<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="suspicious" value="1.23697,1.3657,504,1 1 0 1 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="203.159.116.126"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20361,1.38449,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.210.60.108" dst_ip="125.129.193.178" src_port="59049" dst_port="62389"/>
        </slice>
        <from usec="0" sec="1680584728"/>
        <to usec="0" sec="1680585276"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20361,1.38449,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="142.20.181.42" dst_ip="163.210.65.247" src_port="443" dst_port="51678"/>
        </slice>
        <from usec="0" sec="1680584532"/>
        <to usec="0" sec="1680584534"/>
    </anomaly>
    <anomaly type="suspicious" value="1.07244,1.35192,999,0 1 0 1 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="203.159.110.176" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20361,1.38449,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="154.75.239.196" dst_port="445"/>
        </slice>
        <from usec="0" sec="1680585278"/>
        <to usec="0" sec="1680585281"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20361,1.38449,502,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="61.85.147.248" dst_port="22"/>
        </slice>
        <from usec="0" sec="1680584818"/>
        <to usec="0" sec="1680584819"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20361,1.38449,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="190.241.222.74" dst_port="587"/>
        </slice>
        <from usec="0" sec="1680584933"/>
        <to usec="0" sec="1680584935"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20361,1.38449,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="117.212.130.246" dst_port="445"/>
        </slice>
        <from usec="0" sec="1680585053"/>
        <to usec="0" sec="1680585054"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20361,1.38449,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="179.121.38.79" dst_port="587"/>
        </slice>
        <from usec="0" sec="1680584542"/>
        <to usec="0" sec="1680584543"/>
    </anomaly>
    <anomaly type="suspicious" value="1.14177,1.36524,020,1 1 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="133.90.63.121"/>
        </slice>
        <from usec="0" sec="1680584400"/>
        <to usec="0" sec="1680584778"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20361,1.38449,004,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="187.72.140.158" src_port="445"/>
        </slice>
        <from usec="0" sec="1680584445"/>
        <to usec="0" sec="1680584447"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20361,1.38449,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="185.127.81.122"/>
        </slice>
        <from usec="0" sec="1680585192"/>
        <to usec="0" sec="1680585193"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20361,1.38449,901,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.210.76.249" dst_ip="52.127.149.29" dst_port="443"/>
        </slice>
        <from usec="0" sec="1680584828"/>
        <to usec="0" sec="1680584829"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20361,1.38449,010,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="103.15.204.242" dst_port="445"/>
        </slice>
        <from usec="0" sec="1680584828"/>
        <to usec="0" sec="1680584832"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20361,1.38449,901,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="103.15.204.243" dst_port="445"/>
        </slice>
        <from usec="0" sec="1680584828"/>
        <to usec="0" sec="1680584829"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20361,1.38449,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.210.112.122" dst_port="443"/>
        </slice>
        <from usec="0" sec="1680584831"/>
        <to usec="0" sec="1680584832"/>
    </anomaly>
    <anomaly type="suspicious" value="1.23697,1.3657,999,1 1 0 1 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="203.159.110.176" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.847238,1.25655,999,1 0 0 1 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="203.159.110.176" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.33314,1.40878,020,1 0 0 1 1 0 0 0 0 1 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="43.48.51.118"/>
            <filter dst_ip="54.234.159.40"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.14177,1.36524,052,1 1 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="61.85.146.222" src_port="22"/>
            <filter dst_ip="175.93.98.183" src_port="6379"/>
        </slice>
        <from usec="0" sec="1680584400"/>
        <to usec="0" sec="1680584957"/>
    </anomaly>
    <anomaly type="suspicious" value="1.32808,1.45661,011,1 0 1 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="175.93.98.183" src_port="6379"/>
        </slice>
        <from usec="0" sec="1680584700"/>
        <to usec="0" sec="1680584702"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08203,1.39499,504,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="202.20.103.194" dst_ip="18.112.129.85" src_port="38324" dst_port="443"/>
            <filter src_ip="202.20.103.194" dst_ip="18.112.129.85" src_port="13677" dst_port="443"/>
            <filter src_ip="163.210.187.97" dst_ip="18.112.129.85" src_port="57307" dst_port="443"/>
            <filter src_ip="163.210.128.155" dst_ip="18.112.129.85" src_port="64962" dst_port="443"/>
            <filter src_ip="163.210.129.10" dst_ip="18.112.129.85" src_port="65440" dst_port="443"/>
        </slice>
        <from usec="0" sec="1680584402"/>
        <to usec="0" sec="1680584953"/>
    </anomaly>
    <anomaly type="suspicious" value="1.18206,1.39543,999,0 0 0 1 1 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="150.118.176.241" dst_ip="202.25.61.195"/>
            <filter src_ip="150.118.176.241" src_port="53"/>
            <filter src_ip="23.247.96.17" src_port="53"/>
            <filter dst_ip="202.25.61.195" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03682,1.32501,504,0 0 0 1 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="103.116.201.229" src_port="443"/>
            <filter dst_ip="163.210.76.126" src_port="443"/>
            <filter dst_ip="131.30.50.19" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.1471,1.41383,901,0 0 0 0 1 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1680584400"/>
