<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="137.179.114.155" dst_ip="104.122.196.161" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774948"/>
        <to usec="0" sec="1441775605"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="141.151.97.17" dst_ip="79.130.187.66" src_port="39291" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775391"/>
        <to usec="0" sec="1441775393"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="4.213.57.231" dst_ip="219.43.40.14" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775308"/>
        <to usec="0" sec="1441775310"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="218.183.197.181" dst_ip="176.78.146.79" src_port="443" dst_port="51044" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775245"/>
        <to usec="0" sec="1441775246"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="141.151.96.248"/>
        </slice>
        <from usec="0" sec="1441775681"/>
        <to usec="0" sec="1441775695"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="141.151.119.9" dst_ip="171.122.155.244" src_port="57789" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775236"/>
        <to usec="0" sec="1441775699"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="145.27.26.49" dst_ip="137.179.48.68" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775280"/>
        <to usec="0" sec="1441775281"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="7.119.100.236" dst_ip="176.78.7.161" src_port="80" dst_port="53102" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774869"/>
        <to usec="0" sec="1441774871"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="62.58.62.244" dst_ip="176.78.7.24" src_port="80" dst_port="58869" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775419"/>
        <to usec="0" sec="1441775420"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="79.30.43.95" dst_ip="153.23.18.42" src_port="80" dst_port="52324" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775388"/>
        <to usec="0" sec="1441775390"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="206.226.193.58" dst_ip="176.78.227.159" src_port="62630" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775482"/>
        <to usec="0" sec="1441775485"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="176.78.147.180" dst_ip="26.237.205.63" src_port="50065" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775301"/>
        <to usec="0" sec="1441775304"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="219.34.121.26"/>
        </slice>
        <from usec="0" sec="1441775698"/>
        <to usec="0" sec="1441775700"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="96.180.111.178" dst_ip="153.23.17.243" src_port="443" dst_port="50902" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775335"/>
        <to usec="0" sec="1441775340"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="176.78.0.160"/>
        </slice>
        <from usec="0" sec="1441775176"/>
        <to usec="0" sec="1441775496"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="219.34.107.105" dst_ip="180.98.84.145" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775082"/>
        <to usec="0" sec="1441775090"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="215.165.156.171"/>
        </slice>
        <from usec="0" sec="1441775475"/>
        <to usec="0" sec="1441775477"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="176.78.120.232" dst_ip="170.20.108.86" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774990"/>
        <to usec="0" sec="1441774992"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="74.27.164.242" dst_ip="176.78.7.28" src_port="1337" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775331"/>
        <to usec="0" sec="1441775453"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="15.238.200.88" dst_ip="176.78.6.208" src_port="3727" dst_port="52974" proto="udp"/>
        </slice>
        <from usec="0" sec="1441775182"/>
        <to usec="0" sec="1441775586"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="192.125.178.164" dst_ip="219.34.110.191" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775516"/>
        <to usec="0" sec="1441775520"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="102.148.7.96" dst_ip="141.151.13.22" src_port="443" dst_port="60086" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775242"/>
        <to usec="0" sec="1441775252"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="191.216.64.119" dst_ip="176.78.145.214" src_port="443" dst_port="64098" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775044"/>
        <to usec="0" sec="1441775046"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="176.78.147.186" dst_ip="203.75.80.163" src_port="6595" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775074"/>
        <to usec="0" sec="1441775414"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="176.78.34.183"/>
        </slice>
        <from usec="0" sec="1441774976"/>
        <to usec="0" sec="1441774978"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="210.214.235.222" dst_ip="219.43.0.134" src_port="80" dst_port="40975" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775667"/>
        <to usec="0" sec="1441775668"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="102.183.38.112" dst_ip="176.78.67.218" src_port="80" dst_port="3482" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775364"/>
        <to usec="0" sec="1441775366"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="4.181.232.158" dst_ip="176.78.99.80" src_port="54687" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775642"/>
        <to usec="0" sec="1441775690"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="222.28.125.13" dst_ip="137.42.210.188" src_port="80" dst_port="49716" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775091"/>
        <to usec="0" sec="1441775093"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="4.96.129.173"/>
        </slice>
        <from usec="0" sec="1441774946"/>
        <to usec="0" sec="1441774949"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="89.7.213.56"/>
        </slice>
        <from usec="0" sec="1441774874"/>
        <to usec="0" sec="1441774877"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="193.116.210.3" dst_ip="219.34.189.51" src_port="52075" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775602"/>
        <to usec="0" sec="1441775605"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="125.94.89.156" dst_ip="153.23.189.157" src_port="80" dst_port="53571" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775082"/>
        <to usec="0" sec="1441775238"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="176.78.123.137" dst_ip="195.135.44.121" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775067"/>
        <to usec="0" sec="1441775364"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="141.151.0.115"/>
        </slice>
        <from usec="0" sec="1441775462"/>
        <to usec="0" sec="1441775680"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="6.210.182.22" dst_ip="153.23.18.120" src_port="24065" dst_port="60938" proto="udp"/>
        </slice>
        <from usec="0" sec="1441775035"/>
        <to usec="0" sec="1441775163"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="53.165.194.60" dst_ip="151.87.33.158" src_port="80" dst_port="57116" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775044"/>
        <to usec="0" sec="1441775046"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="6.226.246.59" dst_ip="176.78.147.153" src_port="1935" dst_port="54596" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775143"/>
        <to usec="0" sec="1441775445"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="141.151.13.22" dst_ip="157.37.255.66" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775119"/>
        <to usec="0" sec="1441775568"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="141.151.99.100" dst_ip="102.43.173.13" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775402"/>
        <to usec="0" sec="1441775489"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="141.151.202.195" dst_ip="160.187.226.69" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775038"/>
        <to usec="0" sec="1441775205"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="151.87.119.164"/>
        </slice>
        <from usec="0" sec="1441774868"/>
        <to usec="0" sec="1441774909"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="116.212.214.205"/>
        </slice>
        <from usec="0" sec="1441775202"/>
        <to usec="0" sec="1441775204"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="176.78.99.45" dst_ip="31.189.252.150" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775563"/>
        <to usec="0" sec="1441775566"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="176.78.153.220" dst_ip="170.163.246.52" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775105"/>
        <to usec="0" sec="1441775107"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="137.163.189.40" dst_ip="79.31.95.99" src_port="49391" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775415"/>
        <to usec="0" sec="1441775439"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="176.78.124.105" dst_ip="223.102.131.230" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775072"/>
        <to usec="0" sec="1441775110"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="75.27.66.218" dst_ip="153.23.206.116" src_port="80" dst_port="53896" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775601"/>
        <to usec="0" sec="1441775603"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="137.179.209.229"/>
        </slice>
        <from usec="0" sec="1441774816"/>
        <to usec="0" sec="1441774922"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="219.34.107.66" dst_ip="180.98.84.198" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775240"/>
