<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="notice" value="0.630042,1.02882,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="157.206.229.0" dst_ip="88.213.13.132" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1641013449"/>
        <to usec="0" sec="1641014097"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.78.142.251" dst_ip="198.7.100.165" src_port="52778" dst_port="8801" proto="udp"/>
        </slice>
        <from usec="0" sec="1641013201"/>
        <to usec="0" sec="1641013767"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.227.136.19" dst_ip="119.67.223.152" src_port="4500" dst_port="56540" proto="udp"/>
        </slice>
        <from usec="0" sec="1641013963"/>
        <to usec="0" sec="1641014021"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.243.19.199" dst_ip="206.56.25.148" src_port="36452" dst_port="10000" proto="tcp"/>
        </slice>
        <from usec="0" sec="1641013507"/>
        <to usec="0" sec="1641013516"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="152.198.127.127" proto="udp"/>
        </slice>
        <from usec="0" sec="1641013236"/>
        <to usec="0" sec="1641013238"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.45.52.72" dst_ip="40.13.133.110" src_port="57032" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1641013980"/>
        <to usec="0" sec="1641013982"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="152.195.232.182" dst_ip="163.45.108.111" src_port="38276" dst_port="55698" proto="udp"/>
        </slice>
        <from usec="0" sec="1641013259"/>
        <to usec="0" sec="1641014048"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,010,1 0 0 0 0 0 0 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="133.251.114.22" dst_ip="88.95.74.24" dst_port="44231" proto="tcp"/>
        </slice>
        <from usec="0" sec="1641013916"/>
        <to usec="0" sec="1641013918"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.206.173.21" dst_ip="52.213.81.151" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1641013290"/>
        <to usec="0" sec="1641013405"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,010,1 0 0 0 0 0 0 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="133.251.114.42" dst_ip="88.95.74.24" dst_port="63216" proto="tcp"/>
        </slice>
        <from usec="0" sec="1641013597"/>
        <to usec="0" sec="1641013599"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.47.82.2" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013382"/>
        <to usec="0" sec="1641013385"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.29.82.90" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="1641014060"/>
        <to usec="0" sec="1641014082"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="139.76.128.1" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013330"/>
        <to usec="0" sec="1641013333"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.47.152.249" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013351"/>
        <to usec="0" sec="1641013892"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.47.151.253" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013626"/>
        <to usec="0" sec="1641013630"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.47.143.6" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013696"/>
        <to usec="0" sec="1641013901"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="151.105.96.5" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013218"/>
        <to usec="0" sec="1641013824"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="143.67.175.250" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013409"/>
        <to usec="0" sec="1641013412"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.47.80.1" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013549"/>
        <to usec="0" sec="1641013551"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.47.67.5" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013342"/>
        <to usec="0" sec="1641013346"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.47.72.6" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013797"/>
        <to usec="0" sec="1641013801"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.47.76.6" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013496"/>
        <to usec="0" sec="1641014072"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="139.76.129.1" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013967"/>
        <to usec="0" sec="1641013970"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.47.157.5" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013800"/>
        <to usec="0" sec="1641013803"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.47.140.249"/>
        </slice>
        <from usec="0" sec="1641013711"/>
        <to usec="0" sec="1641013713"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="151.105.102.253" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013285"/>
        <to usec="0" sec="1641013288"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.47.91.6" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013937"/>
        <to usec="0" sec="1641013940"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.47.64.253" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013339"/>
        <to usec="0" sec="1641013343"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.47.74.250" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013283"/>
        <to usec="0" sec="1641013287"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="143.67.178.250" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013549"/>
        <to usec="0" sec="1641013552"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.47.79.1" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013803"/>
        <to usec="0" sec="1641013806"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.47.15.1" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013308"/>
        <to usec="0" sec="1641013311"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,012,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="183.40.213.63" dst_port="65529"/>
        </slice>
        <from usec="0" sec="1641014036"/>
        <to usec="0" sec="1641014040"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="121.69.234.36" dst_port="10022" proto="tcp"/>
        </slice>
        <from usec="0" sec="1641013558"/>
        <to usec="0" sec="1641013563"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="2.181.238.22" dst_port="445" proto="tcp"/>
        </slice>
        <from usec="0" sec="1641013401"/>
        <to usec="0" sec="1641013402"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.47.159.1" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013612"/>
        <to usec="0" sec="1641013615"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.47.156.1" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013593"/>
