<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.420576,2.512060,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="5.15.69.15" dst_ip="144.192.210.221" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088850"/>
        <to usec="0" sec="1420088852"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="214.182.35.21" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088500"/>
        <to usec="0" sec="1420089132"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="218.16.150.32" dst_ip="214.182.44.43" src_port="60489" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088479"/>
        <to usec="0" sec="1420088481"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.215.251.158" dst_ip="204.37.71.92" src_port="53137" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088902"/>
        <to usec="0" sec="1420089291"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="204.37.67.19"/>
        </slice>
        <from usec="0" sec="1420088816"/>
        <to usec="0" sec="1420088818"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="144.209.72.208" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088884"/>
        <to usec="0" sec="1420089271"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="22.83.112.12" dst_ip="148.91.142.236" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088456"/>
        <to usec="0" sec="1420089276"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="148.91.172.16" dst_ip="13.109.68.155" src_port="54430" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088531"/>
        <to usec="0" sec="1420088533"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="204.37.89.28" dst_ip="139.75.188.148" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420089094"/>
        <to usec="0" sec="1420089096"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="182.123.66.216" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420089067"/>
        <to usec="0" sec="1420089132"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.215.88.110" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088856"/>
        <to usec="0" sec="1420088892"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="215.201.139.102" dst_ip="204.37.89.232" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088411"/>
        <to usec="0" sec="1420089124"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="182.123.13.27" dst_ip="204.37.67.17" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088518"/>
        <to usec="0" sec="1420088539"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="144.209.156.133" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088803"/>
        <to usec="0" sec="1420088822"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.215.56.62" dst_ip="204.37.77.62" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088491"/>
        <to usec="0" sec="1420088554"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="104.228.156.38" dst_ip="139.75.102.226" src_port="54370" dst_port="51622" proto="udp"/>
        </slice>
        <from usec="0" sec="1420088891"/>
        <to usec="0" sec="1420088901"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="5.8.36.115" dst_ip="148.91.142.190" src_port="45657" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088960"/>
        <to usec="0" sec="1420088962"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="144.192.210.227" dst_ip="11.230.82.180" src_port="44637" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088408"/>
        <to usec="0" sec="1420088410"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="144.209.83.74" dst_ip="204.37.70.160" src_port="50277" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088661"/>
        <to usec="0" sec="1420088663"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="139.76.180.165" dst_ip="144.23.148.5" src_port="39230" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088781"/>
        <to usec="0" sec="1420088783"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="144.192.50.149" dst_ip="55.136.154.128" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088431"/>
        <to usec="0" sec="1420088973"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.215.44.19" dst_ip="204.37.77.23" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420089246"/>
        <to usec="0" sec="1420089272"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.215.33.37"/>
        </slice>
        <from usec="0" sec="1420088659"/>
        <to usec="0" sec="1420088961"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.215.32.129" dst_ip="204.37.69.222" src_port="38487" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088634"/>
        <to usec="0" sec="1420088904"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="119.219.55.214" dst_ip="215.201.139.55" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420089005"/>
        <to usec="0" sec="1420089011"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="220.58.163.13"/>
        </slice>
        <from usec="0" sec="1420088883"/>
        <to usec="0" sec="1420088893"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="144.209.17.147" dst_ip="204.37.67.230" src_port="56625" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420089070"/>
        <to usec="0" sec="1420089072"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="148.91.176.127" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088997"/>
        <to usec="0" sec="1420089000"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="148.91.152.250"/>
        </slice>
        <from usec="0" sec="1420088698"/>
        <to usec="0" sec="1420088700"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="144.192.204.35"/>
        </slice>
        <from usec="0" sec="1420088475"/>
        <to usec="0" sec="1420088477"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="182.123.35.151" dst_ip="189.36.110.253" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088967"/>
        <to usec="0" sec="1420088974"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="144.192.166.3" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088887"/>
        <to usec="0" sec="1420089214"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="182.123.149.89" dst_ip="215.200.102.8" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088788"/>
        <to usec="0" sec="1420088792"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="144.209.84.15" dst_ip="204.37.69.180" src_port="53486" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088517"/>
        <to usec="0" sec="1420088520"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="144.192.166.26" dst_ip="204.37.71.69" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088410"/>
        <to usec="0" sec="1420089077"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="182.123.151.8" dst_ip="44.24.80.230" src_port="50194" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088960"/>
        <to usec="0" sec="1420088962"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="95.184.138.223" dst_ip="144.192.51.103" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088718"/>
        <to usec="0" sec="1420089195"/>
    </anomaly>
    <anomaly type="notice" value="1.245860,2.483850,504,1 0 0 1 0 0 1 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="144.209.234.213" dst_ip="89.231.161.14"/>
            <filter src_ip="144.209.234.213" dst_port="443"/>
            <filter src_ip="144.209.234.213" dst_port="80"/>
            <filter dst_ip="89.231.161.14" dst_port="443"/>
            <filter dst_ip="89.231.161.14" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.820638,2.480210,503,1 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="61.98.98.209" src_port="80"/>
            <filter dst_ip="182.123.66.241" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="11.146.19.2" dst_ip="148.91.142.190" src_port="24920" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088565"/>
        <to usec="0" sec="1420088567"/>
    </anomaly>
    <anomaly type="notice" value="0.820638,2.480210,504,1 0 0 0 0 0 0 0 0 1 0 0,ntscACK">
        <slice>
            <filter src_ip="182.123.66.253" dst_port="443"/>
            <filter src_ip="182.123.66.253" dst_port="80"/>
            <filter src_ip="182.123.66.232" src_port="43633"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="148.91.176.5" dst_ip="210.62.46.37" src_port="59664" dst_port="443"/>
        </slice>
        <from usec="0" sec="1420088789"/>
        <to usec="0" sec="1420089061"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="95.193.133.168" dst_ip="214.182.41.104" src_port="42098" dst_port="80"/>
        </slice>
        <from usec="0" sec="1420088808"/>
        <to usec="0" sec="1420088824"/>
    </anomaly>
    <anomaly type="notice" value="0.820638,2.480210,503,1 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="139.75.193.70" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="139.75.223.56" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088408"/>
        <to usec="0" sec="1420088410"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="168.61.12.203" dst_port="22" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088475"/>
        <to usec="0" sec="1420089155"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.113.47.98" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088696"/>
        <to usec="0" sec="1420088710"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="144.209.108.251" dst_ip="5.176.202.230" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088685"/>
        <to usec="0" sec="1420088687"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="148.91.245.140" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088889"/>
        <to usec="0" sec="1420089104"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="215.193.191.170" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088871"/>
        <to usec="0" sec="1420088908"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.215.117.103" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088506"/>
        <to usec="0" sec="1420089005"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="195.183.242.246"/>
        </slice>
        <from usec="0" sec="1420088693"/>
        <to usec="0" sec="1420088697"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="120.187.248.86" dst_ip="144.213.130.116" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088960"/>
        <to usec="0" sec="1420088962"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="144.209.14.137" dst_ip="206.175.150.245" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088836"/>
        <to usec="0" sec="1420088838"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="182.123.67.225"/>
        </slice>
        <from usec="0" sec="1420088628"/>
        <to usec="0" sec="1420088981"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="119.132.152.110" dst_ip="144.192.207.154" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088535"/>
        <to usec="0" sec="1420088537"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="7.207.149.22" dst_ip="144.61.251.209" dst_port="80"/>
            <filter src_ip="7.207.149.22" dst_ip="144.61.251.209" dst_port="443"/>
        </slice>
        <from usec="0" sec="1420088493"/>
        <to usec="0" sec="1420089239"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="184.188.241.245"/>
        </slice>
        <from usec="0" sec="1420088765"/>
        <to usec="0" sec="1420089064"/>
    </anomaly>
    <anomaly type="notice" value="1.249070,2.451220,504,1 1 1 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="182.123.66.210"/>
            <filter dst_ip="184.188.242.6" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.883925,2.481030,999,1 1 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="119.219.41.193" dst_ip="215.193.71.6" dst_port="993"/>
            <filter src_ip="119.250.42.58" dst_ip="215.193.71.6" dst_port="993"/>
        </slice>
        <from usec="0" sec="1420088401"/>
        <to usec="0" sec="1420089059"/>
    </anomaly>
    <anomaly type="notice" value="0.820638,2.480210,999,1 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="144.192.207.81" dst_port="25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.364940,2.436870,999,1 1 1 0 0 0 0 0 0 1 1 0,ipv4gretun">
        <slice>
            <filter src_ip="194.121.9.210" dst_ip="214.182.44.181"/>
            <filter src_ip="194.121.9.210" dst_ip="214.182.44.181" src_port="55133" dst_port="443"/>
            <filter src_ip="209.123.132.131" dst_ip="214.182.44.181"/>
            <filter src_ip="210.188.197.102" dst_ip="214.182.44.181"/>
            <filter src_ip="5.184.53.248" dst_ip="214.182.44.181" src_port="45373" dst_port="11211"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.364940,2.436870,999,1 1 1 0 0 0 0 0 0 1 1 0,ipv46tun">
        <slice>
            <filter src_ip="214.182.44.17" dst_ip="136.197.198.179"/>
            <filter src_ip="214.27.56.90" dst_ip="136.197.198.179"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.40.140.161"/>
        </slice>
        <from usec="0" sec="1420089039"/>
        <to usec="0" sec="1420089055"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="4.227.221.166" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420089251"/>
        <to usec="0" sec="1420089252"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="127.194.176.32"/>
        </slice>
        <from usec="0" sec="1420089215"/>
        <to usec="0" sec="1420089235"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.32.197.85" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420089052"/>
        <to usec="0" sec="1420089059"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="4.254.55.28" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088725"/>
        <to usec="0" sec="1420088737"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.171.195.12" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088623"/>