        <to usec="0" sec="1441775246"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="153.18.9.188"/>
        </slice>
        <from usec="0" sec="1441775199"/>
        <to usec="0" sec="1441775202"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="176.78.146.53"/>
        </slice>
        <from usec="0" sec="1441775504"/>
        <to usec="0" sec="1441775506"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="151.87.65.28" dst_ip="75.51.227.195" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775490"/>
        <to usec="0" sec="1441775568"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="176.78.110.13" dst_ip="195.135.44.3" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775446"/>
        <to usec="0" sec="1441775700"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="214.13.0.118" dst_ip="176.78.170.70" src_port="443" dst_port="53880" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775369"/>
        <to usec="0" sec="1441775371"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="219.5.54.252"/>
        </slice>
        <from usec="0" sec="1441774957"/>
        <to usec="0" sec="1441774977"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="137.163.151.22"/>
        </slice>
        <from usec="0" sec="1441775533"/>
        <to usec="0" sec="1441775546"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="180.98.84.255" dst_ip="153.23.16.181" src_port="80" dst_port="56141" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775386"/>
        <to usec="0" sec="1441775524"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="138.238.110.150" dst_ip="137.179.202.219" src_port="50002" dst_port="49594" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775637"/>
        <to usec="0" sec="1441775647"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="164.185.208.28" dst_ip="141.151.19.0" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774920"/>
        <to usec="0" sec="1441775425"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,502,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="79.110.154.17"/>
        </slice>
        <from usec="0" sec="1441775227"/>
        <to usec="0" sec="1441775244"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="137.179.202.218" dst_ip="195.135.38.12" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775076"/>
        <to usec="0" sec="1441775082"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="208.3.136.178" dst_ip="219.34.187.208" src_port="63913" dst_port="43611" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775401"/>
        <to usec="0" sec="1441775403"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="137.163.241.24" dst_ip="28.204.167.21" src_port="80" dst_port="36332" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774851"/>
        <to usec="0" sec="1441774956"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="141.151.211.103"/>
        </slice>
        <from usec="0" sec="1441774809"/>
        <to usec="0" sec="1441775627"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="141.151.61.89" dst_ip="79.31.95.99" src_port="50143" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441775683"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="218.57.64.214" dst_ip="137.163.9.106" src_port="80" dst_port="61298" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774921"/>
        <to usec="0" sec="1441774950"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="13.179.207.17" dst_ip="176.78.251.161" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775283"/>
        <to usec="0" sec="1441775289"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="206.243.73.32" dst_ip="219.34.121.97" src_port="80" dst_port="57049" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775525"/>
        <to usec="0" sec="1441775527"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="4.84.215.7" dst_ip="176.78.227.136" src_port="65077" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775308"/>
        <to usec="0" sec="1441775310"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="176.78.5.130" dst_ip="79.30.172.12" src_port="64248" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775299"/>
        <to usec="0" sec="1441775399"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="4.212.57.152" dst_ip="218.13.117.189" src_port="60381" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775690"/>
        <to usec="0" sec="1441775692"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="219.9.87.45" dst_ip="219.43.0.134" src_port="80" dst_port="45749" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775106"/>
        <to usec="0" sec="1441775107"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="96.140.49.158" dst_ip="176.78.144.156" src_port="993" dst_port="50571" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774851"/>
        <to usec="0" sec="1441774852"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="31.214.57.253" dst_ip="219.34.185.28" src_port="80" dst_port="53610" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775337"/>
        <to usec="0" sec="1441775338"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="218.166.131.187" dst_ip="153.23.129.78" src_port="26298" dst_port="4016" proto="udp"/>
        </slice>
        <from usec="0" sec="1441775082"/>
        <to usec="0" sec="1441775086"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="83.98.36.118" dst_ip="219.34.187.208" src_port="1935" dst_port="42453" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775167"/>
        <to usec="0" sec="1441775493"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="137.179.186.207" dst_ip="104.122.193.49" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774982"/>
        <to usec="0" sec="1441774984"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="40.40.55.162" dst_ip="137.179.96.158" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774953"/>
        <to usec="0" sec="1441774955"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="141.151.69.36" dst_ip="79.110.134.252" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774946"/>
        <to usec="0" sec="1441775538"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="69.177.104.198" dst_ip="176.78.138.37" src_port="7082" dst_port="19498" proto="udp"/>
        </slice>
        <from usec="0" sec="1441775525"/>
        <to usec="0" sec="1441775527"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="137.163.186.162"/>
        </slice>
        <from usec="0" sec="1441774831"/>
        <to usec="0" sec="1441775183"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="176.78.6.208" dst_ip="15.238.200.88" src_port="52974" dst_port="3727" proto="udp"/>
        </slice>
        <from usec="0" sec="1441775182"/>
        <to usec="0" sec="1441775701"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="63.79.116.246" dst_ip="219.34.110.191" src_port="55997" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775190"/>
        <to usec="0" sec="1441775194"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="219.33.19.110" dst_ip="153.23.230.144" src_port="15170" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774816"/>
        <to usec="0" sec="1441774919"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="176.78.52.36" dst_ip="59.178.179.198" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775593"/>
        <to usec="0" sec="1441775595"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="50.138.1.44" dst_ip="176.78.127.110" src_port="80" dst_port="62301" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774918"/>
        <to usec="0" sec="1441774922"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="0.136.190.107" dst_ip="153.23.19.21" src_port="80" dst_port="54266" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774851"/>
        <to usec="0" sec="1441774852"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="141.151.184.35" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774898"/>
        <to usec="0" sec="1441775523"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="63.79.116.242" dst_ip="176.78.99.80" src_port="42398" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775390"/>
        <to usec="0" sec="1441775392"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="137.163.230.249" dst_ip="63.79.119.178" src_port="80" dst_port="51149" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775383"/>
        <to usec="0" sec="1441775384"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="102.170.226.117" dst_ip="153.23.130.80" src_port="443" dst_port="52058" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775265"/>
        <to usec="0" sec="1441775266"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="4.25.53.6" dst_ip="218.13.124.37" dst_port="995" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774880"/>
        <to usec="0" sec="1441775200"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="73.23.62.252"/>
        </slice>
        <from usec="0" sec="1441774816"/>
        <to usec="0" sec="1441774818"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="176.78.146.85" dst_ip="210.125.123.116" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775425"/>
        <to usec="0" sec="1441775533"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="176.78.7.28" dst_ip="66.94.49.150" src_port="64376" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774804"/>
        <to usec="0" sec="1441775684"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="10.174.89.159"/>
        </slice>
        <from usec="0" sec="1441775193"/>
        <to usec="0" sec="1441775195"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="141.151.1.145"/>
        </slice>
        <from usec="0" sec="1441775149"/>
        <to usec="0" sec="1441775153"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="176.78.6.198"/>
        </slice>