        <to usec="0" sec="1641013596"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="139.76.133.5" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013693"/>
        <to usec="0" sec="1641013697"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.47.153.6" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013985"/>
        <to usec="0" sec="1641013989"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.47.155.250" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013536"/>
        <to usec="0" sec="1641013710"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.47.150.250"/>
        </slice>
        <from usec="0" sec="1641013583"/>
        <to usec="0" sec="1641013586"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="139.76.139.1" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013744"/>
        <to usec="0" sec="1641013748"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.47.149.5" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013953"/>
        <to usec="0" sec="1641013957"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.47.145.6" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013787"/>
        <to usec="0" sec="1641013790"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.47.141.2" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013863"/>
        <to usec="0" sec="1641013867"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.47.136.2" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641014083"/>
        <to usec="0" sec="1641014087"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="143.67.163.254" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013361"/>
        <to usec="0" sec="1641013364"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.47.93.1" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013496"/>
        <to usec="0" sec="1641013500"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="157.206.242.145" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013317"/>
        <to usec="0" sec="1641013320"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.47.89.5" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013333"/>
        <to usec="0" sec="1641013469"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="151.105.105.1" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013404"/>
        <to usec="0" sec="1641013407"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="151.105.107.253" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013926"/>
        <to usec="0" sec="1641013929"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.47.84.254" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013306"/>
        <to usec="0" sec="1641013310"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="151.105.108.249" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641014013"/>
        <to usec="0" sec="1641014016"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="143.67.173.1" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013937"/>
        <to usec="0" sec="1641013940"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="151.105.126.250" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013369"/>
        <to usec="0" sec="1641013373"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.47.70.249" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641014091"/>
        <to usec="0" sec="1641014094"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="151.105.125.253" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013565"/>
        <to usec="0" sec="1641013569"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.47.69.1" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013256"/>
        <to usec="0" sec="1641013259"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.47.65.249" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013697"/>
        <to usec="0" sec="1641013784"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.47.73.5" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013764"/>
        <to usec="0" sec="1641013768"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.47.1.2" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013603"/>
        <to usec="0" sec="1641013846"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,011,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="121.37.32.115" src_port="6379"/>
        </slice>
        <from usec="0" sec="1641013989"/>
        <to usec="0" sec="1641013991"/>
    </anomaly>
    <anomaly type="notice" value="0.630042,1.02882,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="143.67.164.250" proto="icmp"/>
        </slice>
        <from usec="0" sec="1641013296"/>
        <to usec="0" sec="1641013298"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641014028"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013848"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="104.201.127.225"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013308"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="192.126.171.92"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013307"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="190.119.203.25"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013308"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="162.113.225.25"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013308"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,010,0 0 0 1 0 0 0 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="159.200.159.247"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013308"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.243.40.88"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013308"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="213.224.74.135"/>
        </slice>
        <from usec="0" sec="1641013202"/>
        <to usec="0" sec="1641013306"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="20.43.31.26"/>
        </slice>
        <from usec="0" sec="1641013202"/>
        <to usec="0" sec="1641013305"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="135.116.56.81"/>
        </slice>
        <from usec="0" sec="1641013205"/>
        <to usec="0" sec="1641013234"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="104.201.127.195"/>
        </slice>
        <from usec="0" sec="1641013205"/>
        <to usec="0" sec="1641013398"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="13.158.137.83"/>
        </slice>
        <from usec="0" sec="1641013206"/>