        <to usec="0" sec="1420088636"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.12.88.107" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088719"/>
        <to usec="0" sec="1420088744"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="170.96.92.22" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420089230"/>
        <to usec="0" sec="1420089239"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.135.176.236" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088958"/>
        <to usec="0" sec="1420088970"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.16.150.242" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088688"/>
        <to usec="0" sec="1420088700"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="168.147.133.196" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088531"/>
        <to usec="0" sec="1420088542"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="194.121.9.219" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1420088689"/>
        <to usec="0" sec="1420089212"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="192.180.175.152" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420089045"/>
        <to usec="0" sec="1420089056"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.0.70.29" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420089266"/>
        <to usec="0" sec="1420089278"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="109.72.27.50" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088881"/>
        <to usec="0" sec="1420088896"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="199.44.78.153" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088779"/>
        <to usec="0" sec="1420088795"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="33.115.151.3" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088415"/>
        <to usec="0" sec="1420088428"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="173.233.3.157" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088655"/>
        <to usec="0" sec="1420088670"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="170.123.206.249" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088667"/>
        <to usec="0" sec="1420088690"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.5.126.171" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088890"/>
        <to usec="0" sec="1420088901"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="48.176.227.197" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088456"/>
        <to usec="0" sec="1420088462"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="40.194.217.131" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088795"/>
        <to usec="0" sec="1420088813"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.17.158.239" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420089164"/>
        <to usec="0" sec="1420089167"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="198.19.230.161" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420089038"/>
        <to usec="0" sec="1420089059"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="120.51.1.57" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088721"/>
        <to usec="0" sec="1420088730"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="48.251.106.48" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088803"/>
        <to usec="0" sec="1420088805"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="5.169.72.97" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088804"/>
        <to usec="0" sec="1420088818"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="174.97.175.26" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420089161"/>
        <to usec="0" sec="1420089171"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="174.29.73.194" dst_port="139" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088403"/>
        <to usec="0" sec="1420088404"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="48.253.249.106" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420089015"/>
        <to usec="0" sec="1420089034"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.230.46.191" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088894"/>
        <to usec="0" sec="1420088913"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="141.94.186.108" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088590"/>
        <to usec="0" sec="1420088603"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.56.85.150" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088783"/>
        <to usec="0" sec="1420088786"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="4.53.252.215" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420089200"/>
        <to usec="0" sec="1420089214"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.101.78.39" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420089265"/>
        <to usec="0" sec="1420089276"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="160.60.25.59" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088804"/>
        <to usec="0" sec="1420088818"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="8.139.105.186" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088503"/>
        <to usec="0" sec="1420088522"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.113.120.124" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420089295"/>
        <to usec="0" sec="1420089297"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.152.244.239" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088874"/>
        <to usec="0" sec="1420088890"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="194.51.130.71" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088745"/>
        <to usec="0" sec="1420088747"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="33.144.20.228" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420089056"/>
        <to usec="0" sec="1420089062"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="20.73.249.1" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420089144"/>
        <to usec="0" sec="1420089155"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="169.251.83.45" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088610"/>
        <to usec="0" sec="1420088629"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="171.143.238.63" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420089093"/>
        <to usec="0" sec="1420089111"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="48.179.23.118" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088731"/>
        <to usec="0" sec="1420088751"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="120.183.150.172" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088829"/>
        <to usec="0" sec="1420088837"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="124.65.77.232"/>
        </slice>
        <from usec="0" sec="1420088624"/>
        <to usec="0" sec="1420088632"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="196.32.50.251" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420089036"/>
        <to usec="0" sec="1420089055"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="127.20.0.118" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420089101"/>
        <to usec="0" sec="1420089125"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="127.207.193.57" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088983"/>
        <to usec="0" sec="1420089004"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.142.181.244" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088598"/>
        <to usec="0" sec="1420088610"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.171.13.90" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088413"/>
        <to usec="0" sec="1420088417"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="127.142.16.60" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420089197"/>
        <to usec="0" sec="1420089215"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="194.5.43.150" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088400"/>
        <to usec="0" sec="1420088410"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="13.124.228.126"/>
        </slice>
        <from usec="0" sec="1420089023"/>
        <to usec="0" sec="1420089025"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,503,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="182.123.66.165" dst_port="80"/>
        </slice>
        <from usec="0" sec="1420088400"/>
        <to usec="0" sec="1420089291"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="170.96.92.22" proto="icmp"/>
        </slice>
        <from usec="0" sec="1420089230"/>
        <to usec="0" sec="1420089239"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="33.144.20.228" proto="icmp"/>
        </slice>
        <from usec="0" sec="1420089058"/>
        <to usec="0" sec="1420089061"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,011,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="34.234.188.108" src_port="8080" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420089154"/>
        <to usec="0" sec="1420089159"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="215.193.183.114"/>
        </slice>
        <from usec="0" sec="1420088848"/>
        <to usec="0" sec="1420088850"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="144.209.218.12"/>
        </slice>
        <from usec="0" sec="1420088954"/>
        <to usec="0" sec="1420088956"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="113.135.139.19"/>
        </slice>
        <from usec="0" sec="1420088531"/>
        <to usec="0" sec="1420088533"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="144.192.166.122"/>
        </slice>
        <from usec="0" sec="1420088986"/>
        <to usec="0" sec="1420088989"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="89.231.163.148"/>
        </slice>
        <from usec="0" sec="1420089071"/>
        <to usec="0" sec="1420089232"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="214.182.40.207"/>
        </slice>
        <from usec="0" sec="1420088839"/>
        <to usec="0" sec="1420088940"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="4.227.221.166" proto="icmp"/>
        </slice>
        <from usec="0" sec="1420089251"/>
        <to usec="0" sec="1420089252"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="48.251.106.48" proto="icmp"/>
        </slice>
        <from usec="0" sec="1420088803"/>
        <to usec="0" sec="1420088805"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="117.56.85.150" proto="icmp"/>
        </slice>
        <from usec="0" sec="1420088783"/>
        <to usec="0" sec="1420088786"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="160.60.25.59" proto="icmp"/>
        </slice>
        <from usec="0" sec="1420088816"/>
        <to usec="0" sec="1420088818"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="122.113.120.124" proto="icmp"/>
        </slice>
        <from usec="0" sec="1420089295"/>
        <to usec="0" sec="1420089297"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="117.3.207.57" proto="icmp"/>
        </slice>
        <from usec="0" sec="1420089262"/>
        <to usec="0" sec="1420089264"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="117.59.39.26" proto="icmp"/>
        </slice>
        <from usec="0" sec="1420088623"/>
        <to usec="0" sec="1420088625"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="120.183.150.172" proto="icmp"/>
        </slice>
        <from usec="0" sec="1420088830"/>
        <to usec="0" sec="1420088837"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="20.0.100.210" proto="icmp"/>
        </slice>
        <from usec="0" sec="1420089299"/>
        <to usec="0" sec="1420089301"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="96.169.106.34"/>
        </slice>
        <from usec="0" sec="1420088543"/>
        <to usec="0" sec="1420088546"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="171.64.255.255"/>
        </slice>
        <from usec="0" sec="1420089253"/>
        <to usec="0" sec="1420089255"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="144.192.31.196"/>
        </slice>
        <from usec="0" sec="1420088618"/>
        <to usec="0" sec="1420088621"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="96.242.30.190"/>
        </slice>
        <from usec="0" sec="1420088401"/>
        <to usec="0" sec="1420088404"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="199.8.41.231"/>
        </slice>
        <from usec="0" sec="1420088976"/>
        <to usec="0" sec="1420088978"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="124.58.10.87"/>
        </slice>
        <from usec="0" sec="1420088415"/>
        <to usec="0" sec="1420088417"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="144.23.148.38"/>
        </slice>
        <from usec="0" sec="1420088926"/>
        <to usec="0" sec="1420088928"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,010,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="115.83.132.29" dst_port="23"/>
            <filter src_ip="33.99.158.186" dst_ip="214.182.91.88" dst_port="53"/>
        </slice>
        <from usec="0" sec="1420088678"/>
        <to usec="0" sec="1420088689"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="220.30.199.254"/>
        </slice>
        <from usec="0" sec="1420088624"/>
        <to usec="0" sec="1420088626"/>
    </anomaly>
    <anomaly type="notice" value="0.420576,2.512060,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="139.75.193.89" dst_port="443"/>
        </slice>
        <from usec="0" sec="1420088453"/>
        <to usec="0" sec="1420088996"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="170.33.176.115" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088684"/>
        <to usec="0" sec="1420088704"/>
    </anomaly>
    <anomaly type="notice" value="1.257280,2.434410,503,1 1 0 0 0 0 0 0 0 1 1 0,mptplaHTTP">
        <slice>
