<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="anomalous" value="1.41959,1.3148,504,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="157.206.54.237" dst_ip="136.98.131.12" src_port="58568" dst_port="443"/>
        </slice>
        <from usec="0" sec="1641013239"/>
        <to usec="0" sec="1641013982"/>
    </anomaly>
    <anomaly type="anomalous" value="2.8302,2.13081,010,1 1 1 1 1 1 1 0 0 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="85.49.199.73" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.41959,1.3148,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="62.33.205.28" src_port="9999" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1641013584"/>
        <to usec="0" sec="1641013585"/>
    </anomaly>
    <anomaly type="anomalous" value="1.41959,1.3148,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="104.154.75.200" src_port="5224" dst_port="5060"/>
            <filter src_ip="104.154.75.200" src_port="5369" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1641013976"/>
        <to usec="0" sec="1641014101"/>
    </anomaly>
    <anomaly type="anomalous" value="1.41959,1.3148,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.249.64.25" dst_port="5351"/>
        </slice>
        <from usec="0" sec="1641013230"/>
        <to usec="0" sec="1641013906"/>
    </anomaly>
    <anomaly type="anomalous" value="1.41959,1.3148,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="120.206.153.36" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1641013436"/>
        <to usec="0" sec="1641013438"/>
    </anomaly>
    <anomaly type="anomalous" value="1.41959,1.3148,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="1.122.43.40" dst_port="445"/>
        </slice>
        <from usec="0" sec="1641013259"/>
        <to usec="0" sec="1641013261"/>
    </anomaly>
    <anomaly type="anomalous" value="1.41959,1.3148,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="114.71.182.207" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1641013359"/>
        <to usec="0" sec="1641013362"/>
    </anomaly>
    <anomaly type="anomalous" value="1.7175,1.34762,010,1 1 1 0 0 0 0 0 0 1 1 0,ntscSYN">
        <slice>
            <filter src_ip="139.31.66.202" dst_port="6379"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.10466,1.55999,010,1 1 1 0 0 0 1 0 0 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="121.37.32.115" dst_port="6379"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.41959,1.3148,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="39.108.12.172" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1641013371"/>
        <to usec="0" sec="1641013373"/>
    </anomaly>
    <anomaly type="anomalous" value="1.41959,1.3148,999,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="61.65.249.101" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1641014064"/>
        <to usec="0" sec="1641014066"/>
    </anomaly>
    <anomaly type="anomalous" value="1.41959,1.3148,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="220.183.48.93" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1641013640"/>
        <to usec="0" sec="1641013642"/>
    </anomaly>
    <anomaly type="anomalous" value="2.8302,2.13081,010,1 1 1 1 1 1 1 0 0 1 1 1,dntscSYN">
        <slice>
            <filter dst_port="6379"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.41959,1.3148,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="60.48.230.156" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1641014045"/>
        <to usec="0" sec="1641014049"/>
    </anomaly>
    <anomaly type="anomalous" value="1.7175,1.34762,010,1 1 1 0 0 0 0 0 0 1 1 0,ntscSYN">
        <slice>
            <filter src_ip="123.136.143.95" dst_port="6379"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.41959,1.3148,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="91.107.120.250" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1641013844"/>
        <to usec="0" sec="1641013845"/>
    </anomaly>
    <anomaly type="anomalous" value="1.41959,1.3148,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="202.40.225.29" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1641014065"/>
        <to usec="0" sec="1641014067"/>
    </anomaly>
    <anomaly type="anomalous" value="1.41959,1.3148,010,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="112.53.218.72" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1641013586"/>
        <to usec="0" sec="1641013850"/>
    </anomaly>
    <anomaly type="anomalous" value="1.41959,1.3148,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="122.63.9.148" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1641013804"/>
        <to usec="0" sec="1641013806"/>
    </anomaly>
    <anomaly type="anomalous" value="1.41959,1.3148,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="112.155.3.171" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1641014031"/>
        <to usec="0" sec="1641014036"/>
    </anomaly>
    <anomaly type="anomalous" value="1.41959,1.3148,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="133.243.208.90" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1641013500"/>