        <from usec="0" sec="1441774849"/>
        <to usec="0" sec="1441774852"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="219.34.121.76" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775401"/>
        <to usec="0" sec="1441775521"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="137.179.181.17" dst_ip="195.135.32.128" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775018"/>
        <to usec="0" sec="1441775035"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="151.87.65.88" dst_ip="13.61.42.176" src_port="2267" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775391"/>
        <to usec="0" sec="1441775443"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="211.88.47.148"/>
        </slice>
        <from usec="0" sec="1441775277"/>
        <to usec="0" sec="1441775300"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="219.34.113.16" dst_ip="195.135.32.61" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775540"/>
        <to usec="0" sec="1441775551"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="58.66.108.83" dst_ip="219.34.101.137" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775233"/>
        <to usec="0" sec="1441775235"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="151.87.65.81" dst_ip="109.232.213.80" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774829"/>
        <to usec="0" sec="1441774831"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="221.226.82.165" dst_ip="141.151.111.209" src_port="80" dst_port="50002" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775051"/>
        <to usec="0" sec="1441775053"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="219.34.105.55" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774810"/>
        <to usec="0" sec="1441775597"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="164.186.65.81" dst_ip="153.23.128.6" src_port="1119" dst_port="56759" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775366"/>
        <to usec="0" sec="1441775522"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="116.229.159.171" dst_ip="176.78.183.164" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775554"/>
        <to usec="0" sec="1441775560"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="151.87.121.11"/>
        </slice>
        <from usec="0" sec="1441775490"/>
        <to usec="0" sec="1441775497"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="141.151.66.174" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775554"/>
        <to usec="0" sec="1441775679"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="218.13.124.49" dst_ip="83.155.138.196" src_port="80" dst_port="61208" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775404"/>
        <to usec="0" sec="1441775409"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="175.194.17.166" dst_ip="137.179.88.58" src_port="80" dst_port="10399" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775525"/>
        <to usec="0" sec="1441775526"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="137.179.73.13"/>
        </slice>
        <from usec="0" sec="1441775580"/>
        <to usec="0" sec="1441775664"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="176.78.145.100" dst_ip="174.181.130.72" src_port="49670" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775067"/>
        <to usec="0" sec="1441775485"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="180.123.17.44" dst_ip="153.23.153.94" src_port="58085" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775281"/>
        <to usec="0" sec="1441775284"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="66.94.49.150" dst_ip="176.78.7.28" src_port="80" dst_port="64376" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775538"/>
        <to usec="0" sec="1441775546"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="151.87.127.121" dst_ip="195.135.57.210" src_port="61738" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774987"/>
        <to usec="0" sec="1441775688"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="176.78.147.54"/>
        </slice>
        <from usec="0" sec="1441775682"/>
        <to usec="0" sec="1441775686"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="115.9.229.6"/>
        </slice>
        <from usec="0" sec="1441775675"/>
        <to usec="0" sec="1441775677"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="102.148.1.236" dst_ip="137.163.190.204" src_port="80" dst_port="44311" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775554"/>
        <to usec="0" sec="1441775556"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="68.115.251.225" dst_ip="176.78.145.238" src_port="80" dst_port="51294" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775315"/>
        <to usec="0" sec="1441775316"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="102.148.14.202" dst_ip="141.151.99.189" src_port="80" dst_port="49723" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775421"/>
        <to usec="0" sec="1441775423"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="81.14.50.160" dst_ip="137.186.155.227" src_port="3902" dst_port="49519" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775384"/>
        <to usec="0" sec="1441775386"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="68.115.251.227" dst_ip="176.78.145.238" src_port="80" dst_port="51289" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775314"/>
        <to usec="0" sec="1441775316"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="176.78.6.57"/>
        </slice>
        <from usec="0" sec="1441774809"/>
        <to usec="0" sec="1441775044"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="68.115.251.226" dst_ip="176.78.144.33" src_port="80" dst_port="41159" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774994"/>
        <to usec="0" sec="1441775595"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="44.176.194.202" dst_ip="219.34.187.208" src_port="10006" dst_port="43611" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775581"/>
        <to usec="0" sec="1441775587"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="42.142.142.235" dst_ip="151.87.33.156" src_port="80" dst_port="43845" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775501"/>
        <to usec="0" sec="1441775502"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="176.78.146.202" dst_ip="52.209.141.244" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775182"/>
        <to usec="0" sec="1441775433"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="175.67.158.83" dst_ip="176.78.199.238" src_port="37514" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775502"/>
        <to usec="0" sec="1441775514"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="176.78.105.49" dst_ip="220.140.197.54" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774824"/>
        <to usec="0" sec="1441774827"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="151.87.7.6" dst_ip="49.7.1.137" src_port="49803" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774887"/>
        <to usec="0" sec="1441774965"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="49.12.109.64" dst_ip="151.87.33.201" src_port="80" dst_port="60219" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775502"/>
        <to usec="0" sec="1441775504"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="37.151.142.119" dst_ip="176.78.147.230" src_port="80" dst_port="52932" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775164"/>
        <to usec="0" sec="1441775165"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="169.172.161.155"/>
        </slice>
        <from usec="0" sec="1441775510"/>
        <to usec="0" sec="1441775512"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="68.214.31.93" dst_ip="153.23.17.160" src_port="80" dst_port="60900" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775507"/>
        <to usec="0" sec="1441775613"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="201.38.108.203" dst_ip="218.13.120.239" src_port="43685" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774885"/>
        <to usec="0" sec="1441774888"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="26.239.142.49" dst_ip="153.23.115.33" src_port="443" dst_port="60130" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775392"/>
        <to usec="0" sec="1441775467"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.130.182.59"/>
        </slice>
        <from usec="0" sec="1441775616"/>
        <to usec="0" sec="1441775650"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="50.185.143.242" dst_ip="137.179.58.55" src_port="50477" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774928"/>
        <to usec="0" sec="1441774931"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="137.163.151.167" dst_ip="104.122.193.11" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775109"/>
        <to usec="0" sec="1441775118"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="137.163.191.234" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774950"/>
        <to usec="0" sec="1441775495"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="151.87.42.132" dst_ip="195.135.58.4" src_port="59209" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775503"/>
        <to usec="0" sec="1441775509"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="21.74.121.55" dst_ip="141.151.195.154" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775335"/>
        <to usec="0" sec="1441775337"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="69.184.51.91" dst_ip="219.34.185.28" src_port="9181" dst_port="54673" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775578"/>
        <to usec="0" sec="1441775600"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="219.34.116.75"/>
        </slice>
        <from usec="0" sec="1441774852"/>