            <filter dst_ip="144.192.25.253" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.602007,2.528310,010,0 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.86.114.152" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088753"/>
        <to usec="0" sec="1420088764"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="48.171.152.71" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088967"/>
        <to usec="0" sec="1420088979"/>
    </anomaly>
    <anomaly type="notice" value="1.257280,2.434410,503,1 1 0 0 0 0 0 0 0 1 1 0,ptmpHTTP">
        <slice>
            <filter src_ip="182.123.66.241" src_port="18327"/>
            <filter src_ip="182.123.66.241" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="119.219.224.160" dst_ip="215.193.71.2" dst_port="80"/>
        </slice>
        <from usec="0" sec="1420088443"/>
        <to usec="0" sec="1420088446"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="28.180.1.236" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088914"/>
        <to usec="0" sec="1420088927"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="120.189.201.33" dst_port="8080"/>
        </slice>
        <from usec="0" sec="1420088734"/>
        <to usec="0" sec="1420088815"/>
    </anomaly>
    <anomaly type="notice" value="0.602007,2.528310,504,0 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="215.201.139.102" dst_ip="178.1.192.147" src_port="52539" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1420088543"/>
        <to usec="0" sec="1420088545"/>
    </anomaly>
    <anomaly type="notice" value="0.802939,2.530670,999,0 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="103.166.27.236" src_port="52891" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1420088685"/>
        <to usec="0" sec="1420089212"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="127.106.220.250" dst_ip="144.192.207.211" dst_port="80"/>
        </slice>
        <from usec="0" sec="1420089057"/>
        <to usec="0" sec="1420089080"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="48.161.18.94" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088957"/>
        <to usec="0" sec="1420088970"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="171.6.85.16" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088835"/>
        <to usec="0" sec="1420088861"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="48.252.173.246" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088883"/>
        <to usec="0" sec="1420088895"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="182.123.19.135" dst_ip="75.209.2.134" src_port="63042" dst_port="80"/>
        </slice>
        <from usec="0" sec="1420088720"/>
        <to usec="0" sec="1420089291"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.253.79.180" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088881"/>
        <to usec="0" sec="1420088901"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.141.105.94" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088981"/>
        <to usec="0" sec="1420088994"/>
    </anomaly>
    <anomaly type="notice" value="1.257280,2.434410,503,1 1 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="133.215.120.122" dst_ip="183.201.215.76" src_port="80"/>
            <filter src_ip="133.215.120.122" dst_ip="183.201.215.76" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="119.219.35.97" dst_ip="144.192.25.232" dst_port="80"/>
        </slice>
        <from usec="0" sec="1420088789"/>
        <to usec="0" sec="1420089023"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="170.68.123.223" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088807"/>
        <to usec="0" sec="1420088827"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.13.234.134" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088974"/>
        <to usec="0" sec="1420088986"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="97.52.108.156" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088689"/>
        <to usec="0" sec="1420088700"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="182.123.66.131" dst_ip="86.244.104.187" dst_port="80"/>
        </slice>
        <from usec="0" sec="1420088404"/>
        <to usec="0" sec="1420089276"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="109.78.139.96" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088729"/>
        <to usec="0" sec="1420088741"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="199.85.225.126" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088807"/>
        <to usec="0" sec="1420088820"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.167.146.2" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088760"/>
        <to usec="0" sec="1420088773"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="113.90.179.68" dst_ip="139.75.191.200" src_port="20011" dst_port="57216"/>
        </slice>
        <from usec="0" sec="1420088442"/>
        <to usec="0" sec="1420089265"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="127.198.49.78" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088858"/>
        <to usec="0" sec="1420088870"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="96.249.140.235" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088764"/>
        <to usec="0" sec="1420088776"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="114.65.191.205" dst_ip="139.75.185.229" src_port="1992" dst_port="61745"/>
        </slice>
        <from usec="0" sec="1420089200"/>
        <to usec="0" sec="1420089214"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="96.133.22.29" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088772"/>
        <to usec="0" sec="1420088783"/>
    </anomaly>
    <anomaly type="notice" value="1.269270,2.466840,010,1 1 0 1 0 0 1 0 0 1 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="139.75.103.165" dst_port="10037"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="127.221.224.196" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088695"/>
        <to usec="0" sec="1420088713"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="182.123.148.182" dst_ip="11.49.135.170" dst_port="80"/>
        </slice>
        <from usec="0" sec="1420088400"/>
        <to usec="0" sec="1420088730"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,502,1 1 1 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="121.0.61.205" dst_port="22"/>
        </slice>
        <from usec="0" sec="1420088783"/>
        <to usec="0" sec="1420088800"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.200.221.96" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088688"/>
        <to usec="0" sec="1420088704"/>
    </anomaly>
    <anomaly type="notice" value="0.602007,2.528310,010,0 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="197.59.166.10" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088819"/>
        <to usec="0" sec="1420088830"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.121.158.194" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088894"/>
        <to usec="0" sec="1420088908"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="97.8.74.212" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088854"/>
        <to usec="0" sec="1420088867"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="48.248.99.180" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088918"/>
        <to usec="0" sec="1420088933"/>
    </anomaly>
    <anomaly type="notice" value="0.883925,2.481030,010,1 1 0 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="124.199.19.143" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089133"/>
        <to usec="0" sec="1420089149"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="48.255.5.208" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089116"/>
        <to usec="0" sec="1420089135"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.177.57.26" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088743"/>
        <to usec="0" sec="1420088756"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.83.59.137" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088953"/>
        <to usec="0" sec="1420088964"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="170.198.100.33" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088693"/>
        <to usec="0" sec="1420088707"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,999,1 1 1 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="105.78.136.102" dst_ip="214.182.45.199" src_port="40883" dst_port="25"/>
            <filter src_ip="105.78.136.102" dst_ip="214.182.45.199" src_port="40881" dst_port="25"/>
            <filter src_ip="105.78.136.102" dst_ip="139.75.223.56" src_port="40891" dst_port="25"/>
        </slice>
        <from usec="0" sec="1420089204"/>
        <to usec="0" sec="1420089215"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="126.188.98.109" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088918"/>
        <to usec="0" sec="1420088929"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="215.193.164.92" dst_ip="95.178.185.11" src_port="1900" dst_port="53"/>
            <filter src_ip="215.193.164.92" dst_ip="83.119.75.150" src_port="1900" dst_port="3074"/>
        </slice>
        <from usec="0" sec="1420088435"/>
        <to usec="0" sec="1420089300"/>
    </anomaly>
    <anomaly type="notice" value="0.855753,2.463170,504,1 1 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="182.123.23.60" dst_ip="204.37.67.226" src_port="58493" dst_port="443"/>
            <filter src_ip="182.123.23.60" dst_ip="204.37.67.226" src_port="58492" dst_port="443"/>
            <filter src_ip="182.123.23.60" dst_ip="204.37.67.226" src_port="58491" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,999,1 1 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="95.178.185.11" dst_ip="215.193.164.92" src_port="53" dst_port="1900"/>
            <filter src_ip="83.119.75.150" dst_ip="215.193.164.92" src_port="3074" dst_port="1900"/>
            <filter src_ip="93.175.101.189" dst_ip="215.193.164.92" src_port="29099" dst_port="771"/>
        </slice>
        <from usec="0" sec="1420088501"/>
        <to usec="0" sec="1420089103"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,999,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="182.123.186.95" dst_port="25"/>
        </slice>
        <from usec="0" sec="1420088403"/>
        <to usec="0" sec="1420088410"/>
    </anomaly>
    <anomaly type="notice" value="0.855753,2.463170,503,1 1 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="144.192.206.6" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.602007,2.528310,010,0 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="171.27.222.164" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089015"/>
        <to usec="0" sec="1420089026"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="119.218.99.48" dst_ip="214.182.40.158" dst_port="80"/>
        </slice>
        <from usec="0" sec="1420089009"/>
        <to usec="0" sec="1420089011"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="199.8.31.9" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088820"/>
        <to usec="0" sec="1420088841"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.24.57.2" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088543"/>
        <to usec="0" sec="1420088556"/>
    </anomaly>
    <anomaly type="notice" value="0.922606,2.515350,999,1 1 1 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="223.34.247.15" src_port="5074" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1420088400"/>
        <to usec="0" sec="1420088446"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="221.122.76.30" dst_port="8080"/>
        </slice>
        <from usec="0" sec="1420088852"/>
        <to usec="0" sec="1420088855"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="5.91.1.90" src_port="6000" dst_port="22"/>
        </slice>
        <from usec="0" sec="1420089292"/>
        <to usec="0" sec="1420089294"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.59.39.26" src_port="6000" dst_port="22"/>
        </slice>
        <from usec="0" sec="1420088623"/>
        <to usec="0" sec="1420088660"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="80.34.150.69" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088757"/>
        <to usec="0" sec="1420088769"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.166.240.202" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088755"/>
        <to usec="0" sec="1420088771"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="168.155.3.28" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088933"/>
        <to usec="0" sec="1420088950"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.156.155.219" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088551"/>
        <to usec="0" sec="1420088564"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="120.153.76.87" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088400"/>
        <to usec="0" sec="1420088408"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="40.181.126.125" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089290"/>
        <to usec="0" sec="1420089292"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.42.253.200" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088807"/>
        <to usec="0" sec="1420088821"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="120.47.128.32" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089063"/>
        <to usec="0" sec="1420089078"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="126.5.22.106" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088497"/>
        <to usec="0" sec="1420088522"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.166.37.112" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088653"/>
        <to usec="0" sec="1420088681"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.85.21.14" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089071"/>