        <to usec="0" sec="1641013834"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="159.94.176.246"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013398"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="139.76.57.47"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013398"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="104.210.132.243"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013398"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="185.168.25.136"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013398"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="210.68.153.12"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013398"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="54.187.190.151"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013389"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="173.228.81.38"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013398"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="223.245.61.125"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013398"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="133.251.114.79"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013398"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="52.139.205.2"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013380"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="13.235.223.215"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013388"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="212.220.216.161"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013398"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="201.85.95.248"/>
        </slice>
        <from usec="0" sec="1641013201"/>
        <to usec="0" sec="1641013397"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="133.251.114.94"/>
        </slice>
        <from usec="0" sec="1641013201"/>
        <to usec="0" sec="1641013398"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="13.235.10.243"/>
        </slice>
        <from usec="0" sec="1641013201"/>
        <to usec="0" sec="1641013667"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.38.251.45"/>
        </slice>
        <from usec="0" sec="1641013202"/>
        <to usec="0" sec="1641013390"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="103.52.212.250"/>
        </slice>
        <from usec="0" sec="1641013202"/>
        <to usec="0" sec="1641013398"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="35.66.183.187"/>
        </slice>
        <from usec="0" sec="1641013202"/>
        <to usec="0" sec="1641013398"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="3.76.187.103"/>
        </slice>
        <from usec="0" sec="1641013203"/>
        <to usec="0" sec="1641013397"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="143.187.187.164" dst_ip="163.45.191.3" dst_port="33434"/>
            <filter src_ip="143.187.187.184" dst_ip="163.45.191.3" dst_port="33434"/>
        </slice>
        <from usec="0" sec="1641013203"/>
        <to usec="0" sec="1641013398"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="163.64.91.81"/>
        </slice>
        <from usec="0" sec="1641013205"/>
        <to usec="0" sec="1641013376"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,502,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="222.189.213.255" src_port="22"/>
        </slice>
        <from usec="0" sec="1641013208"/>
        <to usec="0" sec="1641013393"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="208.48.138.17"/>
        </slice>
        <from usec="0" sec="1641013213"/>
        <to usec="0" sec="1641013370"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="52.171.252.140"/>
        </slice>
        <from usec="0" sec="1641013240"/>
        <to usec="0" sec="1641013339"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="66.28.220.161"/>
        </slice>
        <from usec="0" sec="1641013265"/>
        <to usec="0" sec="1641013384"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="51.91.26.253"/>
        </slice>
        <from usec="0" sec="1641013266"/>
        <to usec="0" sec="1641013396"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="3.45.82.24"/>
        </slice>
        <from usec="0" sec="1641013279"/>
        <to usec="0" sec="1641013348"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="190.237.199.59"/>
        </slice>
        <from usec="0" sec="1641013378"/>
        <to usec="0" sec="1641013488"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="104.167.125.226"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013486"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="181.214.198.158"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013488"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="162.113.225.42"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013486"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="167.46.181.77"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013488"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="8.7.137.202"/>
        </slice>
        <from usec="0" sec="1641013202"/>
        <to usec="0" sec="1641013373"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="216.252.159.0"/>
        </slice>
        <from usec="0" sec="1641013203"/>
        <to usec="0" sec="1641013449"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.154.150.53"/>
        </slice>
        <from usec="0" sec="1641013204"/>
        <to usec="0" sec="1641013453"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="54.187.200.111"/>
        </slice>
        <from usec="0" sec="1641013209"/>
        <to usec="0" sec="1641013488"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="192.207.220.151" dst_port="443"/>
            <filter src_ip="192.207.220.151" dst_port="80"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013373"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="203.78.137.8"/>
        </slice>
        <from usec="0" sec="1641013234"/>
        <to usec="0" sec="1641013478"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="66.28.220.225"/>
        </slice>
        <from usec="0" sec="1641013353"/>
        <to usec="0" sec="1641013418"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="126.243.240.137"/>
        </slice>
        <from usec="0" sec="1641013454"/>
        <to usec="0" sec="1641013461"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="52.59.235.221"/>
        </slice>
        <from usec="0" sec="1641013467"/>
        <to usec="0" sec="1641013474"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="162.113.225.124"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013578"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="104.128.222.99" src_port="55920" dst_port="6002"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013578"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.251.83.52"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013573"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.96.13.96"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013568"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,051,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.251.114.24"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013575"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="141.226.52.165"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013578"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="167.246.129.116"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013578"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="62.73.231.148"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013578"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="181.214.198.47"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013577"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="160.194.145.247"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013576"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,020,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="71.38.173.199"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013573"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="132.29.242.112"/>