        <to usec="0" sec="1641013517"/>
    </anomaly>
    <anomaly type="anomalous" value="1.41959,1.3148,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="175.17.202.121" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1641013996"/>
        <to usec="0" sec="1641013997"/>
    </anomaly>
    <anomaly type="anomalous" value="1.41959,1.3148,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="114.68.23.221" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1641013433"/>
        <to usec="0" sec="1641013434"/>
    </anomaly>
    <anomaly type="anomalous" value="1.41959,1.3148,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="218.34.204.232" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1641013801"/>
        <to usec="0" sec="1641013804"/>
    </anomaly>
    <anomaly type="anomalous" value="1.7175,1.34762,010,1 1 1 0 0 0 0 0 0 1 1 0,ntscSYN">
        <slice>
            <filter src_ip="112.53.240.101" dst_port="6379"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.41959,1.3148,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="94.103.201.210" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1641013322"/>
        <to usec="0" sec="1641013729"/>
    </anomaly>
    <anomaly type="anomalous" value="1.41959,1.3148,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="113.194.90.85" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1641014019"/>
        <to usec="0" sec="1641014021"/>
    </anomaly>
    <anomaly type="anomalous" value="1.41959,1.3148,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="133.243.156.114" dst_port="5351"/>
        </slice>
        <from usec="0" sec="1641013247"/>
        <to usec="0" sec="1641013678"/>
    </anomaly>
    <anomaly type="anomalous" value="1.41959,1.3148,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="14.183.177.194" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1641013765"/>
        <to usec="0" sec="1641013767"/>
    </anomaly>
    <anomaly type="anomalous" value="1.41959,1.3148,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.199.134.16" dst_port="5351"/>
        </slice>
        <from usec="0" sec="1641013201"/>
        <to usec="0" sec="1641013785"/>
    </anomaly>
    <anomaly type="anomalous" value="1.41959,1.3148,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.199.134.20" dst_port="5351"/>
        </slice>
        <from usec="0" sec="1641013715"/>
        <to usec="0" sec="1641013749"/>
    </anomaly>
    <anomaly type="anomalous" value="1.41959,1.3148,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.199.134.21" dst_port="5351"/>
        </slice>
        <from usec="0" sec="1641013240"/>
        <to usec="0" sec="1641013651"/>
    </anomaly>
    <anomaly type="anomalous" value="1.41959,1.3148,011,1 1 1 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="61.65.249.101" src_port="6379"/>
        </slice>
        <from usec="0" sec="1641014064"/>
        <to usec="0" sec="1641014066"/>
    </anomaly>
    <anomaly type="anomalous" value="1.41959,1.3148,011,1 1 1 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="112.53.218.72" src_port="6379"/>
        </slice>
        <from usec="0" sec="1641013586"/>
        <to usec="0" sec="1641013588"/>
    </anomaly>
    <anomaly type="anomalous" value="2.03524,1.50482,010,1 1 1 0 0 0 0 0 0 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="101.32.19.93" dst_port="6379"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.93745,1.7829,999,0 0 0 1 1 1 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="202.244.71.66" dst_ip="13.24.47.73"/>
            <filter src_ip="202.244.65.95" dst_ip="13.24.47.73" src_port="57901" dst_port="11194"/>
            <filter src_ip="202.244.65.66" dst_ip="13.24.47.73" src_port="48106" dst_port="11194"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013305"/>
    </anomaly>
    <anomaly type="anomalous" value="1.93745,1.7829,504,0 0 0 1 1 1 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.206.78.83" dst_port="443"/>
            <filter src_ip="157.206.78.83" dst_ip="38.89.4.55" dst_port="80"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013848"/>
    </anomaly>
    <anomaly type="anomalous" value="1.41615,1.29983,999,1 1 1 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="45.242.128.124"/>
            <filter dst_ip="120.24.37.119" src_port="6379"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013938"/>
    </anomaly>
    <anomaly type="anomalous" value="2.66541,2.02965,504,1 1 0 1 1 1 1 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="162.141.163.128" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.75081,1.41039,999,1 1 1 1 1 0 0 0 0 1 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="89.247.66.203"/>
            <filter dst_ip="161.29.109.160" src_port="11233"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.26853,1.12952,999,1 0 0 1 0 0 1 0 0 1 1 0,mptmp">
        <slice>
            <filter src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.7417,1.36849,504,0 0 0 1 1 0 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="203.78.132.5" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.27219,1.64275,010,1 1 1 1 1 0 1 0 0 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="47.204.88.25" dst_port="6379"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.27219,1.64275,999,1 1 1 1 1 0 1 0 0 1 1 1,ntscUDPOther">