        <to usec="0" sec="1680584508"/>
    </anomaly>
    <anomaly type="suspicious" value="1.1471,1.41383,901,0 0 0 0 1 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1680584400"/>
        <to usec="0" sec="1680584868"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08203,1.39499,010,0 0 0 1 1 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="45.109.184.242" src_port="57239"/>
        </slice>
        <from usec="0" sec="1680584400"/>
        <to usec="0" sec="1680584597"/>
    </anomaly>
    <anomaly type="suspicious" value="1.2453,1.40835,020,1 0 0 1 1 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="3.161.49.90"/>
        </slice>
        <from usec="0" sec="1680584404"/>
        <to usec="0" sec="1680584543"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08203,1.39499,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="142.21.141.253" dst_ip="163.210.211.107" src_port="25"/>
        </slice>
        <from usec="0" sec="1680584415"/>
        <to usec="0" sec="1680584513"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08203,1.39499,010,0 0 0 1 1 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="206.189.32.81"/>
        </slice>
        <from usec="0" sec="1680584400"/>
        <to usec="0" sec="1680584686"/>
    </anomaly>
    <anomaly type="suspicious" value="1.1471,1.41383,504,0 0 0 0 1 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="104.34.238.238" dst_ip="163.210.16.245" src_port="443" dst_port="49547"/>
            <filter src_ip="104.34.238.238" dst_ip="163.210.16.245" src_port="443" dst_port="49542"/>
            <filter src_ip="104.34.238.238" dst_ip="163.210.16.245" src_port="443" dst_port="49541"/>
            <filter src_ip="104.34.238.238" dst_ip="203.159.99.168" src_port="443" dst_port="56502"/>
            <filter src_ip="104.34.238.238" dst_ip="163.210.172.23" src_port="443" dst_port="55044"/>
        </slice>
        <from usec="0" sec="1680584404"/>
        <to usec="0" sec="1680584688"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08203,1.39499,020,0 0 0 1 1 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.210.0.65"/>
        </slice>
        <from usec="0" sec="1680584403"/>
        <to usec="0" sec="1680584778"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08203,1.39499,504,0 0 0 1 1 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="20.174.78.221" dst_port="443"/>
        </slice>
        <from usec="0" sec="1680584400"/>
        <to usec="0" sec="1680584777"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08203,1.39499,999,0 0 0 1 1 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.218.197.40" dst_port="61000"/>
        </slice>
        <from usec="0" sec="1680584400"/>
        <to usec="0" sec="1680585137"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08203,1.39499,504,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="52.59.213.90" dst_ip="163.210.1.66" src_port="443"/>
        </slice>
        <from usec="0" sec="1680584401"/>
        <to usec="0" sec="1680585137"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08203,1.39499,999,0 0 0 1 1 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.218.197.249" dst_port="61000"/>
        </slice>
        <from usec="0" sec="1680584403"/>
        <to usec="0" sec="1680585138"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08203,1.39499,010,0 0 0 1 1 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="67.217.91.1" src_port="16346" dst_port="23"/>
        </slice>
        <from usec="0" sec="1680584404"/>
        <to usec="0" sec="1680585132"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08203,1.39499,010,0 0 0 1 1 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="14.22.18.141" src_port="2756" dst_port="22"/>
        </slice>
        <from usec="0" sec="1680584407"/>
        <to usec="0" sec="1680585129"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08203,1.39499,020,0 0 0 1 1 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="15.46.145.201"/>
        </slice>
        <from usec="0" sec="1680584766"/>
        <to usec="0" sec="1680585008"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08203,1.39499,020,0 0 0 1 1 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="18.43.250.77"/>
        </slice>
        <from usec="0" sec="1680584826"/>
        <to usec="0" sec="1680585129"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08203,1.39499,020,0 0 0 1 1 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="54.150.69.205"/>
        </slice>
        <from usec="0" sec="1680585067"/>
        <to usec="0" sec="1680585127"/>
    </anomaly>
    <anomaly type="suspicious" value="1.36975,1.54778,020,0 0 0 1 0 1 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.210.187.97"/>
        </slice>
        <from usec="0" sec="1680584402"/>
        <to usec="0" sec="1680584953"/>
    </anomaly>
    <anomaly type="suspicious" value="1.89784,1.96031,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="107.180.2.233" dst_port="5938"/>
        </slice>
        <from usec="0" sec="1680584490"/>
        <to usec="0" sec="1680584536"/>
    </anomaly>
    <anomaly type="suspicious" value="1.89784,1.96031,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrqdurmterp">
        <slice>
            <filter dst_ip="203.159.108.117"/>
        </slice>
        <from usec="0" sec="1680584580"/>
        <to usec="0" sec="1680584626"/>
    </anomaly>
    <anomaly type="suspicious" value="1.89784,1.96031,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="192.6.38.70"/>
        </slice>
        <from usec="0" sec="1680584715"/>
        <to usec="0" sec="1680584761"/>
    </anomaly>
    <anomaly type="suspicious" value="1.95659,1.96062,010,0 0 0 0 0 0 1 0 0 1 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="128.176.186.143" dst_ip="202.218.196.3" dst_port="3389"/>
            <filter src_ip="128.176.186.143" dst_ip="202.218.196.3" dst_port="30120"/>
            <filter src_ip="128.176.186.143" dst_ip="202.218.196.32" dst_port="25565"/>
            <filter src_ip="128.176.186.143" dst_ip="202.218.197.197" dst_port="25565"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.89784,1.96031,010,0 0 0 0 0 0 1 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="128.176.186.143" dst_ip="202.218.196.32" dst_port="25565"/>
            <filter src_ip="202.96.126.76" dst_ip="202.218.196.32" dst_port="25565"/>