        </slice>
        <from usec="0" sec="1641013202"/>
        <to usec="0" sec="1641013576"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="64.190.198.100"/>
        </slice>
        <from usec="0" sec="1641013202"/>
        <to usec="0" sec="1641013578"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="184.145.138.131"/>
        </slice>
        <from usec="0" sec="1641013203"/>
        <to usec="0" sec="1641013578"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.45.108.96"/>
        </slice>
        <from usec="0" sec="1641013204"/>
        <to usec="0" sec="1641013573"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="13.209.132.61"/>
        </slice>
        <from usec="0" sec="1641013209"/>
        <to usec="0" sec="1641013577"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="17.244.210.252"/>
        </slice>
        <from usec="0" sec="1641013211"/>
        <to usec="0" sec="1641013521"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="13.5.114.188"/>
        </slice>
        <from usec="0" sec="1641013213"/>
        <to usec="0" sec="1641013576"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="14.128.169.3"/>
        </slice>
        <from usec="0" sec="1641013225"/>
        <to usec="0" sec="1641013555"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="45.121.95.154"/>
        </slice>
        <from usec="0" sec="1641013241"/>
        <to usec="0" sec="1641013416"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="137.72.13.195"/>
        </slice>
        <from usec="0" sec="1641013242"/>
        <to usec="0" sec="1641013550"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="20.185.182.158"/>
        </slice>
        <from usec="0" sec="1641013281"/>
        <to usec="0" sec="1641013565"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter src_ip="124.35.35.190"/>
        </slice>
        <from usec="0" sec="1641013421"/>
        <to usec="0" sec="1641013432"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="195.110.4.172"/>
        </slice>
        <from usec="0" sec="1641013429"/>
        <to usec="0" sec="1641013476"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,011,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="43.163.217.95"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013665"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="71.38.247.251"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013668"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="172.49.130.234"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013668"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="54.158.126.62"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013668"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.45.164.189" dst_port="443"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013668"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.78.150.18" src_port="443"/>
            <filter dst_ip="203.78.150.18"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013668"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="93.159.7.233"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013668"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="78.159.225.66"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013847"/>
    </anomaly>
    <anomaly type="notice" value="0.622243,1.00962,020,1 0 0 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="151.105.119.5"/>
        </slice>
        <from usec="0" sec="1641013201"/>
        <to usec="0" sec="1641013665"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="24.166.37.29" dst_ip="163.45.173.38" dst_port="80"/>
        </slice>
        <from usec="0" sec="1641013202"/>
        <to usec="0" sec="1641013661"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="18.222.216.132"/>
        </slice>
        <from usec="0" sec="1641013203"/>
        <to usec="0" sec="1641013646"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.206.249.55" dst_ip="13.235.39.10" dst_port="53"/>
        </slice>
        <from usec="0" sec="1641013204"/>
        <to usec="0" sec="1641013668"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="54.64.182.206"/>
        </slice>
        <from usec="0" sec="1641013204"/>
        <to usec="0" sec="1641013633"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="217.174.52.134"/>
        </slice>
        <from usec="0" sec="1641013204"/>
        <to usec="0" sec="1641013668"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="61.90.227.135"/>
        </slice>
        <from usec="0" sec="1641013207"/>
        <to usec="0" sec="1641013663"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="163.45.66.250"/>
        </slice>
        <from usec="0" sec="1641013208"/>
        <to usec="0" sec="1641013666"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="81.238.7.150"/>
        </slice>
        <from usec="0" sec="1641013219"/>
        <to usec="0" sec="1641013668"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="140.174.41.182"/>
        </slice>
        <from usec="0" sec="1641013222"/>
        <to usec="0" sec="1641013664"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="208.59.176.97"/>
        </slice>
        <from usec="0" sec="1641013317"/>
        <to usec="0" sec="1641013667"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="124.236.158.150"/>
        </slice>
        <from usec="0" sec="1641013399"/>
        <to usec="0" sec="1641013662"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="75.81.199.170"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013758"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.227.134.152" dst_ip="212.220.246.0" src_port="443"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013758"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="117.151.245.74"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013743"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="121.251.104.239" dst_port="23"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013758"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="222.189.226.118" src_port="8083"/>
