<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="suspicious" value="1.54272,2.20458,504,0 0 0 0 0 0 0 0 0 0 0 1,alphfl">
        <slice>
            <filter src_ip="133.11.245.71" dst_ip="93.130.129.147" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="2.14116,2.30058,503,1 0 0 1 0 0 0 0 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="203.49.128.83" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.6178,2.20071,504,1 0 0 0 0 0 0 0 0 0 0 1,mptp">
        <slice>
            <filter dst_ip="150.124.0.38" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="2.33197,2.36606,010,1 0 1 0 0 0 0 0 0 1 1 1,ptmpHTTP">
        <slice>
            <filter src_ip="3.104.18.221"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.53244,2.11895,010,1 1 1 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="18.7.162.23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.79084,2.18245,010,1 0 1 0 0 0 0 0 0 1 1 0,ptmpHTTP">
        <slice>
            <filter src_ip="34.28.70.29"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.99101,2.23282,010,1 1 1 1 1 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="122.74.246.73" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1677819736"/>
        <to usec="0" sec="1677819737"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41709,2.10677,011,1 1 1 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="202.248.149.188"/>
            <filter dst_ip="202.248.144.4" src_port="5555"/>
        </slice>
        <from usec="0" sec="1677819600"/>
        <to usec="0" sec="1677819801"/>
    </anomaly>
    <anomaly type="suspicious" value="1.52709,2.15531,999,0 1 1 1 0 0 1 0 0 1 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="94.153.34.61" dst_port="523"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.53415,2.11129,504,1 0 0 1 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="202.69.48.197" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="2.1141,2.30088,504,1 0 0 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="142.138.60.217" src_port="443"/>
            <filter dst_ip="150.124.54.85" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.52509,2.17034,020,0 0 0 1 1 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="35.105.164.110"/>
            <filter dst_ip="35.104.231.244"/>
            <filter dst_ip="3.114.202.233"/>
        </slice>
        <from usec="0" sec="1677819604"/>
        <to usec="0" sec="1677820186"/>
    </anomaly>
    <anomaly type="suspicious" value="1.66772,2.18185,901,0 0 0 1 1 0 1 0 0 1 0 0,empty">
        <slice/>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41709,2.10677,011,1 1 1 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_port="5555"/>
        </slice>
        <from usec="0" sec="1677819600"/>
        <to usec="0" sec="1677820071"/>
    </anomaly>
    <anomaly type="suspicious" value="1.45086,2.13824,901,0 0 0 0 1 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1677819600"/>
        <to usec="0" sec="1677820068"/>
    </anomaly>
    <anomaly type="suspicious" value="1.45086,2.13824,901,0 0 0 0 1 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1677819600"/>
        <to usec="0" sec="1677820068"/>
    </anomaly>
    <anomaly type="suspicious" value="1.49002,2.13792,999,0 0 0 1 1 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="185.124.141.12" dst_ip="203.49.142.67" src_port="32768" dst_port="53"/>
        </slice>
        <from usec="0" sec="1677819600"/>
        <to usec="0" sec="1677819797"/>
    </anomaly>
    <anomaly type="suspicious" value="1.49002,2.13792,012,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="195.50.88.34" dst_ip="202.248.145.228" dst_port="23"/>
            <filter src_ip="185.57.28.1" dst_ip="202.248.145.228" dst_port="23"/>
        </slice>
        <from usec="0" sec="1677819600"/>
        <to usec="0" sec="1677819798"/>
    </anomaly>
    <anomaly type="suspicious" value="1.49002,2.13792,504,0 0 0 1 1 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.124.175.64" src_port="443"/>
        </slice>
        <from usec="0" sec="1677819600"/>
        <to usec="0" sec="1677819796"/>
    </anomaly>
    <anomaly type="suspicious" value="1.49002,2.13792,020,0 0 0 1 1 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="13.231.146.177"/>
        </slice>
        <from usec="0" sec="1677819603"/>
        <to usec="0" sec="1677819783"/>
    </anomaly>
    <anomaly type="suspicious" value="1.49002,2.13792,020,0 0 0 1 1 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="43.242.120.187"/>
        </slice>
        <from usec="0" sec="1677819604"/>