        </slice>
        <from usec="0" sec="1680584400"/>
        <to usec="0" sec="1680584806"/>
    </anomaly>
    <anomaly type="suspicious" value="1.89784,1.96031,010,0 0 0 0 0 0 1 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="128.176.186.143" dst_ip="202.218.197.197" dst_port="25565"/>
            <filter src_ip="202.96.126.76" dst_ip="202.218.197.197" dst_port="25565"/>
        </slice>
        <from usec="0" sec="1680584400"/>
        <to usec="0" sec="1680584806"/>
    </anomaly>
    <anomaly type="suspicious" value="1.89784,1.96031,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="107.180.3.244" dst_port="8443"/>
        </slice>
        <from usec="0" sec="1680584805"/>
        <to usec="0" sec="1680584851"/>
    </anomaly>
    <anomaly type="suspicious" value="1.89784,1.96031,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="107.180.9.211" dst_port="9000"/>
        </slice>
        <from usec="0" sec="1680584805"/>
        <to usec="0" sec="1680584851"/>
    </anomaly>
    <anomaly type="suspicious" value="1.85923,1.94676,999,0 0 0 1 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.159.104.59" src_port="53"/>
            <filter dst_ip="203.159.104.59" dst_port="53"/>
        </slice>
        <from usec="0" sec="1680584400"/>
        <to usec="0" sec="1680585166"/>
    </anomaly>
    <anomaly type="suspicious" value="1.89784,1.96031,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="3.218.238.128"/>
        </slice>
        <from usec="0" sec="1680585120"/>
        <to usec="0" sec="1680585166"/>
    </anomaly>
    <anomaly type="suspicious" value="1.89784,1.96031,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="3.219.184.213"/>
        </slice>
        <from usec="0" sec="1680585120"/>
        <to usec="0" sec="1680585166"/>
    </anomaly>
    <anomaly type="suspicious" value="1.29427,1.38494,999,1 1 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_port="25"/>
            <filter src_ip="133.67.143.254" dst_port="61000"/>
            <filter src_ip="133.67.143.197" dst_port="61000"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.9289,1.27743,504,1 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="151.157.16.153" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.9289,1.27743,999,1 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="163.210.130.46" dst_ip="23.1.96.251" dst_port="443"/>
            <filter src_ip="163.210.130.46"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.9289,1.27743,504,1 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="163.210.174.53" dst_port="443"/>
            <filter src_ip="163.210.174.53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.22812,1.45885,504,0 0 0 1 0 0 0 0 0 0 0 1,mptp">
        <slice>
            <filter dst_ip="163.210.172.184" src_port="443"/>
            <filter dst_ip="163.210.172.184"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03682,1.32501,504,0 0 0 1 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="20.174.78.222" dst_ip="163.210.174.52" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.9289,1.27743,504,1 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="203.159.116.126"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03682,1.32501,504,0 0 0 1 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="150.185.81.41" src_port="443"/>
            <filter src_ip="8.119.151.232" dst_ip="150.185.81.41" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.9289,1.27743,504,1 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.210.130.189" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.9289,1.27743,504,1 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.210.128.83" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20623,1.33907,504,1 0 0 1 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.210.95.242" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10456,1.34484,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.210.65.37" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03682,1.32501,504,0 0 0 1 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.210.29.84" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.45007,1.54818,504,0 0 0 1 0 1 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.210.16.245" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03682,1.32501,504,0 0 0 1 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.210.3.34" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.18206,1.39543,010,0 0 0 1 1 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="138.60.86.231" dst_port="8081"/>
            <filter dst_ip="202.218.196.226" src_port="443"/>
            <filter dst_ip="202.218.196.226" dst_port="80"/>
            <filter src_port="443" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10456,1.34484,999,0 0 0 0 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="162.78.129.226"/>
            <filter dst_ip="202.218.196.186"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10456,1.34484,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="20.37.129.113" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.9289,1.27743,504,1 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="202.25.10.116" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10456,1.34484,010,0 0 0 0 0 0 0 0 0 1 1 0,sntscSYN">
        <slice>
            <filter src_ip="103.232.53.159" src_port="57792" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10456,1.34484,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="122.215.156.114" dst_ip="163.210.218.9" src_port="52122" dst_port="1194"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10456,1.34484,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="128.189.14.181" dst_ip="133.90.89.138" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.26492,1.35868,999,1 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="133.74.102.231" dst_ip="210.191.86.242" src_port="4500" dst_port="55273"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10456,1.34484,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="133.90.139.252" src_port="22"/>
            <filter src_ip="133.90.139.252" dst_ip="78.176.221.184" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10456,1.34484,020,0 0 0 0 0 0 0 0 0 1 1 0,icmp_error">
        <slice>
            <filter src_ip="133.90.7.187"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10456,1.34484,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="13.247.63.112" dst_ip="163.210.129.110" src_port="443"/>