        <to usec="0" sec="1441775253"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="21.74.121.62" dst_ip="141.151.195.154" src_port="80" dst_port="61839" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775500"/>
        <to usec="0" sec="1441775502"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="176.78.67.162" dst_ip="13.72.199.86" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775578"/>
        <to usec="0" sec="1441775580"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="24.247.200.200" dst_ip="151.87.33.154" src_port="80" dst_port="59942" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775606"/>
        <to usec="0" sec="1441775608"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="151.87.48.253" dst_ip="57.50.23.69" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775641"/>
        <to usec="0" sec="1441775700"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="176.78.60.139" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774829"/>
        <to usec="0" sec="1441774831"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="68.115.251.218" dst_ip="176.78.147.114" src_port="80" dst_port="60284" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775185"/>
        <to usec="0" sec="1441775565"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="39.204.76.69" dst_ip="153.23.212.226" src_port="6291" dst_port="11283" proto="udp"/>
        </slice>
        <from usec="0" sec="1441775245"/>
        <to usec="0" sec="1441775249"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="13.79.157.17" dst_ip="176.78.120.210" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775437"/>
        <to usec="0" sec="1441775438"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="219.34.103.156"/>
        </slice>
        <from usec="0" sec="1441775076"/>
        <to usec="0" sec="1441775078"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="79.30.1.14" dst_ip="176.78.199.59" src_port="443" dst_port="62131" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774836"/>
        <to usec="0" sec="1441774871"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="4.127.193.106" dst_ip="153.112.145.133" src_port="53022" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774946"/>
        <to usec="0" sec="1441774949"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="219.34.115.221"/>
        </slice>
        <from usec="0" sec="1441775150"/>
        <to usec="0" sec="1441775230"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="170.18.101.48" dst_ip="140.144.213.86" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775323"/>
        <to usec="0" sec="1441775325"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="28.59.108.161" dst_ip="176.78.144.205" src_port="443" dst_port="57202" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775255"/>
        <to usec="0" sec="1441775369"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="176.78.100.233" dst_ip="195.135.58.122" src_port="50419" dst_port="443" proto="udp"/>
        </slice>
        <from usec="0" sec="1441775045"/>
        <to usec="0" sec="1441775363"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="4.50.192.27" dst_ip="219.43.40.65" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775103"/>
        <to usec="0" sec="1441775210"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="160.187.226.69" dst_ip="137.179.34.15" src_port="443" dst_port="53303" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775371"/>
        <to usec="0" sec="1441775407"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="218.113.132.0" dst_ip="153.23.246.187" src_port="443" dst_port="53031" proto="udp"/>
        </slice>
        <from usec="0" sec="1441775662"/>
        <to usec="0" sec="1441775671"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="171.122.155.245" dst_ip="153.23.117.117" src_port="80" dst_port="51674" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775186"/>
        <to usec="0" sec="1441775197"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="218.13.117.189" dst_ip="192.43.48.180" src_port="80" dst_port="24077" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775423"/>
        <to usec="0" sec="1441775424"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="7.100.200.150" dst_ip="218.13.118.151" src_port="11272" dst_port="54892" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775555"/>
        <to usec="0" sec="1441775568"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="151.87.6.176" dst_ip="195.135.32.157" src_port="62474" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774831"/>
        <to usec="0" sec="1441775544"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="195.135.44.151" dst_ip="176.78.124.59" src_port="443" dst_port="49362" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775024"/>
        <to usec="0" sec="1441775025"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="137.179.87.159" dst_ip="195.135.58.195" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774863"/>
        <to usec="0" sec="1441774870"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="176.78.146.164"/>
        </slice>
        <from usec="0" sec="1441775687"/>
        <to usec="0" sec="1441775690"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="176.78.42.149" dst_ip="195.135.44.191" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774838"/>
        <to usec="0" sec="1441775618"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="81.112.167.18"/>
        </slice>
        <from usec="0" sec="1441775488"/>
        <to usec="0" sec="1441775491"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="162.127.16.87" dst_ip="151.87.33.159" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775211"/>
        <to usec="0" sec="1441775454"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="176.78.42.148"/>
        </slice>
        <from usec="0" sec="1441774955"/>
        <to usec="0" sec="1441774964"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="141.151.57.80"/>
        </slice>
        <from usec="0" sec="1441775485"/>
        <to usec="0" sec="1441775488"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="209.40.30.168" dst_ip="176.78.158.49" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775302"/>
        <to usec="0" sec="1441775306"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="137.163.57.226" dst_ip="196.253.223.193" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774870"/>
        <to usec="0" sec="1441775559"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="218.183.199.132" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775144"/>
        <to usec="0" sec="1441775549"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="42.142.82.247" dst_ip="151.87.33.154" src_port="80" dst_port="56817" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775018"/>
        <to usec="0" sec="1441775023"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="219.34.114.79" dst_ip="195.135.59.244" src_port="41597" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775337"/>
        <to usec="0" sec="1441775395"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="176.78.170.70" dst_ip="214.13.0.118" src_port="53880" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775277"/>
        <to usec="0" sec="1441775316"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="176.78.188.5"/>
        </slice>
        <from usec="0" sec="1441775673"/>
        <to usec="0" sec="1441775675"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="165.216.203.81" dst_ip="176.78.86.5" src_port="80" dst_port="55634" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775232"/>
        <to usec="0" sec="1441775233"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="176.78.117.176" dst_ip="191.249.9.43" src_port="57994" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775122"/>
        <to usec="0" sec="1441775141"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="176.78.144.156" dst_ip="96.140.49.158" src_port="50571" dst_port="993" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774848"/>
        <to usec="0" sec="1441774850"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="24.197.103.24" dst_ip="176.78.227.136" src_port="57622" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775596"/>
        <to usec="0" sec="1441775598"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="222.73.160.179" dst_ip="176.78.144.205" src_port="443" dst_port="57193" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775329"/>
        <to usec="0" sec="1441775330"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="176.78.22.32"/>
        </slice>
        <from usec="0" sec="1441775366"/>
        <to usec="0" sec="1441775368"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="207.221.214.140" dst_ip="141.151.179.177" src_port="52325" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775503"/>
        <to usec="0" sec="1441775505"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="32.3.220.125" dst_ip="153.23.187.219" dst_port="5093" proto="udp"/>
        </slice>
        <from usec="0" sec="1441775042"/>
        <to usec="0" sec="1441775261"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="151.87.197.212"/>
        </slice>
        <from usec="0" sec="1441774862"/>
        <to usec="0" sec="1441774951"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="138.33.199.15" dst_ip="176.78.98.119" src_port="1935" dst_port="55154" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774969"/>
        <to usec="0" sec="1441775158"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="139.193.8.203" dst_ip="141.151.106.232" src_port="80" dst_port="46098" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774990"/>
        <to usec="0" sec="1441775539"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="176.78.64.180" dst_ip="171.92.184.173" src_port="59343" dst_port="1935" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775112"/>
