639285847"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="140.241.203.64"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639285935"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.184.181.105"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639285848"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="38.107.39.241"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639285754"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter dst_ip="24.254.209.201"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639285848"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.88.97.250"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639285842"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="52.226.81.117"/>
        </slice>
        <from usec="0" sec="1639285202"/>
        <to usec="0" sec="1639285824"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="108.232.65.50"/>
        </slice>
        <from usec="0" sec="1639285202"/>
        <to usec="0" sec="1639285846"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="217.161.155.94"/>
        </slice>
        <from usec="0" sec="1639285202"/>
        <to usec="0" sec="1639285831"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.184.181.173"/>
        </slice>
        <from usec="0" sec="1639285202"/>
        <to usec="0" sec="1639285848"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="54.64.239.199"/>
        </slice>
        <from usec="0" sec="1639285202"/>
        <to usec="0" sec="1639285843"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="212.185.100.219"/>
        </slice>
        <from usec="0" sec="1639285202"/>
        <to usec="0" sec="1639285842"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="212.120.134.76"/>
        </slice>
        <from usec="0" sec="1639285203"/>
        <to usec="0" sec="1639285827"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="162.14.61.16"/>
        </slice>
        <from usec="0" sec="1639285204"/>
        <to usec="0" sec="1639285848"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="201.178.226.194"/>
        </slice>
        <from usec="0" sec="1639285204"/>
        <to usec="0" sec="1639285922"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="52.130.169.206"/>
        </slice>
        <from usec="0" sec="1639285204"/>
        <to usec="0" sec="1639285846"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.11.111.21" dst_ip="18.213.172.65" dst_port="443"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639285487"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.184.181.185"/>
        </slice>
        <from usec="0" sec="1639285205"/>
        <to usec="0" sec="1639285841"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="51.129.18.87"/>
        </slice>
        <from usec="0" sec="1639285205"/>
        <to usec="0" sec="1639285844"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="107.84.183.155"/>
        </slice>
        <from usec="0" sec="1639285205"/>
        <to usec="0" sec="1639285847"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="34.239.117.218"/>
        </slice>
        <from usec="0" sec="1639285205"/>
        <to usec="0" sec="1639285843"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.226.223.90"/>
        </slice>
        <from usec="0" sec="1639285205"/>
        <to usec="0" sec="1639285840"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="180.157.78.144"/>
        </slice>
        <from usec="0" sec="1639285206"/>
        <to usec="0" sec="1639285841"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="3.170.220.208"/>
        </slice>
        <from usec="0" sec="1639285206"/>
        <to usec="0" sec="1639285848"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="150.245.254.237"/>
        </slice>
        <from usec="0" sec="1639285207"/>
        <to usec="0" sec="1639285844"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="66.173.114.154"/>
        </slice>
        <from usec="0" sec="1639285208"/>
        <to usec="0" sec="1639285839"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="142.74.65.228"/>
        </slice>
        <from usec="0" sec="1639285209"/>
        <to usec="0" sec="1639285846"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="194.152.147.4"/>
        </slice>
        <from usec="0" sec="1639285209"/>
        <to usec="0" sec="1639285843"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="106.166.215.16"/>
        </slice>
        <from usec="0" sec="1639285210"/>
        <to usec="0" sec="1639285847"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.226.152.141"/>
        </slice>
        <from usec="0" sec="1639285211"/>
        <to usec="0" sec="1639285848"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="52.128.49.84"/>
        </slice>
        <from usec="0" sec="1639285211"/>
        <to usec="0" sec="1639285832"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="95.149.3.172"/>
        </slice>
        <from usec="0" sec="1639285220"/>
        <to usec="0" sec="1639285821"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="193.109.58.45"/>
        </slice>
        <from usec="0" sec="1639285223"/>
        <to usec="0" sec="1639285842"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="44.20.49.51"/>
        </slice>
        <from usec="0" sec="1639285234"/>
        <to usec="0" sec="1639285844"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="163.226.202.210"/>
        </slice>
        <from usec="0" sec="1639285275"/>
        <to usec="0" sec="1639285848"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="141.133.51.113"/>
        </slice>
        <from usec="0" sec="1639285307"/>
        <to usec="0" sec="1639285847"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="114.81.190.119"/>
        </slice>
        <from usec="0" sec="1639285386"/>
        <to usec="0" sec="1639285838"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="23.32.228.188"/>
        </slice>
        <from usec="0" sec="1639285403"/>
        <to usec="0" sec="1639285826"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="190.8.158.42"/>
        </slice>
        <from usec="0" sec="1639285485"/>
        <to usec="0" sec="1639285714"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="144.165.63.141"/>
        </slice>
        <from usec="0" sec="1639285516"/>
        <to usec="0" sec="1639285727"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="45.144.96.70"/>
        </slice>
        <from usec="0" sec="1639285540"/>
        <to usec="0" sec="1639285715"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.11.223.184"/>
        </slice>
        <from usec="0" sec="1639285594"/>
        <to usec="0" sec="1639285843"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="195.244.170.133"/>
        </slice>
        <from usec="0" sec="1639285629"/>
        <to usec="0" sec="1639285797"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.88.24.236"/>
        </slice>
        <from usec="0" sec="1639285640"/>
        <to usec="0" sec="1639285848"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.32.229.166"/>
        </slice>