        <to usec="0" sec="1677819788"/>
    </anomaly>
    <anomaly type="suspicious" value="1.49002,2.13792,504,0 0 0 1 1 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="163.2.156.235" dst_ip="40.143.253.154" dst_port="443"/>
        </slice>
        <from usec="0" sec="1677819670"/>
        <to usec="0" sec="1677819767"/>
    </anomaly>
    <anomaly type="suspicious" value="1.49002,2.13792,504,0 0 0 1 1 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.2.156.51" dst_ip="13.108.122.10" dst_port="443"/>
            <filter src_ip="163.2.156.51"/>
        </slice>
        <from usec="0" sec="1677819600"/>
        <to usec="0" sec="1677820338"/>
    </anomaly>
    <anomaly type="suspicious" value="1.49002,2.13792,504,0 0 0 1 1 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="162.239.244.245" src_port="443"/>
        </slice>
        <from usec="0" sec="1677819600"/>
        <to usec="0" sec="1677820428"/>
    </anomaly>
    <anomaly type="suspicious" value="1.49002,2.13792,999,0 0 0 1 1 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.248.149.61"/>
        </slice>
        <from usec="0" sec="1677819600"/>
        <to usec="0" sec="1677820428"/>
    </anomaly>
    <anomaly type="suspicious" value="1.49002,2.13792,999,0 0 0 1 1 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="23.31.45.96" src_port="53"/>
        </slice>
        <from usec="0" sec="1677819600"/>
        <to usec="0" sec="1677820423"/>
    </anomaly>
    <anomaly type="suspicious" value="1.49002,2.13792,504,0 0 0 1 1 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.11.80.212" dst_port="443"/>
        </slice>
        <from usec="0" sec="1677819600"/>
        <to usec="0" sec="1677820424"/>
    </anomaly>
    <anomaly type="suspicious" value="1.49002,2.13792,010,0 0 0 1 1 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="120.234.159.188" src_port="64953" dst_port="23"/>
            <filter src_ip="120.234.159.188" src_port="64953" dst_port="2323"/>
        </slice>
        <from usec="0" sec="1677819601"/>
        <to usec="0" sec="1677820422"/>
    </anomaly>
    <anomaly type="suspicious" value="1.49002,2.13792,502,0 0 0 1 1 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="67.158.43.214" dst_ip="203.49.133.128" dst_port="22"/>
            <filter src_ip="67.158.43.214" dst_ip="203.49.131.218" dst_port="22"/>
        </slice>
        <from usec="0" sec="1677819690"/>
        <to usec="0" sec="1677820413"/>
    </anomaly>
    <anomaly type="suspicious" value="1.49002,2.13792,504,0 0 0 1 1 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="104.31.155.35" dst_ip="163.2.14.248" src_port="443"/>
            <filter src_ip="104.31.155.35" dst_ip="163.2.158.241" src_port="443"/>
            <filter src_ip="104.31.155.35" dst_ip="163.2.19.202" src_port="443"/>
        </slice>
        <from usec="0" sec="1677819836"/>
        <to usec="0" sec="1677820423"/>
    </anomaly>
    <anomaly type="suspicious" value="2.11022,2.3344,504,0 0 0 1 0 0 1 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="54.25.182.81" dst_port="443"/>
            <filter dst_ip="38.114.26.47" dst_port="8883"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.52509,2.17034,020,0 0 0 1 1 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="202.79.50.126"/>
            <filter dst_ip="133.27.239.130"/>
        </slice>
        <from usec="0" sec="1677819600"/>
        <to usec="0" sec="1677820423"/>
    </anomaly>
    <anomaly type="suspicious" value="2.00351,2.28997,504,1 0 0 0 0 0 0 0 0 0 1 1,mptmp">
        <slice>
            <filter src_ip="117.242.88.25" src_port="443"/>
            <filter dst_ip="163.2.112.95" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="2.14116,2.30058,503,1 0 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="142.139.42.206" src_port="443"/>
            <filter src_ip="117.242.88.215" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="2.08502,2.30429,503,0 0 0 1 0 0 0 0 0 1 1 1,ptmpHTTP">
        <slice>
            <filter src_ip="133.11.96.15" dst_port="443"/>
            <filter src_ip="133.11.96.15"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.66772,2.18185,010,0 0 0 1 1 0 1 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="164.101.183.210"/>
            <filter src_ip="159.200.52.33"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.45153,2.14841,504,0 0 0 0 0 0 1 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="31.237.107.163" src_port="443"/>
            <filter dst_ip="202.248.145.229" src_port="443"/>