        <slice>
            <filter src_ip="2.77.121.57" src_port="58617" dst_port="5060"/>
            <filter src_ip="2.77.121.57" src_port="49447" dst_port="5060"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.4707,1.92381,503,1 0 0 1 1 1 0 0 0 1 1 1,ptmpHTTP">
        <slice>
            <filter src_ip="203.78.135.92" src_port="80"/>
            <filter src_ip="203.78.135.92"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.42501,1.92731,504,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.45.247.83" src_port="443"/>
            <filter src_ip="68.174.244.202" dst_ip="163.45.252.216" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.31699,1.21987,504,1 0 0 1 1 0 1 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="133.243.5.1" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.8302,2.13081,010,1 1 1 1 1 1 1 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="192.0.221.248" dst_port="3351"/>
            <filter src_ip="89.247.66.138" src_port="8080"/>
            <filter src_ip="45.121.95.154" src_port="5136" dst_port="5060"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.41959,1.3148,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="150.124.155.78" dst_port="445"/>
        </slice>
        <from usec="0" sec="1641013377"/>
        <to usec="0" sec="1641013379"/>
    </anomaly>
    <anomaly type="anomalous" value="2.10234,1.5474,010,1 1 1 1 0 0 1 0 0 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="39.103.98.151" dst_port="6379"/>
            <filter src_ip="39.97.230.30" dst_port="6379"/>
            <filter src_ip="112.14.103.167" dst_port="6379"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.7417,1.36849,503,0 0 0 1 1 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="130.187.46.124" src_port="80"/>
            <filter dst_ip="218.34.120.60" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.73795,1.70695,901,0 0 0 0 0 1 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641014028"/>
    </anomaly>
    <anomaly type="anomalous" value="1.73795,1.70695,901,0 0 0 0 0 1 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013848"/>
    </anomaly>
    <anomaly type="anomalous" value="2.8302,2.13081,010,1 1 1 1 1 1 1 0 0 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="222.188.232.11" src_port="9090" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.8302,2.13081,503,1 1 1 1 1 1 1 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="203.78.137.209" dst_port="80"/>
            <filter dst_ip="203.78.135.92" dst_port="80"/>
            <filter src_ip="210.131.56.103" dst_ip="203.78.136.192" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.26853,1.12952,020,1 0 0 1 0 0 1 0 0 1 1 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="183.124.252.166"/>
            <filter dst_ip="120.39.35.161"/>
            <filter dst_ip="163.84.73.84"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.15392,1.07044,999,1 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="126.15.117.154" dst_ip="203.78.129.205"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.4707,1.92381,504,1 0 0 1 1 1 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.45.71.55" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.27219,1.64275,010,1 1 1 1 1 0 1 0 0 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="161.29.109.160" src_port="53127" dst_port="11233"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.80476,1.36356,999,1 0 0 1 1 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="77.7.223.215" src_port="13647"/>
            <filter src_ip="138.128.143.4"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.16525,1.80723,504,0 0 0 1 1 1 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.45.254.20" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.51344,1.25243,504,0 0 0 1 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="157.206.21.33" dst_ip="122.31.185.20" src_port="62883" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.79906,1.3578,999,1 1 0 0 0 0 0 0 0 1 1 1,ipv4gretun">
        <slice>
            <filter src_ip="203.78.137.8" dst_ip="206.204.252.190"/>
            <filter src_ip="203.78.137.8" dst_ip="204.51.46.66"/>
            <filter src_ip="203.78.137.8" dst_ip="50.240.114.81"/>
            <filter src_ip="203.78.137.8" dst_ip="128.12.70.14"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.87463,1.40484,999,1 1 0 1 0 0 1 0 0 1 1 1,ptmpla">
        <slice>
            <filter src_ip="88.95.74.24" dst_ip="133.251.114.22" src_port="44231"/>
            <filter src_ip="88.95.74.24" dst_ip="133.251.114.42" src_port="63216"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.42501,1.92731,504,0 0 0 1 1 1 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.45.117.249" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.58869,1.26264,999,1 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="133.243.18.110" dst_ip="183.178.207.98"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.52376,1.23498,999,1 1 0 1 0 0 1 0 0 1 1 0,mptmp">