        <from usec="0" sec="1639285714"/>
        <to usec="0" sec="1639285747"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="159.121.56.186"/>
        </slice>
        <from usec="0" sec="1639285732"/>
        <to usec="0" sec="1639285836"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="148.36.60.141"/>
        </slice>
        <from usec="0" sec="1639285734"/>
        <to usec="0" sec="1639285847"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="52.158.17.255"/>
        </slice>
        <from usec="0" sec="1639285766"/>
        <to usec="0" sec="1639285834"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="143.179.82.146"/>
        </slice>
        <from usec="0" sec="1639285809"/>
        <to usec="0" sec="1639285812"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="117.146.189.48"/>
        </slice>
        <from usec="0" sec="1639285842"/>
        <to usec="0" sec="1639285846"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.226.133.62"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285938"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="218.237.61.251"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285938"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.216.127.227" dst_port="443"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285938"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="5.44.54.27"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285914"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.226.25.174"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285930"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="180.157.78.235" dst_port="10001"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285934"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,502,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="203.216.118.61" dst_ip="134.149.99.80"/>
            <filter src_ip="203.216.118.61" src_port="22"/>
            <filter dst_ip="134.149.99.80" src_port="22"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285938"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="44.58.222.168"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285938"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.172.32.90" dst_ip="52.40.247.229" dst_port="443"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639286027"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="157.88.226.168"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285918"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="194.156.208.145"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285938"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="76.225.120.67" dst_ip="163.226.68.167" src_port="443"/>
            <filter src_ip="13.136.98.76" dst_ip="163.226.68.167" src_port="443"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285938"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="54.132.95.50"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285931"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter dst_ip="211.19.104.29"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285937"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="161.77.187.151"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285936"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.88.163.228" src_port="53"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285938"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="17.84.166.178"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639285937"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.226.26.209"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639285937"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="146.214.70.236"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639285933"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.88.218.94"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639285930"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="154.92.224.5"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639285938"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="101.75.132.155"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639285937"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="52.122.220.36"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639285937"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="51.129.18.91"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639285933"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="130.206.91.109"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639285934"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="85.87.116.173"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639285938"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="5.171.225.194"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639285930"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.226.44.72"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639285936"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.184.181.149"/>
        </slice>
        <from usec="0" sec="1639285202"/>
        <to usec="0" sec="1639285934"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.88.136.174"/>
        </slice>
        <from usec="0" sec="1639285202"/>
        <to usec="0" sec="1639285931"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="103.50.175.99"/>
        </slice>
        <from usec="0" sec="1639285202"/>
        <to usec="0" sec="1639285935"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="104.18.121.77"/>
        </slice>
        <from usec="0" sec="1639285202"/>
        <to usec="0" sec="1639285932"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="95.149.3.172"/>
        </slice>
        <from usec="0" sec="1639285202"/>
        <to usec="0" sec="1639285938"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="180.157.78.140"/>
        </slice>
        <from usec="0" sec="1639285202"/>
        <to usec="0" sec="1639285931"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.226.128.10"/>
        </slice>
        <from usec="0" sec="1639285202"/>
        <to usec="0" sec="1639285936"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="193.6.197.21" dst_port="4588"/>
        </slice>
        <from usec="0" sec="1639285202"/>
        <to usec="0" sec="1639285934"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="202.245.233.175"/>
        </slice>
        <from usec="0" sec="1639285203"/>
        <to usec="0" sec="1639285937"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="80.73.34.137"/>
        </slice>
        <from usec="0" sec="1639285203"/>
        <to usec="0" sec="1639285928"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="5.5.205.68"/>
        </slice>
        <from usec="0" sec="1639285203"/>
        <to usec="0" sec="1639285927"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="35.233.111.220"/>
        </slice>
        <from usec="0" sec="1639285203"/>
        <to usec="0" sec="1639285936"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="162.91.48.163"/>
        </slice>
        <from usec="0" sec="1639285204"/>