            <filter dst_ip="222.189.226.118"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013938"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="167.246.129.19"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013758"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="54.240.103.218"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013848"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="218.90.165.118"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013754"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="128.56.236.171"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013758"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,010,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="138.56.84.6" dst_ip="202.101.172.142" dst_port="80"/>
            <filter src_ip="138.56.84.6" dst_ip="202.101.172.142" dst_port="443"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013758"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="60.113.66.219"/>
        </slice>
        <from usec="0" sec="1641013203"/>
        <to usec="0" sec="1641013750"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="165.17.172.117"/>
        </slice>
        <from usec="0" sec="1641013205"/>
        <to usec="0" sec="1641013758"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="18.79.21.150"/>
        </slice>
        <from usec="0" sec="1641013206"/>
        <to usec="0" sec="1641013739"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="202.125.201.52" src_port="443"/>
        </slice>
        <from usec="0" sec="1641013206"/>
        <to usec="0" sec="1641013757"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.251.169.154"/>
        </slice>
        <from usec="0" sec="1641013208"/>
        <to usec="0" sec="1641013737"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="203.78.130.230" dst_port="53"/>
            <filter src_ip="203.145.62.62" dst_ip="203.78.130.230" src_port="53"/>
            <filter src_ip="203.145.62.63" dst_ip="203.78.130.230" src_port="53"/>
        </slice>
        <from usec="0" sec="1641013208"/>
        <to usec="0" sec="1641013755"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="162.8.28.24"/>
        </slice>
        <from usec="0" sec="1641013222"/>
        <to usec="0" sec="1641013757"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.125.201.33"/>
        </slice>
        <from usec="0" sec="1641013236"/>
        <to usec="0" sec="1641013758"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="146.203.23.251"/>
        </slice>
        <from usec="0" sec="1641013252"/>
        <to usec="0" sec="1641013997"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="3.197.46.85"/>
        </slice>
        <from usec="0" sec="1641013288"/>
        <to usec="0" sec="1641013703"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,012,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="173.223.199.116"/>
        </slice>
        <from usec="0" sec="1641013449"/>
        <to usec="0" sec="1641013754"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="112.245.79.209"/>
        </slice>
        <from usec="0" sec="1641013507"/>
        <to usec="0" sec="1641013758"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="52.141.25.60"/>
        </slice>
        <from usec="0" sec="1641013524"/>
        <to usec="0" sec="1641013738"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="135.116.56.89"/>
        </slice>
        <from usec="0" sec="1641013637"/>
        <to usec="0" sec="1641013741"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="91.239.6.9" src_port="5900"/>
            <filter dst_ip="91.239.6.9"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013848"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="65.130.200.215"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013847"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.251.138.115"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013808"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="47.240.216.140"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013848"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.96.13.155"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013848"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="159.141.153.187"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013834"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="3.43.123.245"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013844"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.45.117.186" src_port="443"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013848"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="163.45.129.88" dst_port="33434"/>
            <filter dst_ip="163.45.129.88"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013938"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,502,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.78.129.193"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013848"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="43.252.198.94"/>
        </slice>
        <from usec="0" sec="1641013201"/>
        <to usec="0" sec="1641013848"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="223.245.12.104"/>
        </slice>
        <from usec="0" sec="1641013201"/>
        <to usec="0" sec="1641013734"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="130.187.192.12"/>
        </slice>
        <from usec="0" sec="1641013201"/>
        <to usec="0" sec="1641013848"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="180.187.124.53"/>
        </slice>
        <from usec="0" sec="1641013202"/>
        <to usec="0" sec="1641013845"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="209.209.190.94"/>
        </slice>
        <from usec="0" sec="1641013202"/>
        <to usec="0" sec="1641013838"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="45.247.62.222"/>
        </slice>
        <from usec="0" sec="1641013202"/>
        <to usec="0" sec="1641013848"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="133.243.175.253"/>
        </slice>
        <from usec="0" sec="1641013210"/>
        <to usec="0" sec="1641013848"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="46.91.108.144"/>
        </slice>
        <from usec="0" sec="1641013214"/>
        <to usec="0" sec="1641013844"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.206.108.146"/>
        </slice>
        <from usec="0" sec="1641013226"/>
        <to usec="0" sec="1641013822"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="185.230.211.105"/>
        </slice>
        <from usec="0" sec="1641013228"/>
        <to usec="0" sec="1641013810"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="34.42.62.130"/>
        </slice>
        <from usec="0" sec="1641013228"/>
        <to usec="0" sec="1641013797"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="18.36.237.182"/>
        </slice>
        <from usec="0" sec="1641013231"/>
        <to usec="0" sec="1641013829"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="185.54.181.123"/>