        <slice>
            <filter dst_ip="192.0.205.97" src_port="8889"/>
            <filter dst_ip="52.208.168.247"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.14968,1.05201,503,1 0 0 1 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="157.206.41.84"/>
            <filter src_ip="133.243.5.1" dst_ip="8.7.157.112" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.43693,1.18781,503,1 0 0 1 1 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="133.243.248.62" dst_port="80"/>
            <filter src_ip="133.243.248.62" dst_port="443"/>
            <filter src_ip="133.243.5.1" dst_ip="8.7.133.224"/>
            <filter src_ip="133.243.5.1" dst_port="80"/>
            <filter dst_ip="8.7.133.224" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.15392,1.07044,504,1 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="157.206.196.247" dst_ip="8.7.189.28" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.18122,1.15256,503,0 0 0 0 0 0 1 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="130.187.192.12" dst_ip="61.90.227.135" src_port="80"/>
            <filter dst_ip="15.229.54.118"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.18122,1.15256,504,0 0 0 0 0 0 1 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="133.243.25.44"/>
            <filter dst_ip="18.86.126.225"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.67379,1.3131,901,1 0 0 1 0 0 1 0 0 1 1 1,empty">
        <slice/>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.51344,1.25243,504,0 0 0 1 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="203.78.132.5" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.51666,1.26796,999,0 0 0 0 0 0 0 0 0 1 1 1,ptmpla">
        <slice>
            <filter src_ip="147.47.157.119" dst_ip="203.78.135.68" dst_port="53"/>
            <filter src_ip="147.47.157.119" dst_ip="203.78.135.66" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.58869,1.26264,999,1 0 0 0 0 0 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="157.206.49.35" dst_port="443"/>
            <filter src_ip="157.206.49.35"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.7417,1.36849,503,0 0 0 1 1 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="163.45.79.127" src_port="80"/>
            <filter dst_ip="65.106.251.218" src_port="80"/>
            <filter src_ip="163.45.164.169" dst_ip="65.106.251.218" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.79922,1.40896,010,1 1 1 0 0 0 1 0 0 1 1 0,ntscSYN">
        <slice>
            <filter src_ip="39.107.117.11" dst_port="6379"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.22915,1.22537,020,0 0 0 1 1 0 1 0 0 1 0 0,ntscICecrqICecrqdurmterp">
        <slice>
            <filter dst_ip="203.78.143.78"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.58561,1.24705,504,1 0 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="157.206.196.242" dst_port="443"/>
            <filter src_ip="163.45.196.27" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.51666,1.26796,999,0 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="163.45.179.9" dst_ip="126.110.220.159" src_port="993" dst_port="52069"/>
            <filter src_ip="163.45.179.9" dst_ip="126.110.220.159" src_port="993" dst_port="52062"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.51666,1.26796,504,0 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="203.78.129.205" dst_ip="126.15.117.154" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.79922,1.40896,999,1 1 1 0 0 0 1 0 0 1 1 0,ntscUDPOther">
        <slice>
            <filter src_ip="104.167.220.76" src_port="5473" dst_port="5060"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.52819,1.96727,504,1 0 0 1 1 1 1 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="203.78.142.251" src_port="443"/>
            <filter dst_ip="163.45.23.249" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.51666,1.26796,504,0 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="163.45.117.249" dst_ip="18.222.212.7" src_port="47636" dst_port="443"/>
            <filter src_ip="163.45.117.249" dst_ip="18.222.212.7" src_port="47634" dst_port="443"/>
            <filter src_ip="163.45.117.249" dst_ip="18.222.212.7" src_port="47632" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.17708,1.13546,011,0 0 0 1 0 0 1 0 0 1 1 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="106.12.179.23"/>
            <filter dst_ip="89.247.69.180" dst_port="53467"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.51344,1.25243,504,0 0 0 1 0 0 0 0 0 1 1 1,malphfl">
        <slice>
            <filter src_ip="20.88.40.130" dst_ip="54.242.254.191" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.17708,1.13546,020,0 0 0 1 0 0 1 0 0 1 1 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="52.210.164.177"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.7417,1.36849,503,0 0 0 1 1 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="130.187.46.120" src_port="80"/>
            <filter src_ip="130.187.46.123" dst_ip="202.210.232.55" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.51344,1.25243,999,0 0 0 1 0 0 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="157.206.145.59" src_port="60093"/>