        <to usec="0" sec="1420089098"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.80.86.237" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088400"/>
        <to usec="0" sec="1420088411"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="171.128.236.71" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088809"/>
        <to usec="0" sec="1420088826"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.108.20.30" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089000"/>
        <to usec="0" sec="1420089019"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.113.231.132" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088740"/>
        <to usec="0" sec="1420088752"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="97.8.131.113" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088532"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.55.164.131" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089195"/>
        <to usec="0" sec="1420089206"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.120.230.34" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089210"/>
        <to usec="0" sec="1420089213"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="194.118.168.49" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088538"/>
        <to usec="0" sec="1420088551"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="126.171.145.248" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089139"/>
        <to usec="0" sec="1420089150"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="127.126.113.62" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088833"/>
        <to usec="0" sec="1420088848"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="8.178.68.246" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089067"/>
        <to usec="0" sec="1420089082"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.12.17.128" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088526"/>
        <to usec="0" sec="1420088543"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="98.40.226.83" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088622"/>
        <to usec="0" sec="1420088641"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="195.37.108.63" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088619"/>
        <to usec="0" sec="1420088638"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="160.223.165.216" dst_port="445"/>
            <filter src_ip="160.223.165.216" dst_port="139"/>
        </slice>
        <from usec="0" sec="1420088411"/>
        <to usec="0" sec="1420088452"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.224.143.252" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088941"/>
        <to usec="0" sec="1420088952"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="4.92.218.22" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088561"/>
        <to usec="0" sec="1420088574"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.108.196.93" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088504"/>
        <to usec="0" sec="1420088519"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.108.13.187" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088474"/>
        <to usec="0" sec="1420088479"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="33.235.251.189" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089298"/>
        <to usec="0" sec="1420089300"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="28.189.122.165" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088611"/>
        <to usec="0" sec="1420088627"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.174.20.105" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088677"/>
        <to usec="0" sec="1420088693"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="199.19.16.237" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088788"/>
        <to usec="0" sec="1420088792"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.91.55.209" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088920"/>
        <to usec="0" sec="1420088939"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="4.92.70.46" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088638"/>
        <to usec="0" sec="1420088659"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.91.11.226" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088433"/>
        <to usec="0" sec="1420088446"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="48.176.250.200" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089143"/>
        <to usec="0" sec="1420089155"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="48.254.36.135" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088475"/>
        <to usec="0" sec="1420088489"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.251.247.224" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088605"/>
        <to usec="0" sec="1420088627"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.19.126.49" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088779"/>
        <to usec="0" sec="1420088791"/>
    </anomaly>
    <anomaly type="notice" value="0.883925,2.481030,010,1 1 0 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="5.205.193.2" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089179"/>
        <to usec="0" sec="1420089195"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="48.250.149.144" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088614"/>
        <to usec="0" sec="1420088627"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,502,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="121.0.61.125" dst_ip="182.123.246.123" dst_port="22"/>
            <filter src_ip="121.0.61.125" dst_ip="182.123.244.173" dst_port="22"/>
            <filter src_ip="121.0.61.125" dst_ip="182.123.246.122" dst_port="22"/>
        </slice>
        <from usec="0" sec="1420088843"/>
        <to usec="0" sec="1420089291"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="127.206.146.186" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088923"/>
        <to usec="0" sec="1420088941"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="120.158.61.41" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088968"/>
        <to usec="0" sec="1420088982"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="96.207.13.49" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088497"/>
        <to usec="0" sec="1420088509"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="97.68.184.81" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088639"/>
        <to usec="0" sec="1420088653"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.203.169.119" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089004"/>
        <to usec="0" sec="1420089016"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="127.195.185.24" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088491"/>
        <to usec="0" sec="1420088515"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.87.51.210" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088826"/>
        <to usec="0" sec="1420088838"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="156.159.36.189" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089154"/>
        <to usec="0" sec="1420089167"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="48.187.108.44" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088500"/>
        <to usec="0" sec="1420088526"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="97.51.115.9" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088808"/>
        <to usec="0" sec="1420088832"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="97.48.108.207" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088902"/>
        <to usec="0" sec="1420088909"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="196.171.12.94" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088433"/>
        <to usec="0" sec="1420088442"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.168.225.104" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089111"/>
        <to usec="0" sec="1420089125"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="109.70.1.12" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089165"/>
        <to usec="0" sec="1420089177"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="28.183.80.37" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089145"/>
        <to usec="0" sec="1420089166"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.43.218.3" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088844"/>
        <to usec="0" sec="1420088872"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.21.244.166" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088521"/>
        <to usec="0" sec="1420088533"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="124.62.237.94" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088829"/>
        <to usec="0" sec="1420088831"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.113.6.57" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089071"/>
        <to usec="0" sec="1420089085"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.69.92.223" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088960"/>
        <to usec="0" sec="1420088965"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="170.249.154.3" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089207"/>
        <to usec="0" sec="1420089215"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.237.162.102" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089219"/>
        <to usec="0" sec="1420089233"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="196.173.150.124" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088403"/>
        <to usec="0" sec="1420088419"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="126.186.159.127" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089128"/>
        <to usec="0" sec="1420089143"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.185.167.190" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088626"/>
        <to usec="0" sec="1420088638"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="4.237.48.225" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088520"/>
        <to usec="0" sec="1420088534"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="97.30.249.152" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088927"/>
        <to usec="0" sec="1420088954"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="28.178.125.20" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089059"/>
        <to usec="0" sec="1420089085"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="165.124.86.247" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088893"/>
        <to usec="0" sec="1420088909"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="5.75.131.111" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089054"/>
        <to usec="0" sec="1420089076"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.106.149.219" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089090"/>
        <to usec="0" sec="1420089102"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="127.22.230.20" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088400"/>
        <to usec="0" sec="1420088413"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.85.212.236" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088999"/>
        <to usec="0" sec="1420089015"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.198.48.139" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089087"/>
        <to usec="0" sec="1420089093"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.111.242.155" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088942"/>
        <to usec="0" sec="1420088957"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="4.92.108.60" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089156"/>
        <to usec="0" sec="1420089163"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.105.74.138" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088731"/>
        <to usec="0" sec="1420088745"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="171.129.53.231" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088576"/>
        <to usec="0" sec="1420088589"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="194.119.46.124" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088476"/>
        <to usec="0" sec="1420088495"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.83.8.39" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088668"/>
        <to usec="0" sec="1420088680"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="48.248.123.4" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088463"/>
        <to usec="0" sec="1420088486"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.247.164.91" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088691"/>
        <to usec="0" sec="1420088695"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="127.198.101.87" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089256"/>
        <to usec="0" sec="1420089269"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.173.76.53" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088402"/>
        <to usec="0" sec="1420088404"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="127.110.70.160" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088893"/>
        <to usec="0" sec="1420088906"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="48.185.202.198" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088719"/>
        <to usec="0" sec="1420088723"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="109.75.224.201" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088765"/>
        <to usec="0" sec="1420088777"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="127.199.46.177" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088794"/>