        <to usec="0" sec="1441775123"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="90.192.61.205" dst_ip="137.186.149.54" src_port="2626" dst_port="46272" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775275"/>
        <to usec="0" sec="1441775285"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="219.34.112.164" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774835"/>
        <to usec="0" sec="1441775397"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="73.17.21.147" dst_ip="219.34.113.32" src_port="993" dst_port="58394" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775600"/>
        <to usec="0" sec="1441775602"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="195.135.44.187"/>
        </slice>
        <from usec="0" sec="1441775409"/>
        <to usec="0" sec="1441775411"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="219.34.103.238" dst_ip="96.184.175.88" src_port="49431" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775661"/>
        <to usec="0" sec="1441775672"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="191.247.201.144" dst_ip="153.23.242.55" src_port="443" dst_port="3002" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775106"/>
        <to usec="0" sec="1441775624"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="176.78.127.204" dst_ip="214.13.0.118" src_port="49990" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775147"/>
        <to usec="0" sec="1441775193"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="176.78.64.164" dst_ip="215.114.103.194" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775389"/>
        <to usec="0" sec="1441775392"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="57.228.59.79" dst_ip="176.78.199.44" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775314"/>
        <to usec="0" sec="1441775336"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="219.34.103.235"/>
        </slice>
        <from usec="0" sec="1441775265"/>
        <to usec="0" sec="1441775268"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="219.34.118.187" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775106"/>
        <to usec="0" sec="1441775420"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="75.29.12.33" dst_ip="153.23.120.76" src_port="443" dst_port="54253" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775056"/>
        <to usec="0" sec="1441775061"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="1.187.165.206" dst_ip="153.23.18.115" src_port="7273" dst_port="7273" proto="udp"/>
        </slice>
        <from usec="0" sec="1441775699"/>
        <to usec="0" sec="1441775701"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="218.187.140.208" dst_ip="141.151.182.167" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774918"/>
        <to usec="0" sec="1441775624"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="219.34.113.154"/>
        </slice>
        <from usec="0" sec="1441775276"/>
        <to usec="0" sec="1441775278"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="63.26.201.131" dst_ip="153.23.19.150" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775045"/>
        <to usec="0" sec="1441775046"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="164.185.208.31" dst_ip="137.179.114.155" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775167"/>
        <to usec="0" sec="1441775169"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="104.122.207.151" dst_ip="104.122.207.151" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774809"/>
        <to usec="0" sec="1441775650"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="104.122.207.155" dst_ip="104.122.207.155" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774929"/>
        <to usec="0" sec="1441775700"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="176.78.36.122" dst_ip="32.208.156.82" src_port="53000" dst_port="80"/>
            <filter src_ip="137.163.194.16" dst_ip="32.208.156.82" src_port="49203" dst_port="80"/>
            <filter src_ip="176.78.36.190" dst_ip="32.208.156.82" src_port="53059" dst_port="80"/>
            <filter src_ip="176.78.86.231" dst_ip="32.208.156.82" src_port="54957" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441775041"/>
        <to usec="0" sec="1441775134"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="49.188.221.220" dst_ip="49.188.221.220" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775519"/>
        <to usec="0" sec="1441775632"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="223.183.154.24" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775252"/>
        <to usec="0" sec="1441775259"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="4.210.209.65" dst_ip="219.43.40.9" dst_port="443"/>
        </slice>
        <from usec="0" sec="1441775459"/>
        <to usec="0" sec="1441775465"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,503,1 1 1 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="151.87.36.165" src_port="80"/>
        </slice>
        <from usec="0" sec="1441775118"/>
        <to usec="0" sec="1441775542"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,999,1 1 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="40.113.39.173" dst_ip="218.13.127.12" dst_port="123"/>
            <filter src_ip="75.23.50.189" dst_ip="218.13.127.12" dst_port="123"/>
        </slice>
        <from usec="0" sec="1441774805"/>
        <to usec="0" sec="1441775700"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,504,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="176.78.183.164" dst_port="443"/>
            <filter src_ip="40.104.29.135" dst_ip="176.78.183.164" dst_port="993"/>
        </slice>
        <from usec="0" sec="1441774860"/>
        <to usec="0" sec="1441775654"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="219.34.101.101" dst_ip="219.34.101.101" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775224"/>
        <to usec="0" sec="1441775523"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="102.155.225.32" dst_ip="219.34.112.65" src_port="443" dst_port="1045" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775478"/>
        <to usec="0" sec="1441775480"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="219.34.110.191" dst_ip="219.34.110.191" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774942"/>
        <to usec="0" sec="1441775671"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="176.78.117.232" dst_ip="180.98.84.236" src_port="56066" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441775383"/>
        <to usec="0" sec="1441775457"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="176.78.146.164" dst_ip="214.13.0.86" src_port="55239" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775161"/>
        <to usec="0" sec="1441775687"/>
    </anomaly>
    <anomaly type="notice" value="0.609550,1.741610,503,1 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="151.87.33.198" src_port="80"/>
        </slice>
        <from usec="0" sec="1441774988"/>
        <to usec="0" sec="1441775593"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,999,1 1 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="137.163.60.250" dst_ip="83.96.207.52" src_port="60470" dst_port="182"/>
            <filter src_ip="137.163.61.228" dst_ip="83.96.207.52" src_port="62657" dst_port="182"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441775107"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="176.78.42.152" dst_ip="219.42.239.102" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441775531"/>
        <to usec="0" sec="1441775627"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="153.23.19.235" src_port="80"/>
        </slice>
        <from usec="0" sec="1441775423"/>
        <to usec="0" sec="1441775424"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="176.78.107.225" dst_ip="183.165.91.121" src_port="56628" dst_port="443"/>
        </slice>
        <from usec="0" sec="1441775328"/>
        <to usec="0" sec="1441775337"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="166.128.2.176" dst_ip="218.13.124.1" src_port="80" dst_port="123"/>
            <filter src_ip="170.224.64.142" dst_ip="218.13.124.1" src_port="80" dst_port="123"/>
            <filter src_ip="177.79.77.38" dst_ip="218.13.124.1" src_port="80" dst_port="123"/>
            <filter src_ip="12.231.231.254" dst_ip="218.13.124.1" src_port="80" dst_port="123"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441775700"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="176.78.7.167" dst_ip="176.78.7.167" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775039"/>
        <to usec="0" sec="1441775041"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="204.235.241.71" dst_ip="141.151.57.76" src_port="443"/>
        </slice>
        <from usec="0" sec="1441775450"/>
        <to usec="0" sec="1441775509"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="63.79.119.6" dst_ip="218.13.124.106" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441774809"/>
        <to usec="0" sec="1441775626"/>
    </anomaly>
    <anomaly type="notice" value="1.044090,1.746180,503,1 1 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="168.193.178.128" dst_ip="218.13.117.189" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441774955"/>
        <to usec="0" sec="1441775672"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="153.23.230.144"/>
        </slice>
        <from usec="0" sec="1441775366"/>
        <to usec="0" sec="1441775368"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,999,1 1 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="218.13.123.187" dst_port="123"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441775699"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="63.26.201.197" dst_ip="141.151.92.142" src_port="443" dst_port="50537" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775585"/>