            <filter src_ip="13.247.63.112" dst_ip="163.210.128.192" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10456,1.34484,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="142.20.181.89" dst_ip="163.210.95.210" src_port="443"/>
            <filter src_ip="142.20.181.89" dst_ip="163.210.130.226" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10456,1.34484,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="163.210.39.53" dst_port="443"/>
            <filter src_ip="163.210.39.53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10456,1.34484,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="163.210.28.2" dst_port="443"/>
            <filter src_ip="163.210.28.2"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10456,1.34484,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="163.210.3.34" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10456,1.34484,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="163.210.8.151"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10456,1.34484,010,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="167.32.169.164"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10456,1.34484,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="173.240.34.20" dst_ip="163.210.131.51" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10456,1.34484,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="178.182.4.197" dst_ip="203.159.110.176" src_port="32768" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10456,1.34484,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="185.122.186.156" dst_ip="203.159.110.176" src_port="32768" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10456,1.34484,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="35.221.19.24" dst_ip="150.185.19.120" src_port="50007"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10456,1.34484,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="74.114.234.106" dst_ip="163.210.95.113" src_port="443"/>
            <filter src_ip="74.114.234.106" dst_ip="163.210.95.196" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03682,1.32501,010,0 0 0 1 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="159.89.128.221" src_port="45410"/>
            <filter src_ip="8.213.104.85" src_port="44728"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10456,1.34484,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="203.159.102.79" dst_ip="103.173.242.235" src_port="26190" dst_port="47648"/>
            <filter src_ip="203.159.102.79" dst_ip="103.173.242.235" src_port="26190" dst_port="21596"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10456,1.34484,010,0 0 0 0 0 0 0 0 0 1 1 0,mptplaHTTP">
        <slice>
            <filter src_ip="202.218.194.59" dst_ip="120.146.26.103" src_port="110" dst_port="443"/>
            <filter src_ip="202.218.196.226" dst_ip="120.146.26.103" src_port="80" dst_port="443"/>
            <filter src_ip="202.218.196.85" dst_ip="120.146.26.103" src_port="80" dst_port="443"/>
            <filter src_ip="202.218.195.198" dst_ip="120.146.26.103" src_port="110" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10456,1.34484,011,0 0 0 0 0 0 0 0 0 1 1 0,heavy_hitter">
        <slice>
            <filter src_ip="202.218.196.85" dst_ip="120.146.26.249" src_port="80" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10456,1.34484,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.210.147.56" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.49849,1.5305,504,0 0 0 1 0 0 0 0 0 0 1 1,ptmpla">
        <slice>
            <filter src_ip="74.114.228.198" dst_ip="150.185.75.221" src_port="443"/>
            <filter src_ip="74.114.228.198" dst_ip="163.210.95.196" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03682,1.32501,504,0 0 0 1 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="142.21.205.197" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.03682,1.32501,504,0 0 0 1 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="172.37.146.145" src_port="443"/>
            <filter dst_ip="163.210.131.7" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10456,1.34484,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="203.159.105.167" dst_ip="20.192.159.194" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10456,1.34484,999,0 0 0 0 0 0 0 0 0 1 1 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.159.102.85" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.46098,1.47018,504,0 0 0 1 1 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="203.159.102.109" src_port="443"/>
            <filter src_ip="1.194.166.225" dst_ip="203.159.102.109" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10456,1.34484,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="133.90.250.174" dst_ip="60.26.164.137" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.37106,1.4773,504,0 0 0 0 0 0 0 0 0 1 0 1,ptmpla">
        <slice>
            <filter src_ip="18.193.137.188" dst_ip="163.210.65.37" src_port="443"/>
            <filter src_ip="18.193.137.188" dst_ip="163.210.92.223" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.3171,1.45927,504,0 0 0 1 0 0 0 0 0 1 0 1,mptmp">
        <slice>
            <filter dst_ip="20.37.129.113" dst_port="443"/>
            <filter src_ip="163.210.118.249"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.7597,2.10228,504,1 1 1 1 1 1 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="150.185.126.18" dst_port="443"/>
            <filter dst_ip="150.185.126.18" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.55918,1.5346,010,1 1 1 1 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="106.48.76.59" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1680584403"/>
        <to usec="0" sec="1680585266"/>
    </anomaly>
    <anomaly type="anomalous" value="2.1004,1.76664,010,0 1 1 1 0 0 0 0 0 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="168.88.175.226" dst_port="5252"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="88.217.57.208" dst_port="22"/>
        </slice>
        <from usec="0" sec="1680584475"/>
        <to usec="0" sec="1680585205"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="185.14.164.42" dst_port="22"/>
        </slice>
        <from usec="0" sec="1680584640"/>
        <to usec="0" sec="1680585266"/>
    </anomaly>
