<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="suspicious" value="0.96145,1.27569,504,1 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="203.125.49.248"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="118.10.47.190" src_port="30129" dst_port="22"/>
        </slice>
        <from usec="0" sec="1675314873"/>
        <to usec="0" sec="1675314875"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,504,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="74.114.235.115" dst_ip="150.198.143.46" src_port="443" dst_port="65482"/>
        </slice>
        <from usec="0" sec="1675314253"/>
        <to usec="0" sec="1675314256"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="3.15.161.109"/>
        </slice>
        <from usec="0" sec="1675314067"/>
        <to usec="0" sec="1675314068"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="54.222.123.184"/>
        </slice>
        <from usec="0" sec="1675314068"/>
        <to usec="0" sec="1675314069"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="132.158.160.34" src_port="10" dst_port="22"/>
        </slice>
        <from usec="0" sec="1675314187"/>
        <to usec="0" sec="1675314189"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="121.88.151.25" src_port="31929" dst_port="22"/>
        </slice>
        <from usec="0" sec="1675314138"/>
        <to usec="0" sec="1675314139"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="15.167.111.185"/>
        </slice>
        <from usec="0" sec="1675314063"/>
        <to usec="0" sec="1675314064"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="3.236.52.60"/>
        </slice>
        <from usec="0" sec="1675314068"/>
        <to usec="0" sec="1675314069"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="18.69.6.77"/>
        </slice>
        <from usec="0" sec="1675314067"/>
        <to usec="0" sec="1675314068"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="15.167.34.248"/>
        </slice>
        <from usec="0" sec="1675314063"/>
        <to usec="0" sec="1675314064"/>
    </anomaly>
    <anomaly type="suspicious" value="1.4295,1.49747,020,1 1 1 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="18.11.236.31"/>
        </slice>
        <from usec="0" sec="1675314003"/>
        <to usec="0" sec="1675314637"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="54.174.35.86"/>
        </slice>
        <from usec="0" sec="1675314068"/>
        <to usec="0" sec="1675314069"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="183.227.134.190" src_port="36745" dst_port="22"/>
        </slice>
        <from usec="0" sec="1675314614"/>
        <to usec="0" sec="1675314615"/>
    </anomaly>
    <anomaly type="suspicious" value="1.09404,1.34554,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="146.8.99.52" src_port="2696" dst_port="22"/>
        </slice>
        <from usec="0" sec="1675314801"/>
        <to usec="0" sec="1675314805"/>
    </anomaly>
    <anomaly type="suspicious" value="1.09404,1.34554,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="149.202.132.180" src_port="54495" dst_port="3232"/>
        </slice>
        <from usec="0" sec="1675314801"/>
        <to usec="0" sec="1675314805"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="175.207.109.211" src_port="27136" dst_port="22"/>
        </slice>
        <from usec="0" sec="1675314425"/>
        <to usec="0" sec="1675314426"/>
    </anomaly>
    <anomaly type="suspicious" value="1.4295,1.49747,010,1 1 1 1 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="183.20.88.252" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1675314000"/>
        <to usec="0" sec="1675314458"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="92.1.196.219" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1675314168"/>
        <to usec="0" sec="1675314709"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="117.16.153.48" dst_port="445"/>
        </slice>
        <from usec="0" sec="1675314798"/>
        <to usec="0" sec="1675314799"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="183.12.78.201" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1675314205"/>
        <to usec="0" sec="1675314207"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="211.236.56.202" dst_port="8005"/>
        </slice>
        <from usec="0" sec="1675314673"/>
        <to usec="0" sec="1675314676"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="60.216.78.184" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1675314347"/>
        <to usec="0" sec="1675314441"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="172.216.27.100" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1675314165"/>
        <to usec="0" sec="1675314166"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="181.1.55.182" dst_port="8005"/>
        </slice>
        <from usec="0" sec="1675314674"/>
        <to usec="0" sec="1675314676"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="114.143.245.110" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1675314543"/>