            <filter src_ip="157.206.145.59" src_port="60116"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.87463,1.40484,504,1 1 0 1 0 0 1 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="202.250.204.127"/>
            <filter dst_port="443"/>
            <filter src_ip="203.78.129.205" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.8827,1.42422,054,1 0 0 1 1 0 1 0 0 1 1 1,heavy_hitter">
        <slice>
            <filter src_ip="184.186.7.65" dst_ip="67.36.186.51" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.05339,1.1436,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="218.76.106.194" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1641013941"/>
        <to usec="0" sec="1641013953"/>
    </anomaly>
    <anomaly type="suspicious" value="1.05339,1.1436,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="120.220.181.103" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1641013543"/>
        <to usec="0" sec="1641013554"/>
    </anomaly>
    <anomaly type="suspicious" value="1.05339,1.1436,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="222.248.183.235" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1641013843"/>
        <to usec="0" sec="1641013844"/>
    </anomaly>
    <anomaly type="suspicious" value="1.05339,1.1436,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="222.248.183.236" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1641013843"/>
        <to usec="0" sec="1641013844"/>
    </anomaly>
    <anomaly type="suspicious" value="1.05339,1.1436,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="222.248.183.239" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1641013843"/>
        <to usec="0" sec="1641013844"/>
    </anomaly>
    <anomaly type="suspicious" value="1.05339,1.1436,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="110.97.253.227" dst_port="445"/>
        </slice>
        <from usec="0" sec="1641013263"/>
        <to usec="0" sec="1641013264"/>
    </anomaly>
    <anomaly type="suspicious" value="1.05339,1.1436,010,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="85.49.199.73" src_port="22"/>
        </slice>
        <from usec="0" sec="1641013982"/>
        <to usec="0" sec="1641013991"/>
    </anomaly>
    <anomaly type="suspicious" value="1.06311,1.15044,504,1 0 0 1 1 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.206.249.55" dst_ip="167.246.129.105" src_port="49002" dst_port="5938"/>
            <filter src_ip="157.206.249.55" dst_ip="18.222.254.242" src_port="49480" dst_port="443"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641014049"/>
    </anomaly>
    <anomaly type="suspicious" value="0.957242,1.17307,901,0 0 0 0 1 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641014028"/>
    </anomaly>
    <anomaly type="suspicious" value="0.957242,1.17307,901,0 0 0 0 1 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013848"/>
    </anomaly>
    <anomaly type="suspicious" value="0.952128,1.15627,999,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="203.78.141.135" dst_ip="183.124.50.208" src_port="10001" dst_port="7777"/>
            <filter src_ip="203.78.138.219" dst_ip="183.124.50.208" src_port="10001" dst_port="7777"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013398"/>
    </anomaly>
    <anomaly type="suspicious" value="0.952128,1.15627,504,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.206.21.33" dst_ip="180.72.191.104" dst_port="443"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013398"/>
    </anomaly>
    <anomaly type="suspicious" value="0.952128,1.15627,999,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="133.243.157.213" dst_ip="212.80.218.152" src_port="5900"/>
            <filter src_ip="157.206.59.184" dst_ip="212.80.218.152" src_port="5900"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013398"/>
    </anomaly>
    <anomaly type="suspicious" value="0.952128,1.15627,020,0 0 0 1 1 0 0 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="110.242.65.201"/>
        </slice>
        <from usec="0" sec="1641013201"/>
        <to usec="0" sec="1641013398"/>
    </anomaly>
    <anomaly type="suspicious" value="0.952128,1.15627,020,0 0 0 1 1 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="47.15.247.185"/>
        </slice>
        <from usec="0" sec="1641013207"/>
        <to usec="0" sec="1641013385"/>
    </anomaly>
    <anomaly type="suspicious" value="0.952128,1.15627,504,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.78.142.85" dst_ip="54.242.225.205" dst_port="443"/>
        </slice>
        <from usec="0" sec="1641013214"/>
        <to usec="0" sec="1641013398"/>
    </anomaly>
    <anomaly type="suspicious" value="0.952128,1.15627,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="163.45.254.20" dst_ip="13.235.56.36" dst_port="80"/>
            <filter src_ip="163.45.253.111" dst_ip="13.235.56.36" dst_port="80"/>
            <filter src_ip="163.45.254.200" dst_ip="13.235.56.36" dst_port="80"/>
        </slice>
        <from usec="0" sec="1641013220"/>
        <to usec="0" sec="1641013379"/>
    </anomaly>