    <anomaly type="anomalous" value="2.18898,1.7772,010,1 1 1 1 0 0 0 0 0 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="94.1.62.26" dst_port="389"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="49.22.156.118" dst_port="445"/>
        </slice>
        <from usec="0" sec="1680584920"/>
        <to usec="0" sec="1680584927"/>
    </anomaly>
    <anomaly type="anomalous" value="1.97772,1.66939,504,1 0 0 1 1 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_port="443"/>
            <filter src_ip="117.96.23.112" src_port="80"/>
            <filter src_ip="38.86.29.215" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.22187,1.79203,999,1 1 1 0 0 0 0 0 0 1 1 1,ntscUDPOther">
        <slice>
            <filter src_ip="185.127.81.122" src_port="3869" dst_port="5060"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.22187,1.79203,999,1 1 1 0 0 0 0 0 0 1 1 1,ntscUDPOther">
        <slice>
            <filter src_ip="163.179.39.6" src_port="5100" dst_port="5060"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="172.139.33.243" dst_port="445"/>
        </slice>
        <from usec="0" sec="1680585019"/>
        <to usec="0" sec="1680585020"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="47.246.124.1" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1680584561"/>
        <to usec="0" sec="1680584563"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="223.161.218.30" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1680585160"/>
        <to usec="0" sec="1680585162"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="123.145.223.221" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1680584757"/>
        <to usec="0" sec="1680584762"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="94.191.77.24" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1680584704"/>
        <to usec="0" sec="1680584754"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="203.55.76.178" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1680584590"/>
        <to usec="0" sec="1680584594"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="187.141.83.187" dst_port="587"/>
        </slice>
        <from usec="0" sec="1680585211"/>
        <to usec="0" sec="1680585221"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,999,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="175.93.98.183" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1680584700"/>
        <to usec="0" sec="1680584702"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="218.218.13.160" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1680584772"/>
        <to usec="0" sec="1680584777"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="91.19.4.89" dst_port="5351"/>
        </slice>
        <from usec="0" sec="1680585275"/>
        <to usec="0" sec="1680585276"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="124.48.171.162" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1680585110"/>
        <to usec="0" sec="1680585115"/>
    </anomaly>
    <anomaly type="anomalous" value="2.43341,2.15814,010,1 1 1 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="187.72.140.158" dst_port="445"/>
        </slice>
        <from usec="0" sec="1680584400"/>
        <to usec="0" sec="1680584449"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="117.173.87.157" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1680584840"/>
        <to usec="0" sec="1680584842"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="188.44.79.112" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1680584403"/>
        <to usec="0" sec="1680584739"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="188.44.79.127" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1680584454"/>
        <to usec="0" sec="1680585269"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="125.189.41.125" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1680585236"/>
        <to usec="0" sec="1680585237"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="82.239.216.132" dst_port="5351"/>
        </slice>
        <from usec="0" sec="1680584559"/>
        <to usec="0" sec="1680584560"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="177.186.209.130" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1680584910"/>
        <to usec="0" sec="1680584911"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="182.126.218.61" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1680584802"/>
        <to usec="0" sec="1680584804"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="111.70.50.180" dst_port="1433"/>
            <filter src_ip="111.70.50.180" dst_port="445"/>
        </slice>
        <from usec="0" sec="1680584967"/>
        <to usec="0" sec="1680584976"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="189.187.128.173" dst_port="587"/>
        </slice>
        <from usec="0" sec="1680585142"/>
        <to usec="0" sec="1680585151"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="94.247.146.233" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1680584932"/>
        <to usec="0" sec="1680585297"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="217.214.3.22" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1680585279"/>
        <to usec="0" sec="1680585282"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="120.13.36.230" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1680585260"/>
        <to usec="0" sec="1680585262"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="81.1.171.22" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1680584502"/>
        <to usec="0" sec="1680584552"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="38.21.80.221" dst_port="587"/>
        </slice>
        <from usec="0" sec="1680584850"/>
        <to usec="0" sec="1680584862"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="112.18.21.76" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1680585278"/>
        <to usec="0" sec="1680585279"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="2.80.233.3" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1680584971"/>
        <to usec="0" sec="1680584977"/>
    </anomaly>
    <anomaly type="anomalous" value="1.50575,1.44198,010,1 1 0 1 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="207.164.244.53" src_port="26200"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="103.133.18.162" dst_port="139"/>
        </slice>
        <from usec="0" sec="1680584957"/>