        <to usec="0" sec="1675314544"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,999,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="84.13.101.80" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1675314462"/>
        <to usec="0" sec="1675314571"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="124.139.191.156" dst_port="8005"/>
        </slice>
        <from usec="0" sec="1675314674"/>
        <to usec="0" sec="1675314678"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="221.205.117.156" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1675314327"/>
        <to usec="0" sec="1675314331"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="221.205.117.157" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1675314327"/>
        <to usec="0" sec="1675314331"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="221.205.117.154" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1675314327"/>
        <to usec="0" sec="1675314332"/>
    </anomaly>
    <anomaly type="suspicious" value="1.09404,1.34554,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="87.128.216.153" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1675314627"/>
        <to usec="0" sec="1675314721"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="182.20.106.152" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1675314392"/>
        <to usec="0" sec="1675314393"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="116.243.235.106" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1675314603"/>
        <to usec="0" sec="1675314644"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="221.205.117.148" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1675314330"/>
        <to usec="0" sec="1675314332"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="221.205.117.147" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1675314329"/>
        <to usec="0" sec="1675314332"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="221.205.117.146" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1675314331"/>
        <to usec="0" sec="1675314332"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="221.205.117.145" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1675314330"/>
        <to usec="0" sec="1675314331"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="106.51.60.66" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1675314590"/>
        <to usec="0" sec="1675314595"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="154.22.162.140" dst_port="8005"/>
        </slice>
        <from usec="0" sec="1675314674"/>
        <to usec="0" sec="1675314678"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="117.62.90.120" dst_port="1433"/>
            <filter src_ip="117.62.90.120" dst_port="445"/>
        </slice>
        <from usec="0" sec="1675314789"/>
        <to usec="0" sec="1675314796"/>
    </anomaly>
    <anomaly type="suspicious" value="1.09404,1.34554,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="60.216.72.105" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1675314347"/>
        <to usec="0" sec="1675314348"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="110.223.93.240" dst_port="445"/>
        </slice>
        <from usec="0" sec="1675314883"/>
        <to usec="0" sec="1675314885"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="218.46.24.99" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1675314343"/>
        <to usec="0" sec="1675314347"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="120.45.203.232" dst_port="22"/>
        </slice>
        <from usec="0" sec="1675314187"/>
        <to usec="0" sec="1675314188"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="190.20.11.176" dst_port="8005"/>
        </slice>
        <from usec="0" sec="1675314674"/>
        <to usec="0" sec="1675314676"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="177.205.233.189" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1675314303"/>
        <to usec="0" sec="1675314316"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="49.72.201.191" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1675314387"/>
        <to usec="0" sec="1675314388"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="221.197.214.53" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1675314346"/>
        <to usec="0" sec="1675314349"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="85.252.159.131" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1675314095"/>
        <to usec="0" sec="1675314129"/>
    </anomaly>
    <anomaly type="suspicious" value="1.09404,1.34554,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="46.193.219.156" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1675314895"/>
        <to usec="0" sec="1675314897"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="190.7.138.95" dst_port="8005"/>
        </slice>
        <from usec="0" sec="1675314674"/>