        <to usec="0" sec="1441775586"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="210.207.217.53" dst_ip="218.13.124.67" src_port="53" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774885"/>
        <to usec="0" sec="1441774886"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="179.167.22.155" dst_ip="176.78.110.22" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775218"/>
        <to usec="0" sec="1441775219"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="180.98.84.236" dst_ip="153.23.60.90" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775516"/>
        <to usec="0" sec="1441775528"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="210.101.164.8" dst_ip="219.43.0.134" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775643"/>
        <to usec="0" sec="1441775645"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="102.148.14.185" dst_ip="141.151.99.189" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775418"/>
        <to usec="0" sec="1441775420"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="7.51.205.60" dst_ip="176.78.42.149" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775057"/>
        <to usec="0" sec="1441775465"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="176.78.147.174" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441774908"/>
        <to usec="0" sec="1441774979"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="73.23.109.134"/>
        </slice>
        <from usec="0" sec="1441775523"/>
        <to usec="0" sec="1441775525"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="176.78.7.85" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775592"/>
        <to usec="0" sec="1441775615"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="176.78.5.225" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774816"/>
        <to usec="0" sec="1441774879"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="30.46.94.5"/>
        </slice>
        <from usec="0" sec="1441775298"/>
        <to usec="0" sec="1441775301"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="68.126.90.78" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775413"/>
        <to usec="0" sec="1441775436"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="1.218.42.193" dst_ip="176.78.199.238" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775263"/>
        <to usec="0" sec="1441775268"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="137.179.169.246"/>
        </slice>
        <from usec="0" sec="1441775426"/>
        <to usec="0" sec="1441775428"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="188.242.131.122"/>
        </slice>
        <from usec="0" sec="1441775165"/>
        <to usec="0" sec="1441775501"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="14.223.68.220" dst_ip="176.78.251.110" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775345"/>
        <to usec="0" sec="1441775486"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="4.70.66.49"/>
        </slice>
        <from usec="0" sec="1441775677"/>
        <to usec="0" sec="1441775682"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="4.25.24.114" dst_ip="153.112.145.150" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775146"/>
        <to usec="0" sec="1441775160"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="176.78.126.186" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775100"/>
        <to usec="0" sec="1441775430"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="141.151.225.252"/>
        </slice>
        <from usec="0" sec="1441775686"/>
        <to usec="0" sec="1441775688"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="220.220.255.9"/>
        </slice>
        <from usec="0" sec="1441774863"/>
        <to usec="0" sec="1441775528"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="141.151.223.37"/>
        </slice>
        <from usec="0" sec="1441774978"/>
        <to usec="0" sec="1441775156"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="116.212.214.38"/>
        </slice>
        <from usec="0" sec="1441775248"/>
        <to usec="0" sec="1441775253"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="4.25.127.108"/>
        </slice>
        <from usec="0" sec="1441775570"/>
        <to usec="0" sec="1441775575"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="14.122.55.164"/>
        </slice>
        <from usec="0" sec="1441775502"/>
        <to usec="0" sec="1441775505"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="141.151.99.182" dst_ip="191.66.19.239" dst_port="443"/>
            <filter src_ip="141.151.99.182" dst_ip="191.66.19.217" dst_port="443"/>
        </slice>
        <from usec="0" sec="1441774895"/>
        <to usec="0" sec="1441775538"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="176.78.250.174"/>
        </slice>
        <from usec="0" sec="1441774807"/>
        <to usec="0" sec="1441774809"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="176.78.147.14" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775527"/>
        <to usec="0" sec="1441775532"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="7.6.252.11"/>
        </slice>
        <from usec="0" sec="1441775698"/>
        <to usec="0" sec="1441775700"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="137.179.155.37"/>
        </slice>
        <from usec="0" sec="1441775562"/>
        <to usec="0" sec="1441775667"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="137.163.151.177" dst_ip="125.109.148.230" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775109"/>
        <to usec="0" sec="1441775433"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="176.78.127.242"/>
        </slice>
        <from usec="0" sec="1441775012"/>
        <to usec="0" sec="1441775062"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="4.69.254.235"/>
        </slice>
        <from usec="0" sec="1441775077"/>
        <to usec="0" sec="1441775080"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="176.78.199.44"/>
        </slice>
        <from usec="0" sec="1441775314"/>
        <to usec="0" sec="1441775340"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="218.13.120.92"/>
        </slice>
        <from usec="0" sec="1441774922"/>
        <to usec="0" sec="1441774924"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="176.78.58.154" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775178"/>
        <to usec="0" sec="1441775204"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="4.47.136.188" dst_ip="219.34.189.51" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774999"/>
        <to usec="0" sec="1441775001"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="195.158.8.232" dst_port="22" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775667"/>
        <to usec="0" sec="1441775695"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="176.78.145.21" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775569"/>
        <to usec="0" sec="1441775596"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="137.163.41.176"/>
        </slice>
        <from usec="0" sec="1441774906"/>
        <to usec="0" sec="1441775695"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="141.151.185.185"/>
        </slice>
        <from usec="0" sec="1441775305"/>
        <to usec="0" sec="1441775307"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="176.78.6.110" src_port="39867"/>
            <filter src_ip="176.78.6.110" dst_port="80"/>
            <filter src_ip="176.78.6.110" dst_port="443"/>
        </slice>
        <from usec="0" sec="1441774872"/>
        <to usec="0" sec="1441775290"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="176.78.96.129"/>
        </slice>
        <from usec="0" sec="1441775065"/>
        <to usec="0" sec="1441775067"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="59.214.119.28" dst_ip="59.214.119.28" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775466"/>
        <to usec="0" sec="1441775700"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="176.78.224.173"/>
        </slice>
        <from usec="0" sec="1441775469"/>
        <to usec="0" sec="1441775471"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="218.13.125.4"/>
        </slice>
        <from usec="0" sec="1441775243"/>
        <to usec="0" sec="1441775246"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="197.251.159.93" dst_ip="197.251.159.93" proto="icmp"/>
        </slice>
        <from usec="0" sec="1441775100"/>
        <to usec="0" sec="1441775104"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="176.78.108.135" dst_ip="24.220.60.252" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441774804"/>
        <to usec="0" sec="1441775392"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="14.220.86.237" dst_ip="176.78.227.176" dst_port="80"/>
            <filter src_ip="142.47.123.232" dst_ip="176.78.227.176" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441774873"/>
        <to usec="0" sec="1441775044"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="153.119.103.134" dst_ip="219.43.45.99"/>
        </slice>
        <from usec="0" sec="1441775521"/>
        <to usec="0" sec="1441775522"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,ipv4gretun">
        <slice>
            <filter src_ip="223.70.215.155" dst_ip="218.13.122.99"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441775673"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.249.27.1"/>
        </slice>
        <from usec="0" sec="1441774846"/>
        <to usec="0" sec="1441774848"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="15.123.90.34" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774942"/>
        <to usec="0" sec="1441774954"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="7.219.52.52" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775221"/>