        </slice>
        <from usec="0" sec="1641013382"/>
        <to usec="0" sec="1641013808"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="47.11.217.186"/>
        </slice>
        <from usec="0" sec="1641013516"/>
        <to usec="0" sec="1641013844"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="35.88.238.206"/>
        </slice>
        <from usec="0" sec="1641013700"/>
        <to usec="0" sec="1641013801"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="8.63.137.198"/>
        </slice>
        <from usec="0" sec="1641013728"/>
        <to usec="0" sec="1641013737"/>
    </anomaly>
    <anomaly type="notice" value="0.622243,1.00962,020,1 0 0 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="129.47.137.6"/>
        </slice>
        <from usec="0" sec="1641013412"/>
        <to usec="0" sec="1641013753"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="203.78.137.8"/>
        </slice>
        <from usec="0" sec="1641013809"/>
        <to usec="0" sec="1641013847"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="80.205.247.209"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013938"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="167.46.173.195"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013938"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="182.44.162.53"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013896"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="143.145.19.86"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013938"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,020,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.78.142.88"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013938"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="87.30.133.140"/>
        </slice>
        <from usec="0" sec="1641013201"/>
        <to usec="0" sec="1641013938"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="151.252.19.30"/>
        </slice>
        <from usec="0" sec="1641013201"/>
        <to usec="0" sec="1641013919"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,ipv4gretun">
        <slice>
            <filter src_ip="133.97.37.233"/>
        </slice>
        <from usec="0" sec="1641013201"/>
        <to usec="0" sec="1641013930"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,020,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.45.120.74"/>
        </slice>
        <from usec="0" sec="1641013201"/>
        <to usec="0" sec="1641013927"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="203.78.135.92" dst_ip="203.78.141.18" dst_port="123"/>
        </slice>
        <from usec="0" sec="1641013201"/>
        <to usec="0" sec="1641013938"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="77.175.105.168"/>
        </slice>
        <from usec="0" sec="1641013203"/>
        <to usec="0" sec="1641013933"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="180.187.124.83"/>
        </slice>
        <from usec="0" sec="1641013203"/>
        <to usec="0" sec="1641013937"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,503,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.243.46.222" dst_ip="188.172.202.192"/>
            <filter src_ip="133.243.46.222" dst_port="80"/>
            <filter src_ip="133.243.46.222" dst_port="443"/>
            <filter src_ip="157.206.78.124" dst_ip="188.172.202.192"/>
            <filter src_ip="157.206.78.124" dst_port="80"/>
            <filter dst_ip="188.172.202.192" dst_port="80"/>
            <filter dst_ip="188.172.202.192" dst_port="443"/>
        </slice>
        <from usec="0" sec="1641013203"/>
        <to usec="0" sec="1641013896"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="54.149.205.235"/>
        </slice>
        <from usec="0" sec="1641013205"/>
        <to usec="0" sec="1641013937"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="103.177.139.37"/>
        </slice>
        <from usec="0" sec="1641013205"/>
        <to usec="0" sec="1641013938"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="18.222.216.237"/>
        </slice>
        <from usec="0" sec="1641013208"/>
        <to usec="0" sec="1641013929"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.139.46.242"/>
        </slice>
        <from usec="0" sec="1641013208"/>
        <to usec="0" sec="1641013930"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="130.8.69.49"/>
        </slice>
        <from usec="0" sec="1641013209"/>
        <to usec="0" sec="1641013937"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="8.5.160.217"/>
        </slice>
        <from usec="0" sec="1641013216"/>
        <to usec="0" sec="1641013914"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="177.88.206.67"/>
        </slice>
        <from usec="0" sec="1641013224"/>
        <to usec="0" sec="1641013931"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="126.222.207.46"/>
        </slice>
        <from usec="0" sec="1641013668"/>
        <to usec="0" sec="1641013820"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="101.226.208.35"/>
        </slice>
        <from usec="0" sec="1641013690"/>
        <to usec="0" sec="1641013917"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="163.68.91.249"/>
        </slice>
        <from usec="0" sec="1641013793"/>
        <to usec="0" sec="1641013813"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="123.254.113.22"/>
        </slice>
        <from usec="0" sec="1641013835"/>
        <to usec="0" sec="1641013863"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,011,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="192.0.218.107" src_port="3351"/>
        </slice>
        <from usec="0" sec="1641013864"/>
        <to usec="0" sec="1641013938"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="167.46.173.232"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641014028"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.45.240.90" src_port="443"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641014028"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="78.109.73.34"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641014028"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="54.88.181.71"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641014028"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.78.130.162" dst_port="53"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641014027"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="51.174.4.232"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641014028"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,020,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.250.197.53"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641014017"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="185.183.107.7" src_port="53"/>
            <filter dst_ip="185.183.107.7" src_port="443"/>