        <to usec="0" sec="1639285937"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.226.166.129"/>
        </slice>
        <from usec="0" sec="1639285204"/>
        <to usec="0" sec="1639286025"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="223.151.164.174"/>
        </slice>
        <from usec="0" sec="1639285204"/>
        <to usec="0" sec="1639285937"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.204.41.179"/>
        </slice>
        <from usec="0" sec="1639285204"/>
        <to usec="0" sec="1639285936"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="180.157.78.71"/>
        </slice>
        <from usec="0" sec="1639285204"/>
        <to usec="0" sec="1639285926"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ipv4gretun">
        <slice>
            <filter src_ip="162.14.61.85"/>
        </slice>
        <from usec="0" sec="1639285204"/>
        <to usec="0" sec="1639285938"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.226.96.178"/>
        </slice>
        <from usec="0" sec="1639285205"/>
        <to usec="0" sec="1639285937"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter src_ip="119.13.118.115"/>
        </slice>
        <from usec="0" sec="1639285205"/>
        <to usec="0" sec="1639285926"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="64.181.191.204"/>
        </slice>
        <from usec="0" sec="1639285206"/>
        <to usec="0" sec="1639285816"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.11.63.104"/>
        </slice>
        <from usec="0" sec="1639285206"/>
        <to usec="0" sec="1639285923"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="1.202.92.86"/>
        </slice>
        <from usec="0" sec="1639285206"/>
        <to usec="0" sec="1639285936"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ipv4gretun">
        <slice>
            <filter src_ip="100.39.82.218"/>
        </slice>
        <from usec="0" sec="1639285206"/>
        <to usec="0" sec="1639285922"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="193.34.205.17"/>
        </slice>
        <from usec="0" sec="1639285206"/>
        <to usec="0" sec="1639285933"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="180.157.78.13"/>
        </slice>
        <from usec="0" sec="1639285207"/>
        <to usec="0" sec="1639285933"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="93.217.59.194"/>
        </slice>
        <from usec="0" sec="1639285207"/>
        <to usec="0" sec="1639285937"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="79.177.202.212"/>
        </slice>
        <from usec="0" sec="1639285207"/>
        <to usec="0" sec="1639285937"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.226.43.52"/>
        </slice>
        <from usec="0" sec="1639285207"/>
        <to usec="0" sec="1639285929"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.226.90.42"/>
        </slice>
        <from usec="0" sec="1639285207"/>
        <to usec="0" sec="1639285935"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.88.146.3"/>
        </slice>
        <from usec="0" sec="1639285207"/>
        <to usec="0" sec="1639285938"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="44.16.137.250"/>
        </slice>
        <from usec="0" sec="1639285208"/>
        <to usec="0" sec="1639285929"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="199.33.36.100"/>
        </slice>
        <from usec="0" sec="1639285208"/>
        <to usec="0" sec="1639285938"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="113.219.128.196"/>
        </slice>
        <from usec="0" sec="1639285208"/>
        <to usec="0" sec="1639285937"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="192.106.127.108"/>
        </slice>
        <from usec="0" sec="1639285208"/>
        <to usec="0" sec="1639285923"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="54.116.74.208"/>
        </slice>
        <from usec="0" sec="1639285209"/>
        <to usec="0" sec="1639286020"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="163.226.135.21"/>
        </slice>
        <from usec="0" sec="1639285209"/>
        <to usec="0" sec="1639285937"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="180.157.78.154"/>
        </slice>
        <from usec="0" sec="1639285210"/>
        <to usec="0" sec="1639285934"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="185.156.61.151"/>
        </slice>
        <from usec="0" sec="1639285210"/>
        <to usec="0" sec="1639285933"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.226.44.150"/>
        </slice>
        <from usec="0" sec="1639285211"/>
        <to usec="0" sec="1639285931"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.24.250.104" dst_port="53"/>
        </slice>
        <from usec="0" sec="1639285211"/>
        <to usec="0" sec="1639285920"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="163.226.173.30"/>
        </slice>
        <from usec="0" sec="1639285211"/>
        <to usec="0" sec="1639285917"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="163.226.245.98"/>
        </slice>
        <from usec="0" sec="1639285211"/>
        <to usec="0" sec="1639285937"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="142.146.129.104"/>
        </slice>
        <from usec="0" sec="1639285211"/>
        <to usec="0" sec="1639285938"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="133.11.224.129"/>
        </slice>
        <from usec="0" sec="1639285212"/>
        <to usec="0" sec="1639285933"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="133.11.129.199"/>
        </slice>
        <from usec="0" sec="1639285212"/>
        <to usec="0" sec="1639285933"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="157.88.212.252"/>
        </slice>
        <from usec="0" sec="1639285212"/>
        <to usec="0" sec="1639285915"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="157.88.61.121"/>
        </slice>
        <from usec="0" sec="1639285212"/>
        <to usec="0" sec="1639285915"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,052,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="130.122.176.193"/>
        </slice>
        <from usec="0" sec="1639285213"/>
        <to usec="0" sec="1639285921"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.11.111.168"/>
        </slice>
        <from usec="0" sec="1639285213"/>
        <to usec="0" sec="1639285932"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="192.106.103.67"/>
        </slice>
        <from usec="0" sec="1639285213"/>
        <to usec="0" sec="1639285935"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="180.157.78.129"/>
        </slice>
        <from usec="0" sec="1639285213"/>
        <to usec="0" sec="1639285937"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter src_ip="193.86.53.242"/>
        </slice>
        <from usec="0" sec="1639285214"/>
        <to usec="0" sec="1639285936"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.24.107.98"/>
        </slice>
        <from usec="0" sec="1639285217"/>
        <to usec="0" sec="1639285930"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.88.218.164"/>