        <to usec="0" sec="1441775227"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="188.156.95.49" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774847"/>
        <to usec="0" sec="1441774875"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="27.209.187.36" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775064"/>
        <to usec="0" sec="1441775088"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="168.251.211.27" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775321"/>
        <to usec="0" sec="1441775344"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="218.179.219.225"/>
        </slice>
        <from usec="0" sec="1441775245"/>
        <to usec="0" sec="1441775268"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="168.254.226.113"/>
        </slice>
        <from usec="0" sec="1441775412"/>
        <to usec="0" sec="1441775431"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.193.31.12" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775681"/>
        <to usec="0" sec="1441775698"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="10.164.99.93"/>
        </slice>
        <from usec="0" sec="1441775453"/>
        <to usec="0" sec="1441775467"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="193.228.181.52"/>
        </slice>
        <from usec="0" sec="1441775486"/>
        <to usec="0" sec="1441775500"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="172.130.17.75"/>
        </slice>
        <from usec="0" sec="1441774871"/>
        <to usec="0" sec="1441774879"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="217.57.48.232" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775413"/>
        <to usec="0" sec="1441775425"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="52.31.253.44" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774803"/>
        <to usec="0" sec="1441774809"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="168.252.146.216" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775383"/>
        <to usec="0" sec="1441775395"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="34.204.119.6" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775539"/>
        <to usec="0" sec="1441775566"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="30.94.206.204" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775241"/>
        <to usec="0" sec="1441775253"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="172.21.129.247"/>
        </slice>
        <from usec="0" sec="1441774817"/>
        <to usec="0" sec="1441774835"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="47.86.134.2" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775432"/>
        <to usec="0" sec="1441775446"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.196.37.225"/>
        </slice>
        <from usec="0" sec="1441775263"/>
        <to usec="0" sec="1441775269"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="68.4.221.213" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775496"/>
        <to usec="0" sec="1441775518"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="152.106.221.159"/>
        </slice>
        <from usec="0" sec="1441774817"/>
        <to usec="0" sec="1441774822"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="192.144.244.94" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774974"/>
        <to usec="0" sec="1441774979"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="169.148.150.71" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775203"/>
        <to usec="0" sec="1441775204"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="34.213.37.35" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775436"/>
        <to usec="0" sec="1441775442"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="25.200.39.161" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775456"/>
        <to usec="0" sec="1441775468"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="52.6.81.152" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774866"/>
        <to usec="0" sec="1441774879"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="173.231.115.145" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774827"/>
        <to usec="0" sec="1441774838"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="176.78.28.177"/>
        </slice>
        <from usec="0" sec="1441775117"/>
        <to usec="0" sec="1441775119"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="37.38.55.61" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775183"/>
        <to usec="0" sec="1441775196"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="49.31.189.95" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775585"/>
        <to usec="0" sec="1441775603"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="109.179.137.221" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774966"/>
        <to usec="0" sec="1441774983"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="13.167.127.159" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775586"/>
        <to usec="0" sec="1441775587"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="52.30.182.197" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775063"/>
        <to usec="0" sec="1441775084"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="55.119.150.127" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774940"/>
        <to usec="0" sec="1441774952"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="168.202.26.224"/>
        </slice>
        <from usec="0" sec="1441774859"/>
        <to usec="0" sec="1441774864"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="52.1.224.65" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775401"/>
        <to usec="0" sec="1441775424"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="40.147.211.247" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775331"/>
        <to usec="0" sec="1441775339"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="147.171.74.214" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775238"/>
        <to usec="0" sec="1441775255"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="47.82.62.63" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775570"/>
        <to usec="0" sec="1441775580"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="47.84.81.166" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775072"/>
        <to usec="0" sec="1441775088"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="165.180.117.36" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774965"/>
        <to usec="0" sec="1441774976"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="165.25.76.189" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774883"/>
        <to usec="0" sec="1441774890"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.14.1.3" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775642"/>
        <to usec="0" sec="1441775645"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="176.78.145.195"/>
        </slice>
        <from usec="0" sec="1441775089"/>
        <to usec="0" sec="1441775277"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.52.84.26" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775681"/>
        <to usec="0" sec="1441775695"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="169.67.9.237" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775460"/>
        <to usec="0" sec="1441775489"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="44.181.135.196" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775475"/>
        <to usec="0" sec="1441775494"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="34.204.108.212" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775232"/>
        <to usec="0" sec="1441775244"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.193.57.194" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775178"/>
        <to usec="0" sec="1441775181"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="164.168.195.76" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775306"/>
        <to usec="0" sec="1441775319"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="6.38.107.138" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775537"/>
        <to usec="0" sec="1441775556"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="216.68.19.133" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775552"/>
        <to usec="0" sec="1441775564"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="168.252.146.169" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775145"/>
        <to usec="0" sec="1441775168"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="193.185.102.151" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774899"/>
        <to usec="0" sec="1441774919"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="38.23.176.79" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774915"/>
        <to usec="0" sec="1441774917"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="165.229.213.241" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775486"/>
        <to usec="0" sec="1441775504"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="172.54.210.110" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775589"/>
        <to usec="0" sec="1441775598"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.125.80.78" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775067"/>
        <to usec="0" sec="1441775104"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="173.43.153.58" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775114"/>
        <to usec="0" sec="1441775140"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="52.25.224.139" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774881"/>
        <to usec="0" sec="1441774892"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="44.181.135.112" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775023"/>