        <to usec="0" sec="1680584962"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="188.44.77.236" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1680584645"/>
        <to usec="0" sec="1680585297"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.42.134.114" dst_port="5351"/>
        </slice>
        <from usec="0" sec="1680584400"/>
        <to usec="0" sec="1680585076"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.42.134.116" dst_port="5351"/>
        </slice>
        <from usec="0" sec="1680584445"/>
        <to usec="0" sec="1680585285"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,010,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="81.196.78.138" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1680585207"/>
        <to usec="0" sec="1680585208"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="117.212.131.135" dst_port="445"/>
        </slice>
        <from usec="0" sec="1680584640"/>
        <to usec="0" sec="1680584641"/>
    </anomaly>
    <anomaly type="anomalous" value="2.7597,2.10228,504,1 1 1 1 1 1 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="203.159.102.111" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="220.65.137.64" src_port="43123" dst_port="22"/>
        </slice>
        <from usec="0" sec="1680585219"/>
        <to usec="0" sec="1680585221"/>
    </anomaly>
    <anomaly type="anomalous" value="1.84247,1.60326,504,1 1 1 1 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="203.159.102.109" dst_port="443"/>
            <filter dst_ip="20.19.52.124" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="118.149.80.97" src_port="38908" dst_port="22"/>
        </slice>
        <from usec="0" sec="1680584728"/>
        <to usec="0" sec="1680584729"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="8.213.116.221" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1680585148"/>
        <to usec="0" sec="1680585157"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="194.253.151.213" dst_port="445"/>
        </slice>
        <from usec="0" sec="1680584930"/>
        <to usec="0" sec="1680584932"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="221.215.141.89" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1680585027"/>
        <to usec="0" sec="1680585029"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="5.132.245.183" dst_port="5555"/>
        </slice>
        <from usec="0" sec="1680585124"/>
        <to usec="0" sec="1680585144"/>
    </anomaly>
    <anomaly type="anomalous" value="2.08673,1.76813,999,1 1 0 1 1 1 0 0 0 1 0 0,ipv4gretun">
        <slice>
            <filter src_ip="203.159.105.38" dst_ip="206.220.31.122"/>
            <filter src_ip="203.159.105.38" dst_ip="204.98.49.17"/>
            <filter src_ip="203.159.105.38" dst_ip="50.8.249.62"/>
            <filter src_ip="203.159.105.38" dst_ip="128.13.70.94"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.06865,1.74764,504,1 0 0 1 1 1 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="202.20.103.114" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.48944,2.15192,010,1 0 0 1 0 0 1 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="168.88.175.226" dst_port="5252"/>
            <filter src_ip="151.151.91.94" dst_port="5060"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.68877,1.54309,504,1 0 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.210.95.226" src_port="443"/>
            <filter dst_ip="163.210.95.12" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.17776,2.04863,901,0 0 0 1 1 0 1 0 0 1 0 0,empty">
        <slice/>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.71338,1.67373,999,0 0 0 1 1 1 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.67.143.255"/>
            <filter dst_ip="31.220.156.120" src_port="23"/>
        </slice>
        <from usec="0" sec="1680584400"/>
        <to usec="0" sec="1680584778"/>
    </anomaly>
    <anomaly type="anomalous" value="1.60502,1.55175,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="45.5.253.192" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1680584661"/>
        <to usec="0" sec="1680585034"/>
    </anomaly>
    <anomaly type="anomalous" value="1.57224,1.53091,504,0 0 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.210.175.201" src_port="443"/>
            <filter dst_ip="163.210.23.207" src_port="443"/>
            <filter dst_ip="163.210.175.201"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.71338,1.67373,020,0 0 0 1 1 1 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="163.210.111.203"/>
        </slice>
        <from usec="0" sec="1680584403"/>
        <to usec="0" sec="1680584672"/>
    </anomaly>
    <anomaly type="anomalous" value="1.91647,1.73654,504,0 0 0 1 1 1 0 0 0 0 1 0,mptmp">
        <slice>
            <filter src_ip="131.30.96.159" dst_port="443"/>
            <filter dst_ip="35.223.234.173" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.71338,1.67373,020,0 0 0 1 1 1 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="163.210.29.103"/>
        </slice>
        <from usec="0" sec="1680584403"/>
        <to usec="0" sec="1680584946"/>
    </anomaly>
    <anomaly type="anomalous" value="1.71338,1.67373,020,0 0 0 1 1 1 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="44.42.219.90"/>
        </slice>
        <from usec="0" sec="1680584782"/>
        <to usec="0" sec="1680584951"/>
    </anomaly>
    <anomaly type="anomalous" value="1.71338,1.67373,504,0 0 0 1 1 1 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.210.64.153" dst_ip="18.193.229.74" src_port="56729" dst_port="443"/>
        </slice>
        <from usec="0" sec="1680584912"/>
        <to usec="0" sec="1680584914"/>
    </anomaly>
    <anomaly type="anomalous" value="1.71338,1.67373,010,0 0 0 1 1 1 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.218.196.176" src_port="6881"/>
        </slice>
        <from usec="0" sec="1680584400"/>
        <to usec="0" sec="1680585048"/>
    </anomaly>
    <anomaly type="anomalous" value="2.30136,1.89864,504,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="162.157.95.198" src_port="443"/>
            <filter dst_ip="203.159.97.169" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.71338,1.67373,504,0 0 0 1 1 1 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="40.4.139.210" dst_ip="203.159.102.109" src_port="443"/>
        </slice>
        <from usec="0" sec="1680584572"/>
        <to usec="0" sec="1680585221"/>
    </anomaly>