    <anomaly type="suspicious" value="0.952128,1.15627,020,0 0 0 1 1 0 0 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="69.232.167.37"/>
        </slice>
        <from usec="0" sec="1641013235"/>
        <to usec="0" sec="1641013241"/>
    </anomaly>
    <anomaly type="suspicious" value="0.952128,1.15627,502,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="183.242.120.250" src_port="22"/>
        </slice>
        <from usec="0" sec="1641013243"/>
        <to usec="0" sec="1641013375"/>
    </anomaly>
    <anomaly type="suspicious" value="0.952128,1.15627,010,0 0 0 1 1 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="172.23.14.184" src_port="20805"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013488"/>
    </anomaly>
    <anomaly type="suspicious" value="0.952128,1.15627,020,0 0 0 1 1 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="167.46.173.237"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013758"/>
    </anomaly>
    <anomaly type="suspicious" value="0.952128,1.15627,999,0 0 0 1 1 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="162.113.225.41"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013578"/>
    </anomaly>
    <anomaly type="suspicious" value="0.952128,1.15627,020,0 0 0 1 1 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="45.112.52.255" dst_port="45386"/>
            <filter dst_ip="45.112.52.255"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013668"/>
    </anomaly>
    <anomaly type="suspicious" value="0.952128,1.15627,020,0 0 0 1 1 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.45.42.102" src_port="443"/>
            <filter dst_ip="163.45.42.102"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013668"/>
    </anomaly>
    <anomaly type="suspicious" value="0.952128,1.15627,504,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.125.201.61" dst_ip="13.242.23.220" dst_port="443"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013562"/>
    </anomaly>
    <anomaly type="suspicious" value="0.952128,1.15627,504,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.243.167.211" dst_ip="8.168.90.210" dst_port="443"/>
        </slice>
        <from usec="0" sec="1641013220"/>
        <to usec="0" sec="1641013834"/>
    </anomaly>
    <anomaly type="suspicious" value="0.952128,1.15627,999,0 0 0 1 1 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.251.114.35"/>
            <filter dst_ip="167.246.129.87"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013668"/>
    </anomaly>
    <anomaly type="suspicious" value="0.952128,1.15627,502,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.243.200.151" dst_ip="165.185.191.202" src_port="22"/>
        </slice>
        <from usec="0" sec="1641013259"/>
        <to usec="0" sec="1641013658"/>
    </anomaly>
    <anomaly type="suspicious" value="0.952128,1.15627,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.244.71.243" dst_ip="176.63.124.5" src_port="80"/>
        </slice>
        <from usec="0" sec="1641013424"/>
        <to usec="0" sec="1641013518"/>
    </anomaly>
    <anomaly type="suspicious" value="0.952128,1.15627,999,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="133.243.215.10" dst_ip="173.12.181.65" dst_port="8888"/>
            <filter src_ip="133.243.215.17" dst_ip="173.12.181.65" dst_port="8888"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013848"/>
    </anomaly>
    <anomaly type="suspicious" value="0.952128,1.15627,502,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.250.230.254" dst_ip="183.121.133.54" src_port="22"/>
        </slice>
        <from usec="0" sec="1641013243"/>
        <to usec="0" sec="1641013844"/>
    </anomaly>
    <anomaly type="suspicious" value="0.952128,1.15627,020,0 0 0 1 1 0 0 0 0 0 0 0,DDoSIC">
        <slice>
            <filter dst_ip="203.78.134.246"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013938"/>
    </anomaly>
    <anomaly type="suspicious" value="0.952128,1.15627,504,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="133.243.42.89" dst_ip="35.54.104.89" dst_port="443"/>
            <filter src_ip="133.243.40.84" dst_ip="35.54.104.89" dst_port="443"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013938"/>
    </anomaly>
    <anomaly type="suspicious" value="0.952128,1.15627,020,0 0 0 1 1 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="163.45.42.85"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013938"/>
    </anomaly>
    <anomaly type="suspicious" value="0.952128,1.15627,502,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.244.69.190" dst_ip="1.40.34.33" src_port="22"/>
        </slice>
        <from usec="0" sec="1641013230"/>
        <to usec="0" sec="1641013906"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10607,1.15432,999,0 0 0 1 1 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter dst_ip="162.113.225.99"/>
            <filter src_ip="203.78.141.185" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.952128,1.15627,010,0 0 0 1 1 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="119.219.247.160"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641014024"/>
    </anomaly>