        </slice>
        <from usec="0" sec="1639285218"/>
        <to usec="0" sec="1639285910"/>
    </anomaly>
    <anomaly type="notice" value="0.819293,2.05683,504,0 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="163.226.85.247" dst_port="443"/>
            <filter dst_ip="91.123.164.171" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="178.222.229.19"/>
        </slice>
        <from usec="0" sec="1639285221"/>
        <to usec="0" sec="1639285936"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.165.37.221"/>
        </slice>
        <from usec="0" sec="1639285225"/>
        <to usec="0" sec="1639285927"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.32.153.8"/>
        </slice>
        <from usec="0" sec="1639285227"/>
        <to usec="0" sec="1639285910"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="187.64.209.56"/>
        </slice>
        <from usec="0" sec="1639285228"/>
        <to usec="0" sec="1639285922"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="18.166.5.206" dst_ip="163.226.82.187" src_port="443"/>
            <filter src_ip="52.130.40.44" dst_ip="163.226.82.187" src_port="443"/>
        </slice>
        <from usec="0" sec="1639285231"/>
        <to usec="0" sec="1639285931"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="37.48.93.104"/>
        </slice>
        <from usec="0" sec="1639285237"/>
        <to usec="0" sec="1639285932"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="96.45.94.160"/>
        </slice>
        <from usec="0" sec="1639285238"/>
        <to usec="0" sec="1639285919"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.11.61.166"/>
        </slice>
        <from usec="0" sec="1639285242"/>
        <to usec="0" sec="1639285926"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.88.96.37"/>
        </slice>
        <from usec="0" sec="1639285253"/>
        <to usec="0" sec="1639285915"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="120.85.86.3"/>
        </slice>
        <from usec="0" sec="1639285262"/>
        <to usec="0" sec="1639285905"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="212.159.31.181"/>
        </slice>
        <from usec="0" sec="1639285272"/>
        <to usec="0" sec="1639285873"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="172.90.134.226"/>
        </slice>
        <from usec="0" sec="1639285279"/>
        <to usec="0" sec="1639285915"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="52.200.163.71"/>
        </slice>
        <from usec="0" sec="1639285304"/>
        <to usec="0" sec="1639285898"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="13.76.202.222"/>
        </slice>
        <from usec="0" sec="1639285312"/>
        <to usec="0" sec="1639285923"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="23.32.233.21"/>
        </slice>
        <from usec="0" sec="1639285443"/>
        <to usec="0" sec="1639285907"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="178.222.229.13"/>
        </slice>
        <from usec="0" sec="1639285449"/>
        <to usec="0" sec="1639285937"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="143.185.137.19"/>
        </slice>
        <from usec="0" sec="1639285655"/>
        <to usec="0" sec="1639285938"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="101.219.1.68"/>
        </slice>
        <from usec="0" sec="1639285671"/>
        <to usec="0" sec="1639285937"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="170.133.105.59"/>
        </slice>
        <from usec="0" sec="1639285701"/>
        <to usec="0" sec="1639285878"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="13.139.85.28"/>
        </slice>
        <from usec="0" sec="1639285707"/>
        <to usec="0" sec="1639285901"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="13.139.85.28"/>
        </slice>
        <from usec="0" sec="1639285707"/>
        <to usec="0" sec="1639285901"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="185.34.246.121"/>
        </slice>
        <from usec="0" sec="1639285734"/>
        <to usec="0" sec="1639285785"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="54.89.141.198"/>
        </slice>
        <from usec="0" sec="1639285839"/>
        <to usec="0" sec="1639285855"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="34.216.246.160"/>
        </slice>
        <from usec="0" sec="1639285212"/>
        <to usec="0" sec="1639285869"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="13.153.29.39"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285938"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="104.7.29.32"/>
        </slice>
        <from usec="0" sec="1639285864"/>
        <to usec="0" sec="1639285938"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,004,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="185.238.183.253"/>
        </slice>
        <from usec="0" sec="1639285875"/>
        <to usec="0" sec="1639285938"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="35.187.164.108"/>
        </slice>
        <from usec="0" sec="1639285907"/>
        <to usec="0" sec="1639285935"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="167.145.138.212"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639286028"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="163.172.119.153"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639286028"/>
    </anomaly>
    <anomaly type="notice" value="0.588458,2.07473,999,1 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="157.88.253.106" dst_ip="198.72.103.64" src_port="57082" dst_port="8801"/>
            <filter src_ip="157.88.253.106" dst_ip="198.72.103.64" src_port="53444" dst_port="8801"/>
            <filter src_ip="157.88.253.106" dst_ip="198.72.103.64" src_port="19334" dst_port="8801"/>
            <filter src_ip="157.88.253.106" dst_ip="198.72.103.64" src_port="6442" dst_port="443"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639286028"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="43.250.242.145"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639286028"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="223.44.228.162"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639286028"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="130.122.167.229"/>
            <filter dst_ip="167.145.158.254"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639286028"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.11.103.0"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639286017"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="8.238.149.247"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639286028"/>
    </anomaly>
    <anomaly type="notice" value="0.588458,2.07473,999,1 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="130.122.57.77" dst_port="80"/>