        <to usec="0" sec="1675314684"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,999,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="120.49.3.130" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1675314765"/>
        <to usec="0" sec="1675314767"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="112.128.113.185" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1675314791"/>
        <to usec="0" sec="1675314793"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="103.166.142.54" dst_port="445"/>
        </slice>
        <from usec="0" sec="1675314510"/>
        <to usec="0" sec="1675314514"/>
    </anomaly>
    <anomaly type="suspicious" value="1.09404,1.34554,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="183.239.48.212" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1675314327"/>
        <to usec="0" sec="1675314435"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="66.198.62.105" dst_port="8005"/>
        </slice>
        <from usec="0" sec="1675314674"/>
        <to usec="0" sec="1675314678"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="113.35.43.40" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1675314873"/>
        <to usec="0" sec="1675314880"/>
    </anomaly>
    <anomaly type="suspicious" value="1.09404,1.34554,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="113.121.95.114" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1675314702"/>
        <to usec="0" sec="1675314710"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,999,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="1.195.29.188" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1675314761"/>
        <to usec="0" sec="1675314883"/>
    </anomaly>
    <anomaly type="suspicious" value="1.09404,1.34554,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="118.187.9.158" dst_port="445"/>
        </slice>
        <from usec="0" sec="1675314619"/>
        <to usec="0" sec="1675314621"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="17.27.53.179" dst_port="8005"/>
        </slice>
        <from usec="0" sec="1675314674"/>
        <to usec="0" sec="1675314676"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="118.68.176.231" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1675314717"/>
        <to usec="0" sec="1675314722"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="223.94.198.88" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1675314193"/>
        <to usec="0" sec="1675314195"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="14.48.169.173" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1675314004"/>
        <to usec="0" sec="1675314052"/>
    </anomaly>
    <anomaly type="suspicious" value="1.4295,1.49747,010,1 1 1 1 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="222.213.240.82" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1675314000"/>
        <to usec="0" sec="1675314738"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="188.211.189.171" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1675314573"/>
        <to usec="0" sec="1675314831"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.39.14.48" dst_port="5351"/>
        </slice>
        <from usec="0" sec="1675314495"/>
        <to usec="0" sec="1675314496"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="61.134.75.140" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1675314331"/>
        <to usec="0" sec="1675314334"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="38.245.166.48" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1675314430"/>
        <to usec="0" sec="1675314431"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.39.14.49" dst_port="5351"/>
        </slice>
        <from usec="0" sec="1675314182"/>
        <to usec="0" sec="1675314515"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="61.134.75.141" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1675314332"/>
        <to usec="0" sec="1675314333"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.39.14.52" dst_port="5351"/>
        </slice>
        <from usec="0" sec="1675314047"/>
        <to usec="0" sec="1675314799"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.39.14.53" dst_port="5351"/>
        </slice>
        <from usec="0" sec="1675314324"/>
        <to usec="0" sec="1675314737"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="61.134.75.138" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1675314331"/>
        <to usec="0" sec="1675314333"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="61.134.75.136" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1675314331"/>
        <to usec="0" sec="1675314334"/>
    </anomaly>
    <anomaly type="suspicious" value="1.09404,1.34554,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="189.61.27.198" dst_port="8005"/>
        </slice>
        <from usec="0" sec="1675314674"/>
        <to usec="0" sec="1675314676"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="61.134.75.137" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1675314331"/>