    <anomaly type="anomalous" value="1.71338,1.67373,999,0 0 0 1 1 1 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.218.196.1" dst_port="61000"/>
        </slice>
        <from usec="0" sec="1680584400"/>
        <to usec="0" sec="1680585138"/>
    </anomaly>
    <anomaly type="anomalous" value="1.71338,1.67373,999,0 0 0 1 1 1 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="202.218.197.221" dst_ip="161.122.117.120" dst_port="61000"/>
        </slice>
        <from usec="0" sec="1680584400"/>
        <to usec="0" sec="1680584688"/>
    </anomaly>
    <anomaly type="anomalous" value="1.71338,1.67373,504,0 0 0 1 1 1 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="178.127.190.199" dst_ip="163.210.129.238" src_port="443"/>
            <filter src_ip="178.127.190.199" dst_ip="150.185.146.131" src_port="443"/>
        </slice>
        <from usec="0" sec="1680584410"/>
        <to usec="0" sec="1680584514"/>
    </anomaly>
    <anomaly type="anomalous" value="1.71338,1.67373,010,0 0 0 1 1 1 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="91.11.254.68" src_port="48952"/>
        </slice>
        <from usec="0" sec="1680584400"/>
        <to usec="0" sec="1680584958"/>
    </anomaly>
    <anomaly type="anomalous" value="1.71338,1.67373,011,0 0 0 1 1 1 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="202.218.194.59" dst_ip="120.146.26.32" src_port="110" dst_port="443"/>
        </slice>
        <from usec="0" sec="1680584400"/>
        <to usec="0" sec="1680584958"/>
    </anomaly>
    <anomaly type="anomalous" value="1.71338,1.67373,504,0 0 0 1 1 1 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.210.95.108" dst_ip="20.69.118.40" dst_port="443"/>
        </slice>
        <from usec="0" sec="1680584401"/>
        <to usec="0" sec="1680584958"/>
    </anomaly>
    <anomaly type="anomalous" value="1.71338,1.67373,010,0 0 0 1 1 1 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="222.89.158.150" src_port="49351" dst_port="23"/>
            <filter src_ip="222.89.158.150" src_port="1024" dst_port="23"/>
        </slice>
        <from usec="0" sec="1680584405"/>
        <to usec="0" sec="1680584958"/>
    </anomaly>
    <anomaly type="anomalous" value="1.71338,1.67373,504,0 0 0 1 1 1 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="202.20.97.154" dst_port="53056"/>
            <filter src_ip="202.20.103.209" dst_port="53056"/>
            <filter src_ip="202.20.97.154" dst_ip="40.50.94.76" src_port="443"/>
            <filter src_ip="202.20.103.209" dst_ip="40.50.94.76" src_port="443"/>
            <filter src_ip="202.20.103.48" dst_ip="40.50.94.76" src_port="443"/>
            <filter dst_ip="40.50.94.76" src_port="443" dst_port="53056"/>
        </slice>
        <from usec="0" sec="1680584668"/>
        <to usec="0" sec="1680584958"/>
    </anomaly>
    <anomaly type="anomalous" value="1.71338,1.67373,010,0 0 0 1 1 1 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.210.163.170"/>
        </slice>
        <from usec="0" sec="1680584404"/>
        <to usec="0" sec="1680585048"/>
    </anomaly>
    <anomaly type="anomalous" value="1.71338,1.67373,010,0 0 0 1 1 1 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.67.157.241"/>
        </slice>
        <from usec="0" sec="1680584413"/>
        <to usec="0" sec="1680585020"/>
    </anomaly>
    <anomaly type="anomalous" value="1.71338,1.67373,020,0 0 0 1 1 1 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.210.220.144"/>
        </slice>
        <from usec="0" sec="1680584407"/>
        <to usec="0" sec="1680585227"/>
    </anomaly>
    <anomaly type="anomalous" value="6.83277,5.96282,010,1 1 1 1 1 1 1 1 0 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="94.1.62.50"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.97107,2.4222,999,1 1 1 1 1 1 1 0 0 1 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="5.206.101.242" src_port="5066" dst_port="15566"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.26333,2.05775,999,1 0 0 1 1 0 1 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="146.43.255.212" dst_port="161"/>
            <filter src_ip="161.122.110.99" src_port="61000"/>
            <filter src_ip="185.26.170.96" dst_port="5555"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.38249,1.90847,504,1 0 0 1 1 1 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="203.159.97.24" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.71338,1.67373,504,0 0 0 1 1 1 0 0 0 0 0 0,rflatUDP">
        <slice>
            <filter dst_ip="163.210.3.68" src_port="443"/>
        </slice>
        <from usec="0" sec="1680584404"/>
        <to usec="0" sec="1680585227"/>
    </anomaly>
    <anomaly type="anomalous" value="1.73118,1.56014,504,1 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.210.21.252" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.30136,1.89864,999,0 0 0 1 1 1 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="167.57.60.99" src_port="61000"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.01574,1.95667,010,1 0 0 1 0 0 1 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="167.32.181.104"/>
            <filter src_ip="107.180.22.240" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.30136,1.89864,504,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="202.25.13.43" src_port="443"/>
            <filter dst_ip="163.210.95.250" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.77824,1.6741,504,0 0 0 1 1 1 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="203.159.114.194" dst_port="443"/>
            <filter src_ip="203.159.114.194"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.38249,1.90847,503,1 0 0 1 1 1 0 0 0 1 1 1,mptplaHTTP">
        <slice>
            <filter dst_ip="163.210.228.79" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.61771,1.54809,504,0 0 0 0 0 0 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="203.159.102.67"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.84247,1.60326,503,1 1 1 1 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="163.210.228.79" dst_port="80"/>
            <filter dst_ip="13.71.199.203" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.61771,1.54809,503,0 0 0 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="43.126.15.2" src_port="80"/>
            <filter dst_ip="150.185.19.118" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.31079,2.58249,999,1 1 1 1 1 1 1 0 0 1 1 1,ntscUDPOther">
        <slice>