            <filter src_ip="130.122.57.77" dst_ip="116.11.197.242" dst_port="31767"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639286028"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="162.130.189.133" dst_port="443"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639286009"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.11.217.18"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639286024"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="167.145.138.159"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639286028"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="192.106.87.77"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639286026"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="104.7.162.163" src_port="8080" dst_port="63353"/>
            <filter dst_ip="104.7.162.163"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639286028"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.11.238.97"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639286012"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,502,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="213.139.215.26"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639286028"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.26.199.121"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639286018"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.216.119.104" dst_ip="35.180.127.105" src_port="61436" dst_port="443"/>
            <filter src_ip="203.216.119.104" dst_ip="204.194.1.222" src_port="61441" dst_port="443"/>
            <filter src_ip="203.216.119.104" dst_ip="3.182.197.6" src_port="61893" dst_port="443"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639286027"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="117.57.180.195" dst_ip="163.226.48.157" dst_port="53"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639286022"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="23.106.87.29"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639286027"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="51.62.119.116"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639286024"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.11.145.224" dst_port="53"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639286027"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="167.163.20.130" dst_port="53021"/>
            <filter dst_ip="167.163.20.130"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639286028"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="80.155.229.84"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639286022"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="8.140.132.51"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639286026"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.226.11.222"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639286020"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="119.128.139.151"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639286025"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="162.14.61.95"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639286028"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="162.130.186.154" dst_port="443"/>
        </slice>
        <from usec="0" sec="1639285202"/>
        <to usec="0" sec="1639285998"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="107.82.38.120"/>
        </slice>
        <from usec="0" sec="1639285202"/>
        <to usec="0" sec="1639286026"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="157.217.82.138"/>
        </slice>
        <from usec="0" sec="1639285202"/>
        <to usec="0" sec="1639286028"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="50.55.134.195"/>
        </slice>
        <from usec="0" sec="1639285202"/>
        <to usec="0" sec="1639286026"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="24.154.93.181"/>
        </slice>
        <from usec="0" sec="1639285202"/>
        <to usec="0" sec="1639286027"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.226.242.102" dst_port="25"/>
        </slice>
        <from usec="0" sec="1639285202"/>
        <to usec="0" sec="1639286027"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="45.30.167.6"/>
        </slice>
        <from usec="0" sec="1639285202"/>
        <to usec="0" sec="1639286025"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.226.25.102"/>
        </slice>
        <from usec="0" sec="1639285203"/>
        <to usec="0" sec="1639286027"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="54.145.69.203" dst_port="443"/>
        </slice>
        <from usec="0" sec="1639285203"/>
        <to usec="0" sec="1639286009"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="59.145.133.232" src_port="19958" dst_port="23"/>
            <filter src_ip="59.145.133.232" src_port="37063" dst_port="23"/>
            <filter src_ip="59.145.133.232" src_port="54304" dst_port="23"/>
            <filter src_ip="59.145.133.232" src_port="10040" dst_port="23"/>
        </slice>
        <from usec="0" sec="1639285204"/>
        <to usec="0" sec="1639286024"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.11.90.153"/>
        </slice>
        <from usec="0" sec="1639285204"/>
        <to usec="0" sec="1639286026"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="113.177.228.13"/>
        </slice>
        <from usec="0" sec="1639285204"/>
        <to usec="0" sec="1639286027"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="192.197.65.35"/>
        </slice>
        <from usec="0" sec="1639285205"/>
        <to usec="0" sec="1639286027"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="13.118.210.224" dst_ip="203.216.122.151" src_port="443"/>
        </slice>
        <from usec="0" sec="1639285205"/>
        <to usec="0" sec="1639286026"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.226.145.107"/>
        </slice>
        <from usec="0" sec="1639285205"/>
        <to usec="0" sec="1639286001"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="192.41.211.108" dst_port="443"/>
            <filter dst_ip="216.141.31.41" dst_port="443"/>
        </slice>
        <from usec="0" sec="1639285205"/>
        <to usec="0" sec="1639286028"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="104.120.145.121"/>
        </slice>
        <from usec="0" sec="1639285205"/>
        <to usec="0" sec="1639286027"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="203.216.102.242"/>
        </slice>
        <from usec="0" sec="1639285206"/>
        <to usec="0" sec="1639286014"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.216.117.93" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="1639285206"/>
        <to usec="0" sec="1639286028"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="104.62.253.96"/>
        </slice>
        <from usec="0" sec="1639285206"/>
        <to usec="0" sec="1639285968"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.216.113.153" dst_port="443"/>
            <filter src_ip="203.216.113.153"/>
        </slice>
        <from usec="0" sec="1639285211"/>
        <to usec="0" sec="1639286025"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.226.33.199"/>
        </slice>
        <from usec="0" sec="1639285211"/>
        <to usec="0" sec="1639286027"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="65.9.82.207"/>
        </slice>
        <from usec="0" sec="1639285211"/>