            <filter dst_ip="185.183.107.7" src_port="80"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641014028"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,020,0 0 0 1 0 0 0 0 0 0 0 0,DDoSIC">
        <slice>
            <filter dst_ip="203.78.136.146"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641014028"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="159.216.249.88"/>
        </slice>
        <from usec="0" sec="1641013201"/>
        <to usec="0" sec="1641014028"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,020,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.45.165.7"/>
        </slice>
        <from usec="0" sec="1641013202"/>
        <to usec="0" sec="1641014027"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,020,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.45.177.1"/>
        </slice>
        <from usec="0" sec="1641013203"/>
        <to usec="0" sec="1641014024"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.177.147.176"/>
        </slice>
        <from usec="0" sec="1641013203"/>
        <to usec="0" sec="1641014027"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="50.45.37.167"/>
        </slice>
        <from usec="0" sec="1641013204"/>
        <to usec="0" sec="1641014026"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="13.204.62.215"/>
        </slice>
        <from usec="0" sec="1641013204"/>
        <to usec="0" sec="1641014026"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="180.187.124.31"/>
        </slice>
        <from usec="0" sec="1641013205"/>
        <to usec="0" sec="1641014028"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="104.201.127.195"/>
        </slice>
        <from usec="0" sec="1641013205"/>
        <to usec="0" sec="1641014028"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="157.206.249.55"/>
        </slice>
        <from usec="0" sec="1641013206"/>
        <to usec="0" sec="1641014024"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,011,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="62.45.148.156"/>
        </slice>
        <from usec="0" sec="1641013208"/>
        <to usec="0" sec="1641014000"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="167.46.181.44"/>
        </slice>
        <from usec="0" sec="1641013209"/>
        <to usec="0" sec="1641014028"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,020,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.45.34.254"/>
        </slice>
        <from usec="0" sec="1641013209"/>
        <to usec="0" sec="1641014024"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,010,0 0 0 1 0 0 0 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="143.145.37.17" dst_ip="133.251.189.36"/>
        </slice>
        <from usec="0" sec="1641013210"/>
        <to usec="0" sec="1641013992"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,020,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.227.187.75"/>
        </slice>
        <from usec="0" sec="1641013210"/>
        <to usec="0" sec="1641014020"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="47.9.166.203"/>
        </slice>
        <from usec="0" sec="1641013213"/>
        <to usec="0" sec="1641014020"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.45.3.120"/>
        </slice>
        <from usec="0" sec="1641013234"/>
        <to usec="0" sec="1641014025"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="64.138.45.146"/>
        </slice>
        <from usec="0" sec="1641013256"/>
        <to usec="0" sec="1641013979"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="143.5.202.233"/>
        </slice>
        <from usec="0" sec="1641013544"/>
        <to usec="0" sec="1641014028"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="54.206.117.92"/>
        </slice>
        <from usec="0" sec="1641013675"/>
        <to usec="0" sec="1641013987"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,502,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="204.51.46.66"/>
        </slice>
        <from usec="0" sec="1641013696"/>
        <to usec="0" sec="1641014028"/>
    </anomaly>
    <anomaly type="notice" value="0.404397,1.01627,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="119.114.54.123"/>
        </slice>
        <from usec="0" sec="1641013836"/>
        <to usec="0" sec="1641013923"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="35.72.129.52"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013246"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.78.132.77"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013246"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="200.133.1.150" src_port="3283"/>
            <filter src_ip="130.187.3.76" dst_ip="200.133.1.150" src_port="3702"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013291"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="89.247.69.180" dst_port="5038"/>
        </slice>
        <from usec="0" sec="1641013425"/>
        <to usec="0" sec="1641013471"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="3.17.177.6"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.671521,1.09631,020,0 0 0 1 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="163.45.224.5"/>
        </slice>
        <from usec="0" sec="1641013211"/>
        <to usec="0" sec="1641013658"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="69.232.167.1"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="204.51.46.66"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.45.216.242"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="52.211.109.26"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="54.197.137.36"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="161.132.50.221"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="220.56.8.43"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,999,0 0 0 0 0 0 1 0 0 0 0 0,DDoSUDP">
        <slice>
            <filter dst_ip="38.89.4.53"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="35.200.235.215"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="52.215.205.43"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="44.202.97.47"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="44.195.45.212"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="54.215.54.203"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.250.226.204"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="18.20.103.62"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="44.202.74.222"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="3.193.53.63"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,999,0 0 0 0 0 0 1 0 0 0 0 0,DDoSUDP">
        <slice>
            <filter dst_ip="209.209.189.68"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.78.135.68" dst_port="53"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="18.222.254.242"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="69.232.165.137"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="18.17.206.76"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="3.205.52.179"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="121.214.24.114"/>