    <anomaly type="suspicious" value="0.952128,1.15627,999,0 0 0 1 1 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.250.249.255"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641014025"/>
    </anomaly>
    <anomaly type="suspicious" value="0.995711,1.08808,504,1 0 0 1 0 0 1 0 0 1 0 0,mptmp">
        <slice>
            <filter dst_ip="35.213.41.113" dst_port="443"/>
            <filter dst_ip="52.32.12.170" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.821334,1.09015,020,1 0 0 1 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="54.129.195.3"/>
            <filter dst_ip="52.210.16.71"/>
            <filter dst_ip="52.209.158.210"/>
        </slice>
        <from usec="0" sec="1641013210"/>
        <to usec="0" sec="1641013577"/>
    </anomaly>
    <anomaly type="suspicious" value="0.700109,1.03315,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="104.243.198.165" src_port="32767" dst_port="38081"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.881791,1.11198,502,0 0 0 0 0 0 1 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="130.187.195.144"/>
            <filter src_ip="130.187.195.144"/>
            <filter src_ip="130.187.195.144" dst_port="80"/>
            <filter src_ip="130.187.195.144" dst_ip="116.45.42.213" dst_port="31767"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.693099,1.01404,999,0 0 0 1 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="130.187.44.232" dst_port="25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.700109,1.03315,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="130.187.44.201"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.700109,1.03315,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.243.205.222" dst_ip="24.102.96.186" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.700109,1.03315,502,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="133.105.135.244" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.693099,1.01404,504,0 0 0 1 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="157.206.159.202" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.693099,1.01404,010,0 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter dst_ip="133.251.87.102"/>
            <filter src_ip="185.241.252.31" src_port="46772" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.700109,1.03315,004,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="190.96.218.182"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.04791,1.05839,504,0 0 0 1 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="202.244.71.244" src_port="443"/>
            <filter src_ip="202.244.71.244" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.700109,1.03315,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="202.244.66.134" dst_ip="18.75.193.142" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.700109,1.03315,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="54.88.181.71"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.700109,1.03315,002,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="71.38.247.250" dst_port="137"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.700109,1.03315,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="92.9.70.210"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.700109,1.03315,020,0 0 0 0 0 0 0 0 0 1 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="107.132.243.216" src_port="3128"/>
            <filter dst_ip="107.132.243.216"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.04791,1.05839,504,0 0 0 1 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="203.78.129.202"/>
            <filter src_ip="202.250.202.134"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.700109,1.03315,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="14.132.224.201"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.700109,1.03315,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="151.101.180.2"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.700109,1.03315,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="152.198.127.127"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.700109,1.03315,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="163.45.94.119" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.700109,1.03315,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.45.114.135" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.700109,1.03315,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="31.149.93.30" dst_ip="163.45.3.122" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.700109,1.03315,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="163.45.131.181" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.700109,1.03315,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="172.49.131.51"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.700109,1.03315,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="202.125.201.51" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.700109,1.03315,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="202.101.170.125" dst_port="55383"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.700109,1.03315,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="203.78.132.221" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.881791,1.11198,999,0 0 0 0 0 0 1 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.78.141.64" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.700109,1.03315,020,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="203.78.141.247"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.700109,1.03315,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="203.78.141.185" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.05256,1.07671,504,0 0 0 0 0 0 0 0 0 1 1 0,mptpla">