        <to usec="0" sec="1675314333"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="61.134.75.135" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1675314333"/>
        <to usec="0" sec="1675314334"/>
    </anomaly>
    <anomaly type="suspicious" value="1.09404,1.34554,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="114.136.61.108"/>
        </slice>
        <from usec="0" sec="1675314019"/>
        <to usec="0" sec="1675314238"/>
    </anomaly>
    <anomaly type="suspicious" value="1.09404,1.34554,011,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="87.128.216.153" src_port="5555"/>
        </slice>
        <from usec="0" sec="1675314627"/>
        <to usec="0" sec="1675314722"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,011,1 1 1 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="46.193.219.156" src_port="5555"/>
        </slice>
        <from usec="0" sec="1675314896"/>
        <to usec="0" sec="1675314897"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41245,1.48361,011,1 1 1 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="120.49.3.130" src_port="6379"/>
        </slice>
        <from usec="0" sec="1675314765"/>
        <to usec="0" sec="1675314767"/>
    </anomaly>
    <anomaly type="suspicious" value="1.4295,1.49747,020,1 1 1 1 0 0 0 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="15.167.208.121"/>
            <filter dst_ip="15.167.111.185"/>
        </slice>
        <from usec="0" sec="1675314001"/>
        <to usec="0" sec="1675314799"/>
    </anomaly>
    <anomaly type="suspicious" value="1.27723,1.39523,999,1 1 0 1 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="203.125.62.188" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.34152,1.37851,504,1 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="163.34.156.9" dst_ip="143.50.127.210" dst_port="443"/>
            <filter src_ip="163.34.156.9" dst_ip="143.50.127.230" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.34152,1.37851,504,1 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.34.157.9" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.21104,1.36652,504,0 0 0 1 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.34.158.236" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.24064,1.3789,020,0 0 0 0 0 0 1 0 0 1 1 0,icmp_error">
        <slice>
            <filter dst_ip="163.34.191.51"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.26001,1.3938,020,0 0 0 1 0 0 1 0 0 1 1 0,icmp_error">
        <slice>
            <filter dst_ip="202.235.209.6"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19087,1.35132,504,0 0 0 0 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter dst_ip="163.34.157.230"/>
            <filter dst_ip="163.34.166.233" src_port="443"/>
            <filter dst_ip="163.34.166.233"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.26001,1.3938,999,0 0 0 1 0 0 1 0 0 1 1 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.125.61.166" src_port="53"/>
            <filter dst_ip="203.125.61.252" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19087,1.35132,502,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="133.58.6.165" src_port="22"/>
            <filter src_ip="133.58.6.165"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19087,1.35132,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="142.27.84.238" dst_ip="163.34.158.9" src_port="443" dst_port="38571"/>
            <filter src_ip="142.27.84.238" dst_ip="163.34.159.161" src_port="443" dst_port="64076"/>
            <filter src_ip="142.27.84.238" dst_ip="163.34.158.176" src_port="443" dst_port="53281"/>
            <filter src_ip="142.27.84.238" dst_ip="163.34.157.63" src_port="443" dst_port="57155"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19087,1.35132,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="163.34.156.139" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19087,1.35132,020,0 0 0 0 0 0 0 0 0 1 1 0,icmp_error">
        <slice>
            <filter src_ip="163.34.92.55"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19087,1.35132,999,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="163.34.27.227"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19087,1.35132,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="185.242.220.254" dst_ip="150.198.49.82" src_port="443" dst_port="35548"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19087,1.35132,020,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="203.125.48.243"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19087,1.35132,502,0 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="203.125.61.251" dst_ip="199.199.228.236" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19087,1.35132,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="52.44.209.12" dst_ip="163.34.120.203" src_port="443" dst_port="50587"/>
            <filter src_ip="52.44.209.12" dst_ip="163.34.120.203" src_port="443" dst_port="50586"/>
            <filter src_ip="52.44.209.12" dst_ip="163.34.120.203" src_port="443" dst_port="50585"/>