            <filter dst_ip="121.214.24.114" src_port="2375" dst_port="53275"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="52.210.53.88"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="18.45.57.88"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="133.105.135.244"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="54.140.42.168"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="34.26.227.105"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="103.172.35.187"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,052,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="49.49.247.98" src_port="22"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="3.17.238.136"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="34.55.112.120"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="54.196.113.95"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="108.140.149.106" dst_ip="203.78.142.124" src_port="53"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,011,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="120.53.98.1"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="54.73.236.110"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="13.253.20.110"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.45.179.109"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="52.139.236.23"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="3.206.43.153"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="44.202.236.101"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="54.236.220.60"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="18.51.103.216"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="34.55.149.210"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="3.24.202.46"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.45.40.167"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="34.44.218.181"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="100.84.99.85"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="44.198.161.223"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="34.48.145.132"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.671521,1.09631,020,0 0 0 1 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="35.200.155.188"/>
        </slice>
        <from usec="0" sec="1641013253"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="34.28.89.181"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="15.208.255.36"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="54.235.234.82"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="3.224.129.173"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="34.17.112.111"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="3.192.82.251"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="54.237.124.76"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="3.174.40.78"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.671521,1.09631,020,0 0 0 1 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="35.94.184.79"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013646"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="3.196.230.113"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="54.235.245.27"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="35.89.48.211"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.671521,1.09631,999,0 0 0 1 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.243.90.12" dst_ip="64.83.56.245" dst_port="9350"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641013561"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="18.92.61.96"/>
        </slice>
        <from usec="0" sec="1641013560"/>
        <to usec="0" sec="1641013606"/>
    </anomaly>
    <anomaly type="notice" value="0.671521,1.09631,010,0 0 0 1 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="121.39.59.106" src_port="53391" dst_port="2375"/>
        </slice>
        <from usec="0" sec="1641013232"/>
        <to usec="0" sec="1641013753"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="167.56.235.240" src_port="53558" dst_port="12567"/>
        </slice>
        <from usec="0" sec="1641013560"/>
        <to usec="0" sec="1641013606"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="121.214.24.114" src_port="53641" dst_port="2376"/>
        </slice>
        <from usec="0" sec="1641013695"/>
        <to usec="0" sec="1641013741"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="69.232.167.29"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013876"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="2.77.121.57"/>
        </slice>
        <from usec="0" sec="1641013830"/>
        <to usec="0" sec="1641013876"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="52.211.126.184"/>
        </slice>
        <from usec="0" sec="1641013830"/>
        <to usec="0" sec="1641013876"/>
    </anomaly>
    <anomaly type="notice" value="0.671521,1.09631,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.78.141.64" dst_port="53"/>
        </slice>
        <from usec="0" sec="1641013515"/>
        <to usec="0" sec="1641013892"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="16.92.77.125"/>
        </slice>
        <from usec="0" sec="1641013830"/>
        <to usec="0" sec="1641013876"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="52.215.196.133"/>
        </slice>
        <from usec="0" sec="1641013830"/>
        <to usec="0" sec="1641013876"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="18.24.207.135"/>
        </slice>
        <from usec="0" sec="1641013830"/>
        <to usec="0" sec="1641013876"/>
    </anomaly>
    <anomaly type="notice" value="0.671521,1.09631,020,0 0 0 1 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="133.243.98.99"/>
            <filter dst_ip="52.134.70.115"/>
        </slice>
        <from usec="0" sec="1641013210"/>
        <to usec="0" sec="1641013916"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="3.226.143.235"/>
        </slice>
        <from usec="0" sec="1641013830"/>
        <to usec="0" sec="1641013876"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="121.214.24.114"/>
        </slice>
        <from usec="0" sec="1641013965"/>
        <to usec="0" sec="1641014011"/>
    </anomaly>
    <anomaly type="notice" value="0.678753,1.11401,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="192.0.220.200" dst_port="3351"/>
        </slice>
        <from usec="0" sec="1641013965"/>
        <to usec="0" sec="1641014011"/>
    </anomaly>
    <anomaly type="notice" value="0.671521,1.09631,020,0 0 0 1 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="52.209.243.135"/>
            <filter dst_ip="16.86.140.183"/>
        </slice>
        <from usec="0" sec="1641013200"/>
        <to usec="0" sec="1641014021"/>
    </anomaly>
</admd:annotation>