        <to usec="0" sec="1639286026"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="130.122.187.36"/>
        </slice>
        <from usec="0" sec="1639285213"/>
        <to usec="0" sec="1639286028"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="204.194.1.222"/>
        </slice>
        <from usec="0" sec="1639285214"/>
        <to usec="0" sec="1639286028"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="162.206.224.68"/>
        </slice>
        <from usec="0" sec="1639285214"/>
        <to usec="0" sec="1639286027"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.226.181.66" src_port="443"/>
            <filter dst_ip="163.226.181.66" dst_port="61186"/>
        </slice>
        <from usec="0" sec="1639285214"/>
        <to usec="0" sec="1639286027"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="209.224.115.84"/>
        </slice>
        <from usec="0" sec="1639285214"/>
        <to usec="0" sec="1639286020"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.158.33.160"/>
        </slice>
        <from usec="0" sec="1639285215"/>
        <to usec="0" sec="1639286004"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="99.86.59.78"/>
        </slice>
        <from usec="0" sec="1639285220"/>
        <to usec="0" sec="1639286021"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="204.194.1.222"/>
        </slice>
        <from usec="0" sec="1639285221"/>
        <to usec="0" sec="1639286020"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.226.144.120"/>
        </slice>
        <from usec="0" sec="1639285222"/>
        <to usec="0" sec="1639286000"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.226.182.225" src_port="443"/>
            <filter src_ip="13.118.231.180" dst_ip="163.226.182.225" src_port="80"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639285982"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.3.215.72"/>
        </slice>
        <from usec="0" sec="1639285227"/>
        <to usec="0" sec="1639286025"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="190.60.177.133"/>
        </slice>
        <from usec="0" sec="1639285235"/>
        <to usec="0" sec="1639286021"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.158.33.49"/>
        </slice>
        <from usec="0" sec="1639285296"/>
        <to usec="0" sec="1639286009"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="116.206.178.50"/>
        </slice>
        <from usec="0" sec="1639285313"/>
        <to usec="0" sec="1639286024"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="47.65.235.107"/>
        </slice>
        <from usec="0" sec="1639285437"/>
        <to usec="0" sec="1639285946"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="157.197.156.81" src_port="80" dst_port="27017"/>
        </slice>
        <from usec="0" sec="1639285457"/>
        <to usec="0" sec="1639286028"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="99.80.218.144"/>
        </slice>
        <from usec="0" sec="1639285741"/>
        <to usec="0" sec="1639285999"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="3.188.103.48"/>
        </slice>
        <from usec="0" sec="1639285766"/>
        <to usec="0" sec="1639286004"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="16.193.55.86"/>
        </slice>
        <from usec="0" sec="1639285812"/>
        <to usec="0" sec="1639285888"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="185.34.246.124"/>
        </slice>
        <from usec="0" sec="1639285866"/>
        <to usec="0" sec="1639285872"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="42.114.158.160"/>
        </slice>
        <from usec="0" sec="1639285868"/>
        <to usec="0" sec="1639285937"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="119.171.6.252"/>
        </slice>
        <from usec="0" sec="1639285868"/>
        <to usec="0" sec="1639285938"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="58.124.152.221"/>
        </slice>
        <from usec="0" sec="1639285873"/>
        <to usec="0" sec="1639286026"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="18.229.83.125"/>
        </slice>
        <from usec="0" sec="1639285911"/>
        <to usec="0" sec="1639286021"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="27.213.121.43"/>
        </slice>
        <from usec="0" sec="1639286003"/>
        <to usec="0" sec="1639286028"/>
    </anomaly>
    <anomaly type="notice" value="1.14418,2.14205,901,0 0 0 0 1 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285668"/>
    </anomaly>
    <anomaly type="notice" value="1.14418,2.14205,901,0 0 0 0 1 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285668"/>
    </anomaly>
    <anomaly type="notice" value="1.0328,2.09002,999,0 0 0 1 1 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="23.167.14.23" dst_port="53"/>
            <filter dst_ip="23.167.14.21" dst_port="53"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639286028"/>
    </anomaly>
    <anomaly type="notice" value="1.0328,2.09002,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.88.121.202" dst_ip="93.163.141.135" src_port="10022"/>
        </slice>
        <from usec="0" sec="1639285244"/>
        <to usec="0" sec="1639285413"/>
    </anomaly>
    <anomaly type="notice" value="1.0328,2.09002,504,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="133.11.54.250" dst_ip="44.20.86.180" dst_port="443"/>
            <filter src_ip="157.88.3.138" dst_ip="44.20.86.180" dst_port="443"/>
        </slice>
        <from usec="0" sec="1639285370"/>
        <to usec="0" sec="1639285468"/>
    </anomaly>
    <anomaly type="notice" value="1.28077,2.03283,010,0 0 0 1 1 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="167.145.138.218"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.0328,2.09002,504,0 0 0 1 1 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.11.234.179" dst_port="443"/>
            <filter src_ip="133.11.234.179" dst_ip="130.8.245.90" dst_port="53"/>
        </slice>
        <from usec="0" sec="1639285202"/>
        <to usec="0" sec="1639285664"/>
    </anomaly>
    <anomaly type="notice" value="1.0328,2.09002,504,0 0 0 1 1 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.11.110.50" dst_ip="142.146.228.103"/>
            <filter src_ip="133.11.110.50" dst_port="443"/>
            <filter dst_ip="142.146.228.103" dst_port="443"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639285935"/>
    </anomaly>
    <anomaly type="notice" value="1.0328,2.09002,020,0 0 0 1 1 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter src_ip="211.95.13.253" dst_ip="203.216.114.117"/>
        </slice>
        <from usec="0" sec="1639285540"/>
        <to usec="0" sec="1639285562"/>
    </anomaly>
    <anomaly type="notice" value="1.0328,2.09002,010,0 0 0 1 1 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.184.181.49"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639285755"/>
    </anomaly>
    <anomaly type="notice" value="1.0328,2.09002,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.216.120.213" dst_ip="45.245.5.34" src_port="3389"/>
        </slice>