            <filter dst_ip="202.248.145.229"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="2.08502,2.30429,504,0 0 0 1 0 0 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="163.2.10.72" dst_port="443"/>
            <filter src_ip="163.2.10.72"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="2.14116,2.30058,010,1 0 0 1 0 0 0 0 0 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="94.153.34.54" dst_port="8847"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.45476,2.11533,503,0 0 0 1 0 0 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.2.157.118" src_port="443"/>
            <filter dst_ip="163.2.157.118" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.5935,2.14561,504,0 1 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="150.124.0.38" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.45476,2.11533,504,0 0 0 1 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="150.124.47.181" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="2.05722,2.30459,504,0 0 0 0 0 0 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="162.115.87.242" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.49615,2.11161,504,1 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="13.108.213.242" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="2.08502,2.30429,503,0 0 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.2.156.235" src_port="443"/>
            <filter dst_ip="163.2.81.221" src_port="443"/>
            <filter src_ip="117.242.88.215" dst_ip="163.2.156.235" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.45086,2.13824,504,0 0 0 0 1 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="142.139.91.73" dst_ip="163.2.81.238" src_port="443"/>
        </slice>
        <from usec="0" sec="1677819921"/>
        <to usec="0" sec="1677820247"/>
    </anomaly>
    <anomaly type="suspicious" value="1.71771,2.2156,504,0 0 0 1 0 0 0 0 0 1 0 1,mptp">
        <slice>
            <filter dst_ip="163.2.53.206" src_port="443"/>
            <filter dst_ip="163.2.53.206" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.45476,2.11533,999,0 0 0 1 0 0 0 0 0 1 1 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.2.222.178" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="2.26332,2.32816,504,1 1 0 1 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="203.49.134.11" src_port="443"/>
            <filter src_ip="1.224.254.124" dst_ip="203.49.134.11" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41463,2.11565,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="104.28.64.254" dst_ip="163.2.120.101" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41463,2.11565,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="133.11.245.71" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41463,2.11565,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="142.138.60.148" dst_ip="202.248.149.163" src_port="443" dst_port="41948"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="2.05722,2.30459,999,0 0 0 0 0 0 0 0 0 1 1 1,ptmpla">
        <slice>
            <filter src_ip="150.204.114.239" src_port="443"/>
            <filter src_ip="150.204.114.239" dst_ip="163.2.144.215" src_port="9000"/>
            <filter src_ip="150.204.114.239" dst_ip="163.2.113.240" src_port="9000"/>
            <filter src_ip="150.204.114.239" dst_ip="163.2.113.191" src_port="9000"/>
            <filter src_ip="150.204.114.239" dst_ip="163.2.159.142" src_port="9000"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41463,2.11565,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="152.71.60.157" src_port="80"/>
            <filter src_ip="152.71.60.157" dst_ip="163.2.158.175" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41463,2.11565,503,0 0 0 0 0 0 0 0 0 1 1 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.2.143.44" dst_port="443"/>
            <filter src_ip="163.2.143.44" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41463,2.11565,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="163.2.112.140"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="2.05722,2.30459,504,0 0 0 0 0 0 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="163.2.113.188" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="2.05722,2.30459,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="150.124.173.216" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41463,2.11565,999,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="170.77.244.167" src_port="8801"/>
            <filter src_ip="170.77.244.167" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.71771,2.2156,504,0 0 0 1 0 0 0 0 0 1 0 1,mptmp">