            <filter src_ip="52.44.209.12" dst_ip="163.34.120.203" src_port="443" dst_port="50584"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19087,1.35132,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="61.201.29.13" dst_ip="163.34.9.230" src_port="443" dst_port="65226"/>
            <filter src_ip="61.201.29.13" dst_ip="163.34.9.230" src_port="443" dst_port="51947"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19087,1.35132,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="8.255.246.63" dst_ip="150.198.141.188" src_port="80" dst_port="9391"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19087,1.35132,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="8.255.240.75" dst_ip="150.198.121.115" src_port="80"/>
            <filter src_ip="8.255.240.75" dst_ip="150.198.142.202" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19087,1.35132,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="8.255.248.64" dst_ip="150.198.174.208" src_port="80" dst_port="61390"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19087,1.35132,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="152.56.250.171" dst_ip="113.74.34.56" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19087,1.35132,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.34.151.191" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19087,1.35132,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.34.156.172" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19087,1.35132,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.34.156.202" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19087,1.35132,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.34.157.89" src_port="443"/>
            <filter dst_ip="163.34.157.89"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19087,1.35132,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.34.157.108" src_port="443"/>
            <filter dst_ip="163.34.157.108"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19087,1.35132,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.34.95.73" src_port="443"/>
            <filter dst_ip="163.34.95.73"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.21104,1.36652,504,0 0 0 1 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.34.26.220" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19087,1.35132,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.34.25.218" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19087,1.35132,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.34.22.185" src_port="443"/>
            <filter dst_ip="163.34.22.185"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19087,1.35132,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="203.125.58.61" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19087,1.35132,999,0 0 0 0 0 0 0 0 0 1 1 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.125.61.236" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19087,1.35132,011,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="38.125.129.212" src_port="3128"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.26771,2.73663,999,1 1 1 1 1 1 0 0 0 0 0 0,ipv4gretun">
        <slice>
            <filter src_ip="203.125.57.11" dst_ip="206.221.116.199"/>
            <filter src_ip="203.125.57.11" dst_ip="204.131.41.222"/>
            <filter src_ip="203.125.57.11" dst_ip="50.11.141.233"/>
            <filter src_ip="203.125.57.11" dst_ip="128.21.249.143"/>
        </slice>
        <from usec="0" sec="1675314000"/>
        <to usec="0" sec="1675314848"/>
    </anomaly>
    <anomaly type="anomalous" value="1.58323,1.48983,504,1 1 0 1 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.34.120.246" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="4.66626,3.76455,999,1 1 1 1 1 1 1 1 1 1 1 0,alphfl">
        <slice>
            <filter src_ip="81.125.188.225" dst_ip="163.34.154.24" dst_port="6500"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.26915,1.98856,901,1 1 1 1 1 0 0 0 0 0 0 0,empty">
        <slice/>
        <from usec="0" sec="1675314000"/>
        <to usec="0" sec="1675314664"/>
    </anomaly>
    <anomaly type="anomalous" value="1.58176,1.53989,010,1 1 1 0 0 0 1 0 0 1 0 0,ntscSYN">
        <slice>
            <filter src_ip="68.127.170.28" src_port="54811" dst_port="2429"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.55866,1.52882,011,1 1 1 1 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="195.6.178.254"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.97157,1.7773,503,1 0 0 1 0 0 1 0 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="203.125.52.175" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.80624,1.78051,901,0 0 0 0 1 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1675314000"/>
        <to usec="0" sec="1675314738"/>
    </anomaly>
    <anomaly type="anomalous" value="1.80624,1.78051,901,0 0 0 0 1 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1675314000"/>
        <to usec="0" sec="1675314738"/>