        <from usec="0" sec="1639285203"/>
        <to usec="0" sec="1639285736"/>
    </anomaly>
    <anomaly type="notice" value="1.0328,2.09002,020,0 0 0 1 1 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.226.194.15"/>
        </slice>
        <from usec="0" sec="1639285211"/>
        <to usec="0" sec="1639285753"/>
    </anomaly>
    <anomaly type="notice" value="1.0328,2.09002,010,0 0 0 1 1 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="111.243.34.19" src_port="20502" dst_port="23"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285683"/>
    </anomaly>
    <anomaly type="notice" value="1.0328,2.09002,999,0 0 0 1 1 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="42.96.126.202" src_port="58914"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639286027"/>
    </anomaly>
    <anomaly type="notice" value="1.0328,2.09002,020,0 0 0 1 1 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="163.226.98.252"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285848"/>
    </anomaly>
    <anomaly type="notice" value="1.0328,2.09002,010,0 0 0 1 1 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="180.157.78.75" dst_port="10001"/>
        </slice>
        <from usec="0" sec="1639285206"/>
        <to usec="0" sec="1639285848"/>
    </anomaly>
    <anomaly type="notice" value="0.857904,2.05669,010,1 1 0 1 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="192.150.18.99" dst_port="7443"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285848"/>
    </anomaly>
    <anomaly type="notice" value="1.0328,2.09002,504,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="157.88.0.38" dst_ip="64.181.178.137" src_port="61452" dst_port="443"/>
            <filter src_ip="157.88.0.38" dst_ip="64.181.178.137" src_port="61413" dst_port="443"/>
            <filter src_ip="157.88.146.237" dst_ip="64.181.178.137" src_port="61230" dst_port="443"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285938"/>
    </anomaly>
    <anomaly type="notice" value="1.0328,2.09002,504,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.11.56.116" dst_ip="203.216.106.243" src_port="56486" dst_port="443"/>
        </slice>
        <from usec="0" sec="1639285733"/>
        <to usec="0" sec="1639285782"/>
    </anomaly>
    <anomaly type="notice" value="1.0328,2.09002,504,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="130.122.11.109" dst_ip="208.166.255.167" dst_port="443"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639286026"/>
    </anomaly>
    <anomaly type="notice" value="1.0328,2.09002,020,0 0 0 1 1 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="167.23.101.106"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639286028"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.184.181.241"/>
        </slice>
        <from usec="0" sec="1639285202"/>
        <to usec="0" sec="1639285920"/>
    </anomaly>
    <anomaly type="notice" value="1.0328,2.09002,504,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.11.61.164" dst_ip="188.130.143.203" dst_port="443"/>
        </slice>
        <from usec="0" sec="1639285201"/>
        <to usec="0" sec="1639286027"/>
    </anomaly>
    <anomaly type="notice" value="1.0328,2.09002,502,0 0 0 1 1 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.88.183.250" dst_ip="67.204.136.178" src_port="23"/>
            <filter src_ip="157.88.183.250" dst_ip="49.152.176.128" src_port="22"/>
        </slice>
        <from usec="0" sec="1639285204"/>
        <to usec="0" sec="1639286025"/>
    </anomaly>
    <anomaly type="notice" value="1.0328,2.09002,504,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.172.35.53" dst_ip="52.173.53.55" src_port="58690" dst_port="443"/>
        </slice>
        <from usec="0" sec="1639285211"/>
        <to usec="0" sec="1639286023"/>
    </anomaly>
    <anomaly type="notice" value="1.0328,2.09002,020,0 0 0 1 1 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="163.226.182.40"/>
        </slice>
        <from usec="0" sec="1639285212"/>
        <to usec="0" sec="1639286024"/>
    </anomaly>
    <anomaly type="notice" value="1.30581,2.03268,010,1 1 0 1 1 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="118.93.238.116" dst_port="80"/>
        </slice>
        <from usec="0" sec="1639285263"/>
        <to usec="0" sec="1639286026"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="180.95.64.190"/>
            <filter dst_ip="202.165.29.145"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639285831"/>
    </anomaly>
    <anomaly type="notice" value="0.312314,2.11338,020,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="163.226.53.174"/>
            <filter dst_ip="163.226.53.174"/>
            <filter dst_ip="163.226.45.163"/>
            <filter dst_ip="163.226.33.245"/>
        </slice>
        <from usec="0" sec="1639285200"/>
        <to usec="0" sec="1639286018"/>
    </anomaly>
    <anomaly type="notice" value="1.07818,2.07097,504,1 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="126.235.122.12" dst_ip="203.216.98.177" src_port="50218" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.819293,2.05683,504,0 0 0 1 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="128.1.154.14" dst_ip="163.226.96.85" src_port="443"/>
            <filter src_ip="128.1.154.14" dst_ip="133.4.117.39" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.588458,2.07473,504,1 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="130.122.187.157" src_port="443"/>
        </slice>
        <from usec="0" sec="1639285231"/>
        <to usec="0" sec="1639286061"/>
    </anomaly>
    <anomaly type="notice" value="0.819293,2.05683,504,0 0 0 1 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="133.11.129.171" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.819293,2.05683,020,0 0 0 1 0 0 0 0 0 1 0 0,ttl_error">
        <slice>
            <filter src_ip="133.24.56.11"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.959158,2.01711,504,1 0 0 1 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="157.88.81.178" dst_port="443"/>
            <filter src_ip="157.88.81.178" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.819293,2.05683,999,0 0 0 1 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="133.24.219.79" dst_ip="103.104.18.117" src_port="5900"/>
            <filter src_ip="133.24.219.79" dst_ip="103.212.15.12" src_port="5900"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.819293,2.05683,999,0 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter dst_ip="212.64.150.214" src_port="465"/>
            <filter src_ip="133.24.248.2" dst_ip="109.205.27.107" src_port="587"/>
            <filter src_ip="133.24.248.2" dst_ip="220.76.188.98" src_port="587"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.28077,2.03283,999,0 0 0 1 1 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="157.88.97.188" src_port="45963"/>