        <slice>
            <filter src_ip="17.12.133.50" src_port="443"/>
            <filter dst_ip="163.2.158.30" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.68386,2.21591,503,0 0 0 0 0 0 0 0 0 1 0 1,ptmpHTTP">
        <slice>
            <filter src_ip="203.49.128.83" src_port="80"/>
            <filter src_ip="203.49.128.83"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41463,2.11565,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.2.157.70" src_port="443"/>
            <filter dst_ip="163.2.157.70"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="2.05722,2.30459,504,0 0 0 0 0 0 0 0 0 1 1 1,mptpla">
        <slice>
            <filter dst_ip="13.224.43.132" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="2.05722,2.30459,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="150.124.173.121" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="2.05722,2.30459,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.2.112.244" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41463,2.11565,504,0 0 0 0 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="172.56.63.167" src_port="443"/>
            <filter src_ip="172.56.63.167" src_port="80"/>
            <filter dst_ip="163.2.53.206" src_port="443"/>
            <filter dst_ip="163.2.53.206" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="2.05722,2.30459,504,0 0 0 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="151.90.190.77" src_port="443"/>
            <filter dst_ip="163.2.143.44" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41463,2.11565,504,0 0 0 0 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="3.65.245.253" src_port="443"/>
            <filter dst_ip="163.2.158.30" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41463,2.11565,504,0 0 0 0 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter dst_ip="163.2.156.24" src_port="443"/>
            <filter dst_ip="163.2.159.84" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41463,2.11565,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.2.105.34" src_port="443"/>
            <filter dst_ip="163.2.105.34"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41463,2.11565,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.2.53.211" src_port="443"/>
            <filter dst_ip="163.2.53.211"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="2.05722,2.30459,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.2.47.29" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41463,2.11565,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.2.24.209" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41463,2.11565,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="163.2.171.2" dst_ip="54.97.84.36" dst_port="443"/>
            <filter src_ip="163.2.171.2" dst_ip="44.243.254.63" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="2.05722,2.30459,504,0 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="23.22.18.162" dst_ip="163.2.158.163" src_port="443" dst_port="61767"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="2.05722,2.30459,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.2.157.63" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="2.05722,2.30459,503,0 0 0 0 0 0 0 0 0 1 1 1,alphflHTTP">
        <slice>
            <filter src_ip="8.247.37.65" dst_ip="150.124.145.133" src_port="80" dst_port="54270"/>
            <filter src_ip="8.247.37.65" dst_ip="150.124.145.133" src_port="80" dst_port="54245"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41463,2.11565,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.2.60.210" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="11.1926,9.4671,999,1 1 1 1 1 1 1 1 1 1 1 1,mptmp">
        <slice>
            <filter dst_port="6379"/>
            <filter src_ip="45.100.239.60" src_port="5078" dst_port="5060"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.85535,2.53204,503,1 1 1 1 1 0 1 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="203.49.137.175" dst_port="80"/>
            <filter src_ip="185.130.134.20" dst_ip="150.124.243.126" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.60108,2.92945,504,1 1 1 1 1 1 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.2.211.37" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.4117,2.33161,999,1 1 1 1 1 0 0 0 0 1 1 0,ipv4gretun">
        <slice>
            <filter src_ip="203.49.137.118" dst_ip="206.219.224.193"/>
            <filter src_ip="203.49.137.118" dst_ip="204.196.22.24"/>
            <filter src_ip="203.49.137.118" dst_ip="50.64.173.238"/>