        <to usec="0" sec="1420088806"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="48.90.19.111" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089051"/>
        <to usec="0" sec="1420089066"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.184.250.232" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088653"/>
        <to usec="0" sec="1420088656"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.27.48.245" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089208"/>
        <to usec="0" sec="1420089218"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.4.162.170" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089080"/>
        <to usec="0" sec="1420089096"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="127.141.4.172" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089238"/>
        <to usec="0" sec="1420089249"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="170.74.222.231" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089213"/>
        <to usec="0" sec="1420089225"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="96.250.107.246" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088654"/>
        <to usec="0" sec="1420088667"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="102.182.27.10" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089174"/>
        <to usec="0" sec="1420089185"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.240.219.132" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089164"/>
        <to usec="0" sec="1420089183"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.26.120.18" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089253"/>
        <to usec="0" sec="1420089259"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="170.58.143.19" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089164"/>
        <to usec="0" sec="1420089175"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.229.116.243" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088712"/>
        <to usec="0" sec="1420088715"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="170.37.87.72" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088994"/>
        <to usec="0" sec="1420089021"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="48.192.101.30" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088400"/>
        <to usec="0" sec="1420088415"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.29.11.167" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088799"/>
        <to usec="0" sec="1420088804"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.88.57.202" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088933"/>
        <to usec="0" sec="1420088950"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.98.8.196" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088709"/>
        <to usec="0" sec="1420088726"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="124.46.108.144" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089048"/>
        <to usec="0" sec="1420089061"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.220.134.70" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089147"/>
        <to usec="0" sec="1420089160"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.241.80.0" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089092"/>
        <to usec="0" sec="1420089104"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.102.131.10" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088463"/>
        <to usec="0" sec="1420088489"/>
    </anomaly>
    <anomaly type="notice" value="0.883925,2.481030,010,1 1 0 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="199.24.68.92" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089043"/>
        <to usec="0" sec="1420089065"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="127.218.91.180" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089132"/>
        <to usec="0" sec="1420089143"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="127.200.189.191" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089106"/>
        <to usec="0" sec="1420089119"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.226.142.213" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088685"/>
        <to usec="0" sec="1420088689"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="120.183.107.16" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089143"/>
        <to usec="0" sec="1420089156"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="127.195.237.119" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088776"/>
        <to usec="0" sec="1420088782"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="8.182.204.8" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089042"/>
        <to usec="0" sec="1420089056"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="28.189.121.42" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088852"/>
        <to usec="0" sec="1420088866"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="127.141.95.155" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089122"/>
        <to usec="0" sec="1420089137"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="96.212.144.199" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088440"/>
        <to usec="0" sec="1420088462"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.49.148.47" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089004"/>
        <to usec="0" sec="1420089008"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.204.67.95" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088523"/>
        <to usec="0" sec="1420088537"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.198.65.78" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088960"/>
        <to usec="0" sec="1420088974"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.81.251.228" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089193"/>
        <to usec="0" sec="1420089195"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="48.171.88.172" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088741"/>
        <to usec="0" sec="1420088754"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="48.253.16.195" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089200"/>
        <to usec="0" sec="1420089202"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.141.197.190" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089154"/>
        <to usec="0" sec="1420089159"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="141.243.191.224" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088798"/>
        <to usec="0" sec="1420088814"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="102.215.88.125" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088493"/>
        <to usec="0" sec="1420088508"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="97.19.136.115" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088554"/>
        <to usec="0" sec="1420088566"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="96.178.17.142" dst_port="8080"/>
        </slice>
        <from usec="0" sec="1420089159"/>
        <to usec="0" sec="1420089300"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.59.45.123" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088944"/>
        <to usec="0" sec="1420088968"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="4.242.238.215" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088569"/>
        <to usec="0" sec="1420088575"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="96.251.166.243" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088625"/>
        <to usec="0" sec="1420088648"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="4.248.155.77" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088682"/>
        <to usec="0" sec="1420088706"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.54.247.87" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088508"/>
        <to usec="0" sec="1420088519"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="120.62.87.250" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089248"/>
        <to usec="0" sec="1420089261"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="171.143.215.194" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089263"/>
        <to usec="0" sec="1420089277"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="127.195.235.26" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088512"/>
        <to usec="0" sec="1420088524"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="170.214.214.215" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089253"/>
        <to usec="0" sec="1420089272"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.85.230.86" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088997"/>
        <to usec="0" sec="1420089008"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="127.104.14.114" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088921"/>
        <to usec="0" sec="1420088947"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.219.161.164" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088480"/>
        <to usec="0" sec="1420088505"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="198.85.71.247" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088962"/>
        <to usec="0" sec="1420088977"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.186.116.144" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088785"/>
        <to usec="0" sec="1420088799"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="120.45.236.25" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089034"/>
        <to usec="0" sec="1420089056"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.115.157.247" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088873"/>
        <to usec="0" sec="1420088876"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="4.92.179.162" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089039"/>
        <to usec="0" sec="1420089050"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.6.75.216" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088657"/>
        <to usec="0" sec="1420088670"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.87.177.87" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089262"/>
        <to usec="0" sec="1420089276"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="97.11.168.101" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089101"/>
        <to usec="0" sec="1420089109"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.87.131.150" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088418"/>
        <to usec="0" sec="1420088430"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.99.101.174" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089082"/>
        <to usec="0" sec="1420089086"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="120.53.79.240" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088565"/>
        <to usec="0" sec="1420088579"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="67.39.220.163" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088538"/>
        <to usec="0" sec="1420088551"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="20.58.192.117" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088495"/>
        <to usec="0" sec="1420088507"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="127.53.232.93" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089256"/>
        <to usec="0" sec="1420089268"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.154.85.224" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089118"/>
        <to usec="0" sec="1420089132"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="171.118.60.11" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088594"/>
        <to usec="0" sec="1420088608"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="48.103.157.63" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088878"/>
        <to usec="0" sec="1420088898"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="4.241.25.125" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089096"/>
        <to usec="0" sec="1420089158"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.21.65.12" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088595"/>
        <to usec="0" sec="1420088608"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="33.154.86.248" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088777"/>
        <to usec="0" sec="1420088789"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="33.128.8.172" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089240"/>
        <to usec="0" sec="1420089252"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="109.74.180.105" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088444"/>
        <to usec="0" sec="1420088457"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="96.241.151.156" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088829"/>
        <to usec="0" sec="1420088843"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="170.210.115.84" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089115"/>
        <to usec="0" sec="1420089135"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="120.12.39.222" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088531"/>
        <to usec="0" sec="1420088548"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="48.186.67.188" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088936"/>
        <to usec="0" sec="1420088941"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="96.242.202.236" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088534"/>
        <to usec="0" sec="1420088547"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.30.234.246" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089065"/>
        <to usec="0" sec="1420089067"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.184.246.219" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089053"/>