    </anomaly>
    <anomaly type="anomalous" value="1.8196,1.79208,020,0 0 0 1 1 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.34.19.206"/>
        </slice>
        <from usec="0" sec="1675314000"/>
        <to usec="0" sec="1675314737"/>
    </anomaly>
    <anomaly type="anomalous" value="1.8196,1.79208,504,0 0 0 1 1 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="172.249.146.230" dst_ip="133.36.32.133" src_port="443"/>
            <filter src_ip="172.249.146.230" dst_ip="133.36.238.186" src_port="443"/>
        </slice>
        <from usec="0" sec="1675314025"/>
        <to usec="0" sec="1675314197"/>
    </anomaly>
    <anomaly type="anomalous" value="1.8196,1.79208,020,0 0 0 1 1 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="163.34.166.240"/>
        </slice>
        <from usec="0" sec="1675314002"/>
        <to usec="0" sec="1675314369"/>
    </anomaly>
    <anomaly type="anomalous" value="3.46685,2.87333,504,0 0 0 1 1 1 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.34.156.205" src_port="443"/>
            <filter dst_ip="163.34.156.205"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.8196,1.79208,504,0 0 0 1 1 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.34.180.85"/>
        </slice>
        <from usec="0" sec="1675314000"/>
        <to usec="0" sec="1675314733"/>
    </anomaly>
    <anomaly type="anomalous" value="2.97319,2.59737,504,0 0 0 1 1 1 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.34.156.9" src_port="443"/>
        </slice>
        <from usec="0" sec="1675314002"/>
        <to usec="0" sec="1675314558"/>
    </anomaly>
    <anomaly type="anomalous" value="1.8196,1.79208,010,0 0 0 1 1 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="37.144.62.135" src_port="34136" dst_port="23"/>
        </slice>
        <from usec="0" sec="1675314006"/>
        <to usec="0" sec="1675314646"/>
    </anomaly>
    <anomaly type="anomalous" value="3.56434,3.00759,901,0 0 0 1 1 1 1 1 0 0 0 0,empty">
        <slice/>
        <from usec="0" sec="1675314000"/>
        <to usec="0" sec="1675314736"/>
    </anomaly>
    <anomaly type="anomalous" value="1.8196,1.79208,010,0 0 0 1 1 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="122.19.72.219" dst_port="445"/>
        </slice>
        <from usec="0" sec="1675314013"/>
        <to usec="0" sec="1675314730"/>
    </anomaly>
    <anomaly type="anomalous" value="3.46685,2.87333,504,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.34.10.87" src_port="443"/>
            <filter dst_ip="163.34.23.175" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.3845,2.23451,901,0 0 0 0 0 1 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1675314000"/>
        <to usec="0" sec="1675314378"/>
    </anomaly>
    <anomaly type="anomalous" value="2.3845,2.23451,901,0 0 0 0 0 1 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1675314000"/>
        <to usec="0" sec="1675314378"/>
    </anomaly>
    <anomaly type="anomalous" value="3.44649,2.92529,010,1 1 1 1 0 0 1 1 1 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="157.19.75.108" dst_port="80"/>
            <filter src_ip="157.19.75.108" dst_port="8080"/>
            <filter src_ip="157.19.75.108" dst_port="442"/>
        </slice>
        <from usec="0" sec="1675314000"/>
        <to usec="0" sec="1675314198"/>
    </anomaly>
    <anomaly type="anomalous" value="2.00539,1.93844,020,0 0 0 0 0 0 1 1 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="3.195.211.191"/>
        </slice>
        <from usec="0" sec="1675314000"/>
        <to usec="0" sec="1675314406"/>
    </anomaly>
    <anomaly type="anomalous" value="2.00539,1.93844,020,0 0 0 0 0 0 1 1 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="3.196.72.127"/>
        </slice>
        <from usec="0" sec="1675314000"/>
        <to usec="0" sec="1675314046"/>
    </anomaly>
    <anomaly type="anomalous" value="2.00539,1.93844,010,0 0 0 0 0 0 1 1 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="202.228.32.118" dst_ip="35.139.108.76" src_port="5060"/>
        </slice>
        <from usec="0" sec="1675314000"/>
        <to usec="0" sec="1675314046"/>
    </anomaly>
    <anomaly type="anomalous" value="3.16098,2.78804,020,0 0 0 0 0 0 1 1 1 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="15.133.21.90"/>
        </slice>
        <from usec="0" sec="1675314315"/>
        <to usec="0" sec="1675314361"/>
    </anomaly>
    <anomaly type="anomalous" value="3.16098,2.78804,020,0 0 0 0 0 0 1 1 1 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="15.133.201.70"/>
        </slice>
        <from usec="0" sec="1675314315"/>
        <to usec="0" sec="1675314361"/>
    </anomaly>
    <anomaly type="anomalous" value="3.16098,2.78804,020,0 0 0 0 0 0 1 1 1 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="54.133.167.136"/>
        </slice>
        <from usec="0" sec="1675314315"/>
        <to usec="0" sec="1675314361"/>
    </anomaly>