            <filter src_ip="203.49.137.118" dst_ip="128.191.1.113"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.88905,2.67731,010,1 0 1 1 1 1 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="34.27.127.74"/>
        </slice>
        <from usec="0" sec="1677820343"/>
        <to usec="0" sec="1677820424"/>
    </anomaly>
    <anomaly type="anomalous" value="2.98072,2.70104,010,1 1 1 1 1 1 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="54.93.67.84"/>
        </slice>
        <from usec="0" sec="1677820324"/>
        <to usec="0" sec="1677820404"/>
    </anomaly>
    <anomaly type="anomalous" value="2.79882,2.62942,503,1 0 0 1 1 1 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="155.122.17.52" dst_ip="163.2.211.37" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="5.66598,4.77958,010,1 1 1 1 1 0 1 1 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="128.135.78.37"/>
            <filter src_ip="62.236.57.27" src_port="56429"/>
        </slice>
        <from usec="0" sec="1677819600"/>
        <to usec="0" sec="1677820158"/>
    </anomaly>
    <anomaly type="anomalous" value="2.57804,2.44528,504,1 0 0 1 1 0 1 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="202.69.48.253" dst_port="443"/>
            <filter dst_ip="13.108.213.242" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.38543,2.85479,504,1 0 0 1 1 1 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="202.69.53.237" dst_ip="18.159.187.162" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.98072,2.70104,010,1 1 1 1 1 1 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.34.255.44" dst_port="80"/>
        </slice>
        <from usec="0" sec="1677820133"/>
        <to usec="0" sec="1677820301"/>
    </anomaly>
    <anomaly type="anomalous" value="2.99881,2.70772,504,0 0 0 1 1 1 0 0 0 1 1 0,mptpla">
        <slice>
            <filter dst_ip="150.124.175.123" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.7561,2.63266,504,0 0 0 1 1 1 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.2.143.37" src_port="443"/>
            <filter dst_ip="163.2.143.37" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.72318,2.67749,504,0 0 0 1 0 1 0 0 0 0 0 1,mptp">
        <slice>
            <filter dst_ip="163.2.60.210" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.67221,2.62314,020,0 0 0 1 1 1 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="203.49.142.243" dst_ip="173.218.30.217"/>
            <filter src_ip="203.49.141.1" dst_ip="173.218.30.217"/>
            <filter src_ip="203.49.141.126" dst_ip="173.218.30.217"/>
            <filter src_ip="202.79.5.136" dst_ip="173.218.30.217"/>
            <filter src_ip="203.49.136.71" dst_ip="173.218.30.217"/>
        </slice>
        <from usec="0" sec="1677819600"/>
        <to usec="0" sec="1677820428"/>
    </anomaly>
    <anomaly type="anomalous" value="3.3502,2.85778,504,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.2.218.240" src_port="443"/>
            <filter dst_ip="163.2.157.134" src_port="443"/>
            <filter dst_ip="163.2.218.240"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.67221,2.62314,020,0 0 0 1 1 1 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="13.251.83.188"/>
        </slice>
        <from usec="0" sec="1677819606"/>
        <to usec="0" sec="1677820042"/>
    </anomaly>
    <anomaly type="anomalous" value="2.65058,2.6234,504,0 0 0 0 1 1 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="162.28.116.52" dst_port="443"/>
        </slice>
        <from usec="0" sec="1677819777"/>
        <to usec="0" sec="1677820104"/>
    </anomaly>
    <anomaly type="anomalous" value="2.65058,2.6234,504,0 0 0 0 1 1 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="202.69.48.253" dst_ip="52.161.220.194" dst_port="443"/>
            <filter src_ip="203.49.134.9" dst_ip="52.161.220.194" dst_port="443"/>
        </slice>
        <from usec="0" sec="1677819601"/>
        <to usec="0" sec="1677820338"/>
    </anomaly>
    <anomaly type="anomalous" value="5.31867,4.67803,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.49.136.88" dst_port="53"/>
        </slice>
        <from usec="0" sec="1677819870"/>
        <to usec="0" sec="1677820366"/>
    </anomaly>
    <anomaly type="anomalous" value="3.3502,2.85778,504,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="35.70.191.140" src_port="443"/>
            <filter dst_ip="163.2.113.184" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.3502,2.85778,999,0 0 0 1 1 1 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.2.79.5"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