        <to usec="0" sec="1420089067"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.87.166.212" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089107"/>
        <to usec="0" sec="1420089130"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.29.99.83" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089014"/>
        <to usec="0" sec="1420089019"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="48.209.154.83" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088572"/>
        <to usec="0" sec="1420088574"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="97.8.49.16" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088628"/>
        <to usec="0" sec="1420088641"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.117.170.192" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089202"/>
        <to usec="0" sec="1420089219"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.171.227.188" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088486"/>
        <to usec="0" sec="1420088497"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.156.117.23" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088790"/>
        <to usec="0" sec="1420088803"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.124.185.219" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088989"/>
        <to usec="0" sec="1420088998"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.92.154.236" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088488"/>
        <to usec="0" sec="1420088511"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.105.127.197" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089253"/>
        <to usec="0" sec="1420089256"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="33.153.138.65" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088455"/>
        <to usec="0" sec="1420088466"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="170.99.72.56" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088506"/>
        <to usec="0" sec="1420088512"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="167.161.184.194" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088767"/>
        <to usec="0" sec="1420088781"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="33.238.241.41" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089005"/>
        <to usec="0" sec="1420089017"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="197.118.26.213" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089278"/>
        <to usec="0" sec="1420089291"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,011,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="48.161.151.89" src_port="4899" dst_port="6000"/>
        </slice>
        <from usec="0" sec="1420089042"/>
        <to usec="0" sec="1420089044"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="4.242.238.215"/>
        </slice>
        <from usec="0" sec="1420088573"/>
        <to usec="0" sec="1420088575"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="48.186.67.188"/>
        </slice>
        <from usec="0" sec="1420088936"/>
        <to usec="0" sec="1420088940"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="117.105.127.197"/>
        </slice>
        <from usec="0" sec="1420089253"/>
        <to usec="0" sec="1420089256"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,011,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="96.178.17.142" src_port="8080"/>
        </slice>
        <from usec="0" sec="1420089168"/>
        <to usec="0" sec="1420089170"/>
    </anomaly>
    <anomaly type="notice" value="0.754256,2.512970,020,1 1 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="97.8.131.113"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="122.120.230.34"/>
        </slice>
        <from usec="0" sec="1420089211"/>
        <to usec="0" sec="1420089213"/>
    </anomaly>
    <anomaly type="notice" value="0.602007,2.528310,999,0 1 0 0 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.182.53.106" dst_port="53"/>
        </slice>
        <from usec="0" sec="1420089022"/>
        <to usec="0" sec="1420089024"/>
    </anomaly>
    <anomaly type="notice" value="0.602007,2.528310,020,0 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="194.118.168.49"/>
        </slice>
        <from usec="0" sec="1420088538"/>
        <to usec="0" sec="1420088549"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="97.30.167.51"/>
        </slice>
        <from usec="0" sec="1420088568"/>
        <to usec="0" sec="1420088589"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="33.212.181.213"/>
        </slice>
        <from usec="0" sec="1420088908"/>
        <to usec="0" sec="1420088910"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="199.19.16.237"/>
        </slice>
        <from usec="0" sec="1420088788"/>
        <to usec="0" sec="1420088791"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="97.48.108.207"/>
        </slice>
        <from usec="0" sec="1420088902"/>
        <to usec="0" sec="1420088909"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="196.171.12.94"/>
        </slice>
        <from usec="0" sec="1420088433"/>
        <to usec="0" sec="1420088442"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="124.62.237.94"/>
        </slice>
        <from usec="0" sec="1420088829"/>
        <to usec="0" sec="1420088831"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="123.198.48.139"/>
        </slice>
        <from usec="0" sec="1420089087"/>
        <to usec="0" sec="1420089093"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="114.247.164.91"/>
        </slice>
        <from usec="0" sec="1420088693"/>
        <to usec="0" sec="1420088695"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="123.173.76.53"/>
        </slice>
        <from usec="0" sec="1420088402"/>
        <to usec="0" sec="1420088404"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="48.185.202.198"/>
        </slice>
        <from usec="0" sec="1420088720"/>
        <to usec="0" sec="1420088723"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="113.184.250.232"/>
        </slice>
        <from usec="0" sec="1420088653"/>
        <to usec="0" sec="1420088656"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="31.229.116.243"/>
        </slice>
        <from usec="0" sec="1420088712"/>
        <to usec="0" sec="1420088715"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="187.29.11.167"/>
        </slice>
        <from usec="0" sec="1420088799"/>
        <to usec="0" sec="1420088804"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="112.226.142.213"/>
        </slice>
        <from usec="0" sec="1420088686"/>
        <to usec="0" sec="1420088689"/>
    </anomaly>
    <anomaly type="notice" value="0.922606,2.515350,020,1 1 1 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="117.49.148.47"/>
        </slice>
        <from usec="0" sec="1420088985"/>
        <to usec="0" sec="1420089031"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="123.81.251.228"/>
        </slice>
        <from usec="0" sec="1420089193"/>
        <to usec="0" sec="1420089195"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="48.253.16.195"/>
        </slice>
        <from usec="0" sec="1420089200"/>
        <to usec="0" sec="1420089202"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="97.11.168.101"/>
        </slice>
        <from usec="0" sec="1420089101"/>
        <to usec="0" sec="1420089109"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="31.99.101.174"/>
        </slice>
        <from usec="0" sec="1420089082"/>
        <to usec="0" sec="1420089086"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="114.30.234.246"/>
        </slice>
        <from usec="0" sec="1420089065"/>
        <to usec="0" sec="1420089067"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="48.209.154.83"/>
        </slice>
        <from usec="0" sec="1420088572"/>
        <to usec="0" sec="1420088574"/>
    </anomaly>
    <anomaly type="notice" value="0.754256,2.512970,020,1 1 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="122.124.185.219"/>
        </slice>
        <from usec="0" sec="1420088985"/>
        <to usec="0" sec="1420089031"/>
    </anomaly>
    <anomaly type="notice" value="0.754256,2.512970,020,1 1 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="170.99.72.56"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="97.157.126.208" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088670"/>
        <to usec="0" sec="1420088695"/>
    </anomaly>
    <anomaly type="notice" value="0.485541,2.495240,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.18.50.127" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089020"/>
        <to usec="0" sec="1420089031"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.120.233.17" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088875"/>
        <to usec="0" sec="1420088892"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="127.206.227.88" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088711"/>
        <to usec="0" sec="1420088723"/>
    </anomaly>
    <anomaly type="notice" value="1.364940,2.436870,503,1 1 1 0 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_port="80"/>
            <filter src_ip="219.220.112.158" src_port="443"/>
            <filter dst_ip="144.192.50.149" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="194.120.117.237" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088900"/>
        <to usec="0" sec="1420088914"/>
    </anomaly>
    <anomaly type="notice" value="1.031320,2.483440,999,1 1 1 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="144.192.206.2" dst_port="993"/>
            <filter dst_ip="144.192.206.2" dst_port="143"/>
        </slice>
        <from usec="0" sec="1420088401"/>
        <to usec="0" sec="1420089255"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="48.188.175.96" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088841"/>
        <to usec="0" sec="1420088855"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="126.144.65.27" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088737"/>
        <to usec="0" sec="1420088750"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="126.65.94.3" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088760"/>
        <to usec="0" sec="1420088771"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.54.207.129" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088791"/>
        <to usec="0" sec="1420088812"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="124.13.128.173" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088713"/>
        <to usec="0" sec="1420088738"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="5.233.95.179" src_port="6000" dst_port="22"/>
        </slice>
        <from usec="0" sec="1420088821"/>
        <to usec="0" sec="1420088822"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.8.82.43" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088543"/>
        <to usec="0" sec="1420088545"/>
    </anomaly>
    <anomaly type="notice" value="0.677631,2.514440,010,1 0 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="171.27.222.164" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089015"/>
        <to usec="0" sec="1420089030"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="48.179.100.87" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088989"/>
        <to usec="0" sec="1420089001"/>
    </anomaly>
    <anomaly type="notice" value="0.677631,2.514440,010,1 0 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.86.114.152" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088753"/>
        <to usec="0" sec="1420088766"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.215.96.97" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420089097"/>
        <to usec="0" sec="1420089109"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="130.50.131.197" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088936"/>
        <to usec="0" sec="1420088950"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="1.8.82.43"/>
        </slice>
        <from usec="0" sec="1420088543"/>
        <to usec="0" sec="1420088545"/>
    </anomaly>
    <anomaly type="notice" value="0.677631,2.514440,020,1 0 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="194.118.168.49"/>
        </slice>
        <from usec="0" sec="1420088538"/>
        <to usec="0" sec="1420088551"/>
    </anomaly>
    <anomaly type="notice" value="0.719757,2.497640,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="122.115.157.247"/>
        </slice>
        <from usec="0" sec="1420088873"/>
        <to usec="0" sec="1420088875"/>
    </anomaly>
    <anomaly type="notice" value="0.677631,2.514440,010,1 0 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="197.59.166.10" dst_port="23"/>
        </slice>
        <from usec="0" sec="1420088819"/>
        <to usec="0" sec="1420088833"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="13.255.221.202"/>
        </slice>
        <from usec="0" sec="1420088400"/>
        <to usec="0" sec="1420088508"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="148.209.8.219"/>
        </slice>
        <from usec="0" sec="1420088400"/>
        <to usec="0" sec="1420088508"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="220.99.250.111"/>
        </slice>
        <from usec="0" sec="1420088413"/>
        <to usec="0" sec="1420088473"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="144.61.254.120"/>
        </slice>
        <from usec="0" sec="1420088400"/>
        <to usec="0" sec="1420088957"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1420088400"/>
        <to usec="0" sec="1420088688"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1420088400"/>
        <to usec="0" sec="1420089228"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="214.182.33.131"/>
        </slice>
        <from usec="0" sec="1420088400"/>
        <to usec="0" sec="1420089048"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="8.150.74.150"/>