    <anomaly type="anomalous" value="3.16098,2.78804,020,0 0 0 0 0 0 1 1 1 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="3.197.42.105"/>
        </slice>
        <from usec="0" sec="1675314315"/>
        <to usec="0" sec="1675314361"/>
    </anomaly>
    <anomaly type="anomalous" value="3.16098,2.78804,020,0 0 0 0 0 0 1 1 1 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="13.243.139.197"/>
        </slice>
        <from usec="0" sec="1675314315"/>
        <to usec="0" sec="1675314361"/>
    </anomaly>
    <anomaly type="anomalous" value="3.16098,2.78804,020,0 0 0 0 0 0 1 1 1 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="13.243.67.11"/>
        </slice>
        <from usec="0" sec="1675314315"/>
        <to usec="0" sec="1675314361"/>
    </anomaly>
    <anomaly type="anomalous" value="3.16098,2.78804,020,0 0 0 0 0 0 1 1 1 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="3.194.14.58"/>
        </slice>
        <from usec="0" sec="1675314315"/>
        <to usec="0" sec="1675314361"/>
    </anomaly>
    <anomaly type="anomalous" value="3.16098,2.78804,020,0 0 0 0 0 0 1 1 1 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="43.53.36.114"/>
        </slice>
        <from usec="0" sec="1675314315"/>
        <to usec="0" sec="1675314361"/>
    </anomaly>
    <anomaly type="anomalous" value="3.16098,2.78804,020,0 0 0 0 0 0 1 1 1 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="13.243.124.241"/>
        </slice>
        <from usec="0" sec="1675314315"/>
        <to usec="0" sec="1675314361"/>
    </anomaly>
    <anomaly type="anomalous" value="2.00539,1.93844,020,0 0 0 0 0 0 1 1 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="13.174.118.50"/>
        </slice>
        <from usec="0" sec="1675314315"/>
        <to usec="0" sec="1675314361"/>
    </anomaly>
    <anomaly type="anomalous" value="2.00539,1.93844,020,0 0 0 0 0 0 1 1 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="16.117.66.14"/>
        </slice>
        <from usec="0" sec="1675314315"/>
        <to usec="0" sec="1675314361"/>
    </anomaly>
    <anomaly type="anomalous" value="2.00539,1.93844,020,0 0 0 0 0 0 1 1 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="43.53.1.60"/>
        </slice>
        <from usec="0" sec="1675314360"/>
        <to usec="0" sec="1675314406"/>
    </anomaly>
    <anomaly type="anomalous" value="1.92811,1.74419,999,1 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.34.195.201"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="4.66626,3.76455,504,1 1 1 1 1 1 1 1 1 1 1 0,mptp">
        <slice>
            <filter dst_ip="150.198.200.0" dst_port="443"/>
            <filter src_ip="185.195.116.12" dst_ip="150.198.200.0" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.53185,2.07898,999,1 1 1 1 1 0 0 0 0 1 1 0,ntscUDPOther">
        <slice>
            <filter src_ip="159.91.77.252" src_port="5076" dst_port="9059"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.83972,1.73473,504,0 0 0 1 0 0 0 0 0 1 1 1,mptpla">
        <slice>
            <filter src_ip="182.164.69.239" dst_ip="131.243.232.97" src_port="443"/>
            <filter src_ip="182.164.69.233" dst_ip="131.243.232.97" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.10347,1.83344,010,1 1 0 1 0 0 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="89.21.109.87" src_port="40247"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.83972,1.73473,504,0 0 0 1 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.34.121.82" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.46685,2.87333,504,0 0 0 1 1 1 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.34.91.8" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.52144,2.88622,504,1 0 0 1 1 1 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.34.95.142" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.97157,1.7773,504,1 0 0 1 0 0 1 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="80.57.178.44" src_port="443"/>
            <filter dst_ip="163.34.14.21" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.92811,1.74419,999,1 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.34.14.219" src_port="443"/>
            <filter dst_ip="163.34.14.219"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.53858,2.89923,504,1 0 0 1 1 1 1 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="203.125.55.46" src_port="443"/>
            <filter dst_ip="163.34.60.113" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.82651,1.72278,504,0 0 0 0 0 0 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="163.34.121.82" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.621,1.51488,504,1 1 0 1 0 0 1 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="162.236.243.135" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.92811,1.74419,503,1 0 0 0 0 0 0 0 0 1 1 1,ptmplaHTTP">
        <slice>
            <filter src_ip="163.34.9.167" dst_port="21650"/>
            <filter src_ip="163.34.9.167" dst_ip="204.207.182.33" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.83972,1.73473,504,0 0 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.34.120.91" src_port="443"/>