            <filter src_ip="5.206.102.215" src_port="5066" dst_port="36050"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.38249,1.90847,504,1 0 0 1 1 1 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="203.159.102.111" src_port="443"/>
            <filter dst_ip="203.159.102.111" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.9174,1.67403,504,0 0 0 0 1 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="172.37.153.36" src_port="443"/>
            <filter dst_ip="163.210.109.133" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.57224,1.53091,504,0 0 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.210.23.201"/>
            <filter dst_ip="163.210.52.181" src_port="443"/>
            <filter dst_ip="163.210.128.59" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.31079,2.58249,503,1 1 1 1 1 1 1 0 0 1 1 1,ntscACK">
        <slice>
            <filter src_ip="185.27.95.75" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.73118,1.56014,504,1 0 0 0 0 0 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="142.21.195.38" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.61771,1.54809,504,0 0 0 0 0 0 0 0 0 1 1 1,ptmpla">
        <slice>
            <filter src_ip="74.114.228.154" dst_ip="163.210.65.57" src_port="443" dst_port="55873"/>
            <filter src_ip="74.114.228.154" dst_ip="163.210.65.57" src_port="443" dst_port="49597"/>
            <filter src_ip="74.114.228.154" dst_ip="163.210.128.44" src_port="443" dst_port="60259"/>
            <filter src_ip="74.114.228.154" dst_ip="163.210.128.44" src_port="443" dst_port="59110"/>
            <filter src_ip="74.114.228.154" dst_ip="163.210.95.247" src_port="443" dst_port="52995"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.8792,1.65814,504,0 0 0 1 1 0 0 0 0 1 1 1,rflatUDP">
        <slice>
            <filter dst_ip="163.210.76.232" src_port="443"/>
            <filter dst_ip="163.210.76.229" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.95173,1.64932,503,1 1 0 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="203.159.99.176" dst_port="80"/>
            <filter src_ip="124.164.186.67" dst_ip="203.159.105.167" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.7597,2.10228,999,1 1 1 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="43.105.199.146" dst_port="47810"/>
            <filter src_ip="45.221.88.41" src_port="5064" dst_port="5060"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.57224,1.53091,503,0 0 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="203.159.99.176" src_port="80"/>
            <filter src_ip="203.159.105.167" dst_ip="124.164.186.67" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.41191,2.1432,010,0 0 0 1 0 0 1 0 0 1 1 1,ntscSYN139445">
        <slice>
            <filter src_ip="45.162.173.193" dst_port="139"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.61771,1.54809,504,0 0 0 0 0 0 0 0 0 1 1 1,ptmpla">
        <slice>
            <filter src_ip="143.204.169.182" dst_ip="203.159.102.103" src_port="443" dst_port="14031"/>
            <filter src_ip="143.204.169.182" dst_ip="203.159.109.22" src_port="443" dst_port="64117"/>
            <filter src_ip="143.204.169.182" dst_ip="163.210.40.193" src_port="443" dst_port="49288"/>
            <filter src_ip="143.204.169.182" dst_ip="163.210.130.99" src_port="443" dst_port="51559"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.61771,1.54809,504,0 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="162.157.95.213" dst_ip="203.159.102.111" src_port="443" dst_port="3424"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.30136,1.89864,504,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_port="80"/>
            <filter src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.57224,1.53091,503,0 0 0 1 0 0 0 0 0 1 1 1,ptmpHTTP">
        <slice>
            <filter src_ip="203.159.102.92" src_port="443"/>
            <filter src_ip="203.159.102.92" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.7597,2.10228,010,1 1 1 1 1 1 0 0 0 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="45.99.171.177" dst_port="21"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.73118,1.56014,504,1 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.210.128.141" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.68877,1.54309,504,1 0 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="142.21.195.157" src_port="443"/>
            <filter dst_ip="163.210.128.206" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.73118,1.56014,504,1 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="185.111.208.23" dst_ip="163.210.129.23" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.61771,1.54809,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.210.95.7" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.57224,1.53091,504,0 0 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="20.174.78.214" src_port="443"/>
            <filter dst_ip="163.210.29.120" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.61771,1.54809,504,0 0 0 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.210.17.185" src_port="443"/>
            <filter dst_ip="202.25.13.43" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.61771,1.54809,504,0 0 0 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="142.21.205.239" src_port="443"/>
            <filter dst_ip="150.185.207.46" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="5.99848,5.52079,010,0 0 0 0 0 0 0 1 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="45.162.173.193" dst_port="139"/>
        </slice>
        <from usec="0" sec="1680584400"/>
        <to usec="0" sec="1680584446"/>
    </anomaly>
    <anomaly type="anomalous" value="1.61771,1.54809,503,0 0 0 0 0 0 0 0 0 1 1 1,ptmplaHTTP">
        <slice>
            <filter src_ip="163.210.64.127" dst_ip="8.254.234.135" dst_port="80"/>
            <filter src_ip="163.210.64.127" dst_ip="8.254.253.130" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.61771,1.54809,504,0 0 0 0 0 0 0 0 0 1 1 1,ptmpla">
        <slice>
            <filter src_ip="172.37.146.143" dst_ip="150.185.81.109" src_port="443"/>
            <filter src_ip="172.37.146.143" dst_ip="150.185.18.50" src_port="443"/>
            <filter src_ip="172.37.146.143" dst_ip="150.185.204.33" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.61771,1.54809,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="203.159.106.253" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