            <filter src_ip="157.88.97.188" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.27921,2.0588,504,0 0 0 1 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="172.133.5.69" dst_ip="163.226.96.203" src_port="443" dst_port="53739"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.955893,2.10968,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="201.63.78.217"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.955893,2.10968,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="203.222.84.172"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.955893,2.10968,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="221.140.64.164"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.27921,2.0588,504,0 0 0 1 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.226.97.28" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.955893,2.10968,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="8.216.176.65"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.955893,2.10968,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="163.226.133.54"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.955893,2.10968,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="203.216.123.35" dst_ip="13.103.41.183" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.07818,2.07097,504,1 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="163.226.183.235" dst_ip="82.12.17.179" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.27921,2.0588,999,0 0 0 1 0 0 0 0 0 1 1 0,mptpla">
        <slice>
            <filter src_ip="202.172.32.35" dst_ip="13.153.230.142"/>
            <filter src_ip="202.172.38.252" dst_ip="13.153.230.142" src_port="63098" dst_port="11194"/>
            <filter src_ip="202.172.38.224" dst_ip="13.153.230.142" src_port="48106" dst_port="11194"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.819293,2.05683,504,0 0 0 1 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="38.130.251.176" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.955893,2.10968,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.226.182.6" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.955893,2.10968,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.226.81.37" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.955893,2.10968,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.226.200.3" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.955893,2.10968,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="188.93.23.254"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.819293,2.05683,999,0 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="193.4.224.54" dst_ip="203.216.116.204"/>
            <filter src_ip="193.4.224.54" dst_port="5666"/>
            <filter src_ip="193.4.224.54" dst_port="161"/>
            <filter dst_ip="203.216.116.204" dst_port="5666"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.27921,2.0588,504,0 0 0 1 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="203.216.114.166" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.955893,2.10968,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="203.216.113.128" dst_port="465"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.955893,2.10968,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="216.29.119.47"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.14169,2.09194,504,0 1 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="202.172.38.231" dst_ip="52.36.31.94" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.955893,2.10968,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="52.100.151.91"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.819293,2.05683,504,0 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter dst_port="443"/>
            <filter dst_ip="13.172.29.116"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.27921,2.0588,999,0 0 0 1 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter dst_ip="203.216.113.136"/>
            <filter src_ip="109.205.27.87" dst_port="587"/>
            <filter src_ip="109.205.27.87" dst_ip="203.216.113.147" dst_port="25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.37072,2.1116,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="120.198.32.14" dst_ip="203.216.120.213" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.27921,2.0588,504,0 0 0 1 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="203.216.113.127" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.0328,2.09002,504,0 0 0 1 1 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="157.88.180.205" dst_port="443"/>
            <filter dst_ip="44.20.49.51" dst_port="443"/>
            <filter src_ip="157.88.180.205"/>
        </slice>
        <from usec="0" sec="1639285202"/>
        <to usec="0" sec="1639285833"/>
    </anomaly>
    <anomaly type="notice" value="1.37072,2.1116,999,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="163.226.78.1" dst_ip="54.45.163.178" dst_port="5802"/>
            <filter src_ip="163.226.78.1" dst_ip="54.129.171.34" dst_port="3478"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.37072,2.1116,504,0 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="202.3.215.86" dst_ip="49.243.158.54" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.37072,2.1116,503,0 0 0 0 0 0 0 0 0 1 1 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.172.32.49" dst_ip="110.53.159.151" dst_port="8000"/>
            <filter src_ip="202.172.32.49" dst_ip="147.67.227.104" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.27921,2.0588,504,0 0 0 1 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.226.25.60" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.37072,2.1116,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="67.235.191.253" dst_ip="163.226.63.199" src_port="80" dst_port="29285"/>
            <filter src_ip="67.235.191.253" dst_ip="163.226.63.199" src_port="80" dst_port="29280"/>
            <filter src_ip="67.235.191.253" dst_ip="163.226.63.199" src_port="80" dst_port="29243"/>
            <filter src_ip="67.235.191.253" dst_ip="163.226.63.199" src_port="80" dst_port="29160"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.37072,2.1116,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="95.101.75.162" dst_ip="163.226.63.199" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.37072,2.1116,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="131.130.14.36" dst_ip="162.91.48.167" src_port="5900"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.0328,2.09002,504,0 0 0 1 1 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="17.33.240.102" dst_ip="163.226.96.244" src_port="443"/>
        </slice>
        <from usec="0" sec="1639285575"/>
        <to usec="0" sec="1639285848"/>
    </anomaly>
    <anomaly type="notice" value="1.37072,2.1116,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.226.97.57" src_port="443"/>
            <filter dst_ip="163.226.97.57" src_port="5004"/>
            <filter dst_ip="163.226.97.57" src_port="33434"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.37072,2.1116,999,0 0 0 0 0 0 0 0 0 1 1 0,mptpla">
        <slice>
            <filter dst_ip="203.216.118.36" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.37072,2.1116,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="203.216.113.246" dst_ip="157.88.218.94" src_port="80" dst_port="35920"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