            <filter dst_ip="163.34.156.179" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.82651,1.72278,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="150.198.142.60" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.64436,2.20698,504,1 0 0 1 1 0 1 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="202.228.39.130" dst_port="443"/>
            <filter src_ip="202.228.39.161" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.83972,1.73473,504,0 0 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="163.34.156.66" dst_port="443"/>
            <filter dst_ip="13.235.250.20" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.87232,1.75629,504,0 0 0 1 0 0 1 0 0 1 1 1,mptmp">
        <slice>
            <filter src_port="443"/>
            <filter src_ip="64.1.45.53" src_port="53972" dst_port="941"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.55564,2.09701,010,1 1 1 1 1 0 1 0 0 1 1 0,ntscSYN">
        <slice>
            <filter src_ip="138.196.73.134" src_port="54799" dst_port="2973"/>
            <filter src_ip="159.200.76.152" src_port="53857" dst_port="5318"/>
            <filter src_ip="47.14.76.10"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.85934,1.74449,010,0 0 0 0 0 0 1 0 0 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="192.20.240.29" dst_port="81"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.87232,1.75629,504,0 0 0 1 0 0 1 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="202.24.83.250"/>
            <filter src_ip="172.216.182.177" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.17822,2.66723,504,0 0 0 1 1 1 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.34.159.188" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.82651,1.72278,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.34.159.171" src_port="443"/>
            <filter dst_ip="163.34.159.171"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.87232,1.75629,504,0 0 0 1 0 0 1 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="150.198.142.85"/>
            <filter src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.82651,1.72278,504,0 0 0 0 0 0 0 0 0 1 1 1,salphfl">
        <slice>
            <filter src_ip="46.133.185.93" dst_ip="163.34.156.255" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.13204,1.85385,504,1 1 0 1 0 0 1 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="203.125.49.215" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.85934,1.74449,504,0 0 0 0 0 0 1 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.34.151.189" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.97157,1.7773,504,1 0 0 1 0 0 1 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="13.235.250.20" src_port="443"/>
            <filter dst_ip="163.34.169.4" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.97157,1.7773,504,1 0 0 1 0 0 1 0 0 1 1 1,mptmp">
        <slice>
            <filter src_port="443"/>
            <filter src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.31164,1.95637,999,1 1 1 1 0 0 1 0 0 1 1 1,ntscUDPOther">
        <slice>
            <filter src_ip="161.223.51.115" src_port="5068" dst_port="9057"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.94064,1.75599,504,1 0 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="142.27.53.144" src_port="443"/>
            <filter dst_ip="163.34.20.104" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.82651,1.72278,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.34.60.134" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.87232,1.75629,504,0 0 0 1 0 0 1 0 0 1 1 1,mptmp">
        <slice>
            <filter src_port="443"/>
            <filter dst_ip="163.34.220.55"/>
            <filter dst_ip="163.34.220.55"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.87232,1.75629,504,0 0 0 1 0 0 1 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.34.121.94" src_port="443"/>
            <filter dst_ip="163.34.55.76" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.27469,1.92634,010,1 1 1 0 0 0 0 0 0 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="143.57.70.8" dst_port="80"/>
            <filter src_ip="143.57.70.8" dst_port="8080"/>
            <filter src_ip="143.57.70.8" dst_port="442"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.82651,1.72278,999,0 0 0 0 0 0 0 0 0 1 1 1,heavy_hitter">
        <slice>
            <filter src_ip="111.128.144.100" dst_ip="202.24.84.11"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.81788,1.61561,010,1 1 1 1 0 0 0 0 0 1 1 0,ntscSYN">
        <slice>
            <filter src_ip="181.187.251.220" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.83972,1.73473,503,0 0 0 1 0 0 0 0 0 1 1 1,ptmpHTTP">
        <slice>
            <filter src_ip="203.125.52.175" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.82651,1.72278,011,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="92.79.193.250" dst_port="49511"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