        <slice>
            <filter dst_ip="203.78.143.121" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.700109,1.03315,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="216.94.198.39"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.700109,1.03315,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="31.149.93.30"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.700109,1.03315,020,0 0 0 0 0 0 0 0 0 1 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="35.92.177.255"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.700109,1.03315,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="133.105.65.87"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.693099,1.01404,999,0 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="133.243.107.1" src_port="25"/>
            <filter src_ip="133.227.135.135" dst_ip="5.131.50.132"/>
            <filter src_ip="133.227.135.135" src_port="465"/>
            <filter dst_ip="5.131.50.132" src_port="465"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.700109,1.03315,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="52.45.129.205"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.700109,1.03315,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="52.59.33.227"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.700109,1.03315,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="52.57.240.203"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.881791,1.11198,020,0 0 0 0 0 0 1 0 0 1 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="54.223.229.189"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.700109,1.03315,020,0 0 0 0 0 0 0 0 0 1 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="54.223.209.158"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.700109,1.03315,020,0 0 0 0 0 0 0 0 0 1 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="58.37.198.17"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.700109,1.03315,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="66.24.116.221"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.700109,1.03315,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="8.7.190.94"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.693099,1.01404,502,0 0 0 1 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="92.247.210.121" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.04791,1.05839,504,0 0 0 1 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.45.196.27" src_port="443"/>
            <filter dst_ip="163.45.196.27" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.05256,1.07671,020,0 0 0 0 0 0 0 0 0 1 1 0,ntscICec">
        <slice>
            <filter src_ip="113.198.78.243"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.04791,1.05839,999,0 0 0 1 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="163.45.179.109" src_port="25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.05256,1.07671,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="163.45.94.165" dst_ip="76.208.134.61" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.05256,1.07671,503,0 0 0 0 0 0 0 0 0 1 1 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.45.183.152" src_port="80"/>
            <filter src_ip="163.45.183.152" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.05256,1.07671,999,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="183.124.50.208" dst_ip="203.78.141.135" src_port="7777" dst_port="10001"/>
            <filter src_ip="183.124.50.208" dst_ip="203.78.138.219" src_port="7777" dst_port="10001"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.05256,1.07671,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="18.222.200.176" dst_ip="163.45.96.158" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.05256,1.07671,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="203.78.132.209" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.05256,1.07671,020,0 0 0 0 0 0 0 0 0 1 1 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="13.153.168.255"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.05256,1.07671,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.45.8.202" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.04791,1.05839,020,0 0 0 1 0 0 0 0 0 1 1 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="1.71.168.177"/>
            <filter dst_ip="61.123.238.33"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.05256,1.07671,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="203.78.138.37" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.700109,1.03315,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="157.206.78.12" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