        </slice>
        <from usec="0" sec="1420088400"/>
        <to usec="0" sec="1420088772"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="214.182.41.54"/>
        </slice>
        <from usec="0" sec="1420088403"/>
        <to usec="0" sec="1420088688"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="91.199.230.222"/>
        </slice>
        <from usec="0" sec="1420088403"/>
        <to usec="0" sec="1420088686"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="48.206.132.21"/>
        </slice>
        <from usec="0" sec="1420088497"/>
        <to usec="0" sec="1420088526"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="57.8.25.23"/>
        </slice>
        <from usec="0" sec="1420088649"/>
        <to usec="0" sec="1420088688"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="57.9.44.95"/>
        </slice>
        <from usec="0" sec="1420088442"/>
        <to usec="0" sec="1420088778"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="144.192.51.176"/>
        </slice>
        <from usec="0" sec="1420088400"/>
        <to usec="0" sec="1420088868"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="13.234.74.192"/>
        </slice>
        <from usec="0" sec="1420088400"/>
        <to usec="0" sec="1420088866"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="215.109.201.224"/>
        </slice>
        <from usec="0" sec="1420088405"/>
        <to usec="0" sec="1420088819"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="144.209.66.152"/>
        </slice>
        <from usec="0" sec="1420088664"/>
        <to usec="0" sec="1420088774"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="119.250.235.235"/>
        </slice>
        <from usec="0" sec="1420088714"/>
        <to usec="0" sec="1420088719"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="5.193.200.150"/>
        </slice>
        <from usec="0" sec="1420088401"/>
        <to usec="0" sec="1420088958"/>
    </anomaly>
    <anomaly type="notice" value="1.437870,2.437180,504,1 0 0 1 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="148.91.223.5" dst_port="443"/>
            <filter src_ip="148.91.223.5"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="215.70.169.159"/>
        </slice>
        <from usec="0" sec="1420088411"/>
        <to usec="0" sec="1420088958"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="167.155.144.87"/>
        </slice>
        <from usec="0" sec="1420088438"/>
        <to usec="0" sec="1420088953"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.215.245.95"/>
        </slice>
        <from usec="0" sec="1420088446"/>
        <to usec="0" sec="1420088925"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="223.155.188.109"/>
        </slice>
        <from usec="0" sec="1420088400"/>
        <to usec="0" sec="1420089038"/>
    </anomaly>
    <anomaly type="notice" value="1.568280,2.438120,503,1 1 0 1 0 0 1 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="214.182.40.165" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="214.182.42.38"/>
        </slice>
        <from usec="0" sec="1420088400"/>
        <to usec="0" sec="1420089228"/>
    </anomaly>
    <anomaly type="notice" value="1.269270,2.466840,503,1 1 0 1 0 0 1 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="214.182.35.21" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="164.199.240.144"/>
        </slice>
        <from usec="0" sec="1420088400"/>
        <to usec="0" sec="1420089228"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="127.158.85.174"/>
        </slice>
        <from usec="0" sec="1420088401"/>
        <to usec="0" sec="1420089221"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="196.210.244.136"/>
        </slice>
        <from usec="0" sec="1420088401"/>
        <to usec="0" sec="1420089225"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="98.246.174.75"/>
        </slice>
        <from usec="0" sec="1420088402"/>
        <to usec="0" sec="1420089226"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="182.123.67.182"/>
        </slice>
        <from usec="0" sec="1420088403"/>
        <to usec="0" sec="1420089224"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="144.192.224.215"/>
        </slice>
        <from usec="0" sec="1420088403"/>
        <to usec="0" sec="1420089221"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="75.125.189.159"/>
        </slice>
        <from usec="0" sec="1420088403"/>
        <to usec="0" sec="1420089228"/>
    </anomaly>
    <anomaly type="notice" value="0.849975,2.497940,504,1 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="144.192.51.0" dst_ip="57.9.128.104" dst_port="443"/>
        </slice>
        <from usec="0" sec="1420088404"/>
        <to usec="0" sec="1420089228"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="182.123.106.94"/>
        </slice>
        <from usec="0" sec="1420088408"/>
        <to usec="0" sec="1420089209"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="206.57.45.188"/>
        </slice>
        <from usec="0" sec="1420088409"/>
        <to usec="0" sec="1420089210"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="182.123.15.122"/>
        </slice>
        <from usec="0" sec="1420088415"/>
        <to usec="0" sec="1420089228"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="97.66.148.202"/>
        </slice>
        <from usec="0" sec="1420088591"/>
        <to usec="0" sec="1420089221"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="214.182.44.47"/>
        </slice>
        <from usec="0" sec="1420088602"/>
        <to usec="0" sec="1420089227"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,999,0 0 0 1 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="139.76.132.122" dst_ip="144.192.24.24" dst_port="53"/>
        </slice>
        <from usec="0" sec="1420088730"/>
        <to usec="0" sec="1420089228"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,999,0 0 0 1 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="139.76.132.108" dst_ip="144.192.24.24" dst_port="53"/>
        </slice>
        <from usec="0" sec="1420088735"/>
        <to usec="0" sec="1420089200"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="82.125.167.60"/>
        </slice>
        <from usec="0" sec="1420088764"/>
        <to usec="0" sec="1420089204"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="5.46.225.60"/>
        </slice>
        <from usec="0" sec="1420088938"/>
        <to usec="0" sec="1420089076"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="61.125.131.214"/>
        </slice>
        <from usec="0" sec="1420088990"/>
        <to usec="0" sec="1420089189"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="5.155.88.176"/>
        </slice>
        <from usec="0" sec="1420089068"/>
        <to usec="0" sec="1420089188"/>
    </anomaly>
    <anomaly type="notice" value="0.921477,2.530970,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="205.120.172.101"/>
        </slice>
        <from usec="0" sec="1420089142"/>
        <to usec="0" sec="1420089155"/>
    </anomaly>
    <anomaly type="notice" value="1.660310,2.606680,901,0 0 0 0 1 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1420088400"/>
        <to usec="0" sec="1420088688"/>
    </anomaly>
    <anomaly type="notice" value="1.660310,2.606680,901,0 0 0 0 1 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1420088400"/>
        <to usec="0" sec="1420089228"/>
    </anomaly>
    <anomaly type="notice" value="1.087320,2.548450,999,0 0 0 1 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="144.192.202.219" dst_port="25972"/>
        </slice>
        <from usec="0" sec="1420088401"/>
        <to usec="0" sec="1420089137"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.91.27.186"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="220.13.27.164"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.922606,2.515350,999,1 1 1 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="215.201.179.23" dst_ip="115.120.67.98"/>
            <filter src_ip="215.201.179.23" dst_ip="105.145.133.109"/>
            <filter src_ip="215.201.179.23" dst_port="53"/>
            <filter src_ip="214.182.45.202" dst_ip="105.145.133.109"/>
            <filter src_ip="214.182.45.202" dst_port="53"/>
            <filter dst_ip="105.145.133.109" dst_port="53"/>
            <filter src_ip="215.193.165.6" dst_ip="115.120.67.98" dst_port="53"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420089031"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="144.192.161.63"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,503,0 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="182.123.110.123"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="215.201.179.26"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="139.75.187.228"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="144.192.204.173"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,020,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="214.182.35.24"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="215.193.163.190"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="144.192.204.171"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="1.087320,2.548450,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="215.193.163.187" dst_port="53"/>
        </slice>
        <from usec="0" sec="1420088400"/>
        <to usec="0" sec="1420089228"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="182.123.186.48"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="144.192.207.21"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.922606,2.515350,999,1 1 1 0 0 0 1 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="148.91.45.136" dst_ip="192.65.105.28" dst_port="53"/>
            <filter src_ip="148.91.45.136" dst_ip="204.62.23.243" dst_port="53"/>
        </slice>
        <from usec="0" sec="1420088400"/>
        <to usec="0" sec="1420089300"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="182.123.202.56"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="214.182.46.140"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.182.45.220"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="215.193.188.249"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="194.121.9.219"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.182.45.202" src_port="53"/>
            <filter dst_ip="214.182.45.202" dst_port="53"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.182.45.206" dst_port="53"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.182.45.205"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="148.91.195.156"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="139.75.237.247"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="5.184.53.250"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="5.184.53.249"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="182.123.242.118"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="139.75.134.208"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="144.192.140.178"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="139.75.158.85"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="139.75.184.246"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.714168,2.529670,999,1 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.182.53.106" dst_port="53"/>
        </slice>
        <from usec="0" sec="1420088453"/>
        <to usec="0" sec="1420089270"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="139.75.237.215"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="139.75.141.132"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="139.75.61.42"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.182.33.131"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="139.75.29.123"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="144.192.207.84"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="215.193.162.7"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.182.44.245"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="139.75.197.168"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="139.75.197.169"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="139.75.197.164"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="139.75.9.40"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="144.192.209.160"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="214.182.43.234"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.754256,2.512970,999,1 1 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="162.77.36.121" dst_ip="214.182.41.127" dst_port="53"/>
            <filter src_ip="40.219.26.247" dst_ip="214.182.41.127" dst_port="53"/>
        </slice>
        <from usec="0" sec="1420088401"/>
        <to usec="0" sec="1420089233"/>
    </anomaly>
    <anomaly type="notice" value="1.245860,2.483850,999,1 0 0 1 0 0 1 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="121.0.222.251" dst_ip="144.61.254.199"/>
            <filter src_ip="121.0.222.251" dst_ip="214.182.44.196"/>
            <filter src_ip="121.0.222.251" dst_port="53"/>
            <filter dst_ip="144.61.254.199" dst_port="53"/>
            <filter dst_ip="214.182.44.196" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="139.75.197.229"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="215.193.163.187" dst_ip="0.122.58.144" dst_port="53"/>
            <filter src_ip="215.193.165.6" dst_ip="0.122.58.144" dst_port="53"/>
            <filter src_ip="215.201.179.23" dst_ip="0.122.58.144" dst_port="53"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.182.43.201"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="139.75.199.212"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="215.193.66.0"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="215.193.66.12"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420088536"/>
    </anomaly>
    <anomaly type="notice" value="0.714168,2.529670,010,1 0 0 0 0 0 1 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="90.244.245.220" dst_ip="144.61.242.59"/>
        </slice>
        <from usec="0" sec="1420088633"/>
        <to usec="0" sec="1420088745"/>
    </anomaly>
    <anomaly type="notice" value="1.064550,2.531070,020,0 0 0 0 0 0 1 0 0 1 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="5.184.53.248"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="139.75.197.96" src_port="53"/>
            <filter dst_ip="139.75.197.96"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420089031"/>
    </anomaly>
    <anomaly type="notice" value="1.064550,2.531070,020,0 0 0 0 0 0 1 0 0 1 0 0,icmp_error">
        <slice>
            <filter dst_ip="144.192.200.34"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="139.75.199.99"/>
        </slice>
        <from usec="0" sec="1420088985"/>
        <to usec="0" sec="1420089031"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="144.192.31.130"/>
        </slice>
        <from usec="0" sec="1420088985"/>
        <to usec="0" sec="1420089031"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="144.192.204.170" src_port="53"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420089031"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="139.30.141.44" dst_port="53"/>
            <filter src_ip="194.47.64.151" dst_ip="139.30.141.44" src_port="53"/>
        </slice>
        <from usec="0" sec="1420088985"/>
        <to usec="0" sec="1420089031"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="144.192.207.21" src_port="53"/>
        </slice>
        <from usec="0" sec="1420088985"/>
        <to usec="0" sec="1420089031"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="182.123.202.0" src_port="53"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420089031"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="194.121.9.210"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420089031"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="73.164.152.235"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420089031"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="194.121.9.205"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420089031"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="5.184.53.251"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420089031"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="5.184.53.250"/>
        </slice>
        <from usec="0" sec="1420088985"/>
        <to usec="0" sec="1420089031"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="5.184.53.249"/>
        </slice>
        <from usec="0" sec="1420088985"/>
        <to usec="0" sec="1420089031"/>
    </anomaly>
    <anomaly type="notice" value="1.087320,2.548450,999,0 0 0 1 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="214.182.40.253" dst_port="61963"/>
        </slice>
        <from usec="0" sec="1420088404"/>
        <to usec="0" sec="1420089056"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.182.41.37"/>
        </slice>
        <from usec="0" sec="1420088985"/>
        <to usec="0" sec="1420089031"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="214.182.44.21"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420089031"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="214.182.42.93"/>
        </slice>
        <from usec="0" sec="1420088490"/>
        <to usec="0" sec="1420089031"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="61.188.210.81" src_port="80"/>
        </slice>
        <from usec="0" sec="1420088985"/>
        <to usec="0" sec="1420089031"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="144.61.254.120" dst_port="53"/>
        </slice>
        <from usec="0" sec="1420088985"/>
        <to usec="0" sec="1420089031"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.182.35.20" dst_port="53"/>
        </slice>
        <from usec="0" sec="1420088985"/>
        <to usec="0" sec="1420089031"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="215.201.179.26" dst_port="53"/>
        </slice>
        <from usec="0" sec="1420088985"/>
        <to usec="0" sec="1420089031"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="139.75.187.228" dst_port="53"/>
        </slice>
        <from usec="0" sec="1420088985"/>
        <to usec="0" sec="1420089031"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="215.193.163.187" dst_port="53"/>
        </slice>
        <from usec="0" sec="1420088985"/>
        <to usec="0" sec="1420089031"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="215.193.188.249" dst_port="53"/>
        </slice>
        <from usec="0" sec="1420088985"/>
        <to usec="0" sec="1420089031"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="220.117.188.118" dst_ip="214.182.45.202" dst_port="53"/>
        </slice>
        <from usec="0" sec="1420088985"/>
        <to usec="0" sec="1420089031"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.182.45.206" dst_port="53"/>
        </slice>
        <from usec="0" sec="1420088985"/>
        <to usec="0" sec="1420089031"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="139.75.237.247" dst_port="53"/>
        </slice>
        <from usec="0" sec="1420088985"/>
        <to usec="0" sec="1420089031"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="139.75.158.85" dst_port="53"/>
        </slice>
        <from usec="0" sec="1420088985"/>
        <to usec="0" sec="1420089031"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="139.75.141.132" dst_port="53"/>
        </slice>
        <from usec="0" sec="1420088985"/>
        <to usec="0" sec="1420089031"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="139.75.61.42" dst_port="53"/>
        </slice>
        <from usec="0" sec="1420088985"/>
        <to usec="0" sec="1420089031"/>
    </anomaly>
    <anomaly type="notice" value="1.087320,2.548450,503,0 0 0 1 0 0 1 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="11.225.255.250" dst_ip="144.192.31.218" src_port="80"/>
        </slice>
        <from usec="0" sec="1420088402"/>
        <to usec="0" sec="1420089219"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.182.44.245" dst_port="53"/>
        </slice>
        <from usec="0" sec="1420088985"/>
        <to usec="0" sec="1420089031"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.182.43.234" dst_port="53"/>
        </slice>
        <from usec="0" sec="1420088985"/>
        <to usec="0" sec="1420089031"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.182.41.117" dst_port="53"/>
        </slice>
        <from usec="0" sec="1420088985"/>
        <to usec="0" sec="1420089031"/>
    </anomaly>
    <anomaly type="notice" value="0.797934,2.562290,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="192.221.46.199" dst_port="443"/>
        </slice>
        <from usec="0" sec="1420089075"/>
        <to usec="0" sec="1420089121"/>
    </anomaly>
    <anomaly type="notice" value="0.894488,2.513470,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDP">
        <slice>
            <filter src_ip="144.192.207.84" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.894488,2.513470,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="129.35.53.151"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.894488,2.513470,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.123.186.48"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.894488,2.513470,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="171.75.146.187"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.233650,2.451650,503,1 0 0 0 0 0 0 0 0 1 1 0,ptmplaHTTP">
        <slice>
            <filter src_ip="220.11.8.246" dst_ip="214.182.60.137" src_port="80"/>
            <filter src_ip="220.11.8.246" dst_ip="148.91.164.163" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.894488,2.513470,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="219.52.40.171"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.894488,2.513470,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="219.52.43.106"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.007280,2.465600,010,1 1 1 0 0 0 0 0 0 1 0 0,ntscSYNt">
        <slice>
            <filter src_ip="34.234.188.108" dst_port="8080"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.894488,2.513470,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="199.16.163.176"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.894488,2.513470,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="196.179.186.111"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.894488,2.513470,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="30.242.33.43"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.894488,2.513470,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="11.243.220.190"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.894488,2.513470,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="0.113.251.1"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.894488,2.513470,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="95.184.137.211"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.032210,2.481130,999,1 1 0 0 0 0 1 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="215.193.166.140" dst_port="64644"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.894488,2.513470,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="82.125.166.234"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.894488,2.513470,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="67.74.33.98"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.894488,2.513470,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="144.192.72.89"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.283960,2.485290,503,0 0 0 0 0 0 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="139.75.189.113" src_port="80"/>
            <filter dst_ip="139.75.189.113" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.437870,2.437180,999,1 0 0 1 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="139.75.223.35" dst_port="993"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.233650,2.451650,504,1 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="182.123.67.75" dst_ip="128.124.255.12" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.064550,2.531070,999,0 0 0 0 0 0 1 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="182.123.158.80" dst_port="6881"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.003290,2.498040,999,1 0 0 0 0 0 1 0 0 1 0 0,ntscUDP">
        <slice>
            <filter src_ip="103.166.27.236" src_port="52891" dst_port="1434"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.064550,2.531070,999,0 0 0 0 0 0 1 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="215.193.165.6" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.064550,2.531070,010,0 0 0 0 0 0 1 0 0 1 0 0,ntscSYNt">
        <slice>
            <filter src_ip="5.184.53.248" src_port="45373" dst_port="11211"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.820638,2.480210,504,1 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="144.209.220.81" dst_ip="204.37.89.55" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.233650,2.451650,504,1 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="148.91.41.35" dst_ip="61.76.43.31" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.894488,2.513470,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="85.143.5.234"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.293870,2.517940,504,1 0 0 0 0 0 0 0 0 0 0 1,salphfl">
        <slice>
            <filter src_ip="124.38.81.8" dst_ip="139.75.225.207" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.283960,2.485290,999,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="144.61.254.152" dst_ip="121.0.222.251" src_port="53"/>
            <filter src_ip="144.61.254.152" dst_ip="174.186.227.159" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.283960,2.485290,503,0 0 0 0 0 0 0 0 0 1 1 0,ntscACK">
        <slice>
            <filter src_ip="144.192.206.6" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.283960,2.485290,503,0 0 0 0 0 0 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="182.123.67.75" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.407730,2.503090,999,0 0 0 0 0 0 1 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="215.193.166.140" src_port="64644"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.283960,2.485290,999,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="204.12.32.8" dst_ip="148.91.65.206" src_port="8888"/>
            <filter src_ip="204.12.32.8" dst_ip="148.91.94.209" src_port="8888"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.283960,2.485290,503,0 0 0 0 0 0 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="144.192.51.176" src_port="80"/>
            <filter dst_ip="144.192.51.176" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.283960,2.485290,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="182.123.115.11" dst_ip="220.116.56.25" src_port="61328" dst_port="80"/>
            <filter src_ip="182.123.115.11" dst_ip="220.116.56.25" src_port="61325" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.407730,2.503090,999,0 0 0 0 0 0 1 0 0 1 1 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="215.201.144.144" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.283960,2.485290,503,0 0 0 0 0 0 0 0 0 1 1 0,mptplaHTTP">
        <slice>
            <filter dst_ip="214.182.41.102" dst_port="25"/>
            <filter src_ip="5.155.88.191" dst_ip="214.182.41.102" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.283960,2.485290,501,0 0 0 0 0 0 0 0 0 1 1 0,mptpla">
        <slice>
            <filter src_ip="144.23.144.18" dst_ip="196.178.67.144"/>
            <filter src_ip="144.23.144.19" dst_ip="196.178.67.144" src_port="21"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.283960,2.485290,020,0 0 0 0 0 0 0 0 0 1 1 0,icmp_error">
        <slice>
            <filter dst_ip="13.34.59.99"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