        <to usec="0" sec="1441775039"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="29.81.155.66" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774814"/>
        <to usec="0" sec="1441774830"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.220.224.229" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774811"/>
        <to usec="0" sec="1441774812"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="3.184.26.201"/>
        </slice>
        <from usec="0" sec="1441775292"/>
        <to usec="0" sec="1441775305"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.217.134.88" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775145"/>
        <to usec="0" sec="1441775147"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="174.223.57.71" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775589"/>
        <to usec="0" sec="1441775618"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="13.140.48.168" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775197"/>
        <to usec="0" sec="1441775222"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="212.124.77.168" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775590"/>
        <to usec="0" sec="1441775627"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="28.103.53.46" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775689"/>
        <to usec="0" sec="1441775700"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="47.75.24.70" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775463"/>
        <to usec="0" sec="1441775480"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.224.19.192" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774920"/>
        <to usec="0" sec="1441774946"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="218.98.14.123" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441774803"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="52.24.212.127" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775656"/>
        <to usec="0" sec="1441775676"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="197.221.19.50" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775116"/>
        <to usec="0" sec="1441775120"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="141.151.176.242"/>
        </slice>
        <from usec="0" sec="1441775188"/>
        <to usec="0" sec="1441775190"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="137.179.216.46"/>
        </slice>
        <from usec="0" sec="1441775283"/>
        <to usec="0" sec="1441775285"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="173.50.220.250"/>
        </slice>
        <from usec="0" sec="1441775318"/>
        <to usec="0" sec="1441775342"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="47.80.225.103"/>
        </slice>
        <from usec="0" sec="1441774819"/>
        <to usec="0" sec="1441774831"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="8.48.149.201" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775132"/>
        <to usec="0" sec="1441775158"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="17.9.35.254"/>
        </slice>
        <from usec="0" sec="1441775160"/>
        <to usec="0" sec="1441775162"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.170.66.122" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774842"/>
        <to usec="0" sec="1441774865"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="29.184.45.149" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775022"/>
        <to usec="0" sec="1441775038"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="52.31.151.221" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775125"/>
        <to usec="0" sec="1441775147"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="137.163.9.200"/>
        </slice>
        <from usec="0" sec="1441775071"/>
        <to usec="0" sec="1441775550"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="169.136.242.216" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775480"/>
        <to usec="0" sec="1441775492"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="44.190.218.23" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775378"/>
        <to usec="0" sec="1441775389"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="206.217.246.176" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774810"/>
        <to usec="0" sec="1441774822"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.180.47.75" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774969"/>
        <to usec="0" sec="1441774980"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="52.24.1.185" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775514"/>
        <to usec="0" sec="1441775525"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="45.244.138.18"/>
        </slice>
        <from usec="0" sec="1441775662"/>
        <to usec="0" sec="1441775670"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="143.158.126.190" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775625"/>
        <to usec="0" sec="1441775652"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="37.184.28.158" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775562"/>
        <to usec="0" sec="1441775575"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="34.198.242.2" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774850"/>
        <to usec="0" sec="1441774863"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="69.254.23.253" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775523"/>
        <to usec="0" sec="1441775543"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="161.12.232.19"/>
        </slice>
        <from usec="0" sec="1441775146"/>
        <to usec="0" sec="1441775157"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="47.81.111.113" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775615"/>
        <to usec="0" sec="1441775628"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="197.252.195.175" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775423"/>
        <to usec="0" sec="1441775426"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.228.225.226" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441774802"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="52.30.104.148" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775442"/>
        <to usec="0" sec="1441775460"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="44.177.134.33" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775542"/>
        <to usec="0" sec="1441775549"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="217.230.106.241"/>
        </slice>
        <from usec="0" sec="1441775291"/>
        <to usec="0" sec="1441775309"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="174.166.74.66" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775450"/>
        <to usec="0" sec="1441775465"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="166.20.161.118" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775068"/>
        <to usec="0" sec="1441775081"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.220.230.161" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774873"/>
        <to usec="0" sec="1441774875"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="36.220.172.60" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774970"/>
        <to usec="0" sec="1441775420"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="173.57.24.209" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774907"/>
        <to usec="0" sec="1441774924"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="165.150.243.120" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775346"/>
        <to usec="0" sec="1441775357"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.205.73.107" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775272"/>
        <to usec="0" sec="1441775285"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.223.162.105" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775687"/>
        <to usec="0" sec="1441775695"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="172.83.118.248" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775685"/>
        <to usec="0" sec="1441775698"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="172.52.255.6" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775524"/>
        <to usec="0" sec="1441775538"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="32.207.51.45" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775670"/>
        <to usec="0" sec="1441775685"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="52.31.23.108" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441774828"/>
        <to usec="0" sec="1441774841"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="38.108.18.83"/>
        </slice>
        <from usec="0" sec="1441775257"/>
        <to usec="0" sec="1441775273"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="104.238.170.229" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775427"/>
        <to usec="0" sec="1441775443"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.118.139.12" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775051"/>
        <to usec="0" sec="1441775065"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="176.78.147.89" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775405"/>
        <to usec="0" sec="1441775497"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="167.67.228.72" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775108"/>
        <to usec="0" sec="1441775127"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="12.116.64.110"/>
        </slice>
        <from usec="0" sec="1441775168"/>
        <to usec="0" sec="1441775186"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="115.223.162.105" proto="icmp"/>
        </slice>
        <from usec="0" sec="1441775687"/>
        <to usec="0" sec="1441775695"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="167.67.228.72" proto="icmp"/>
        </slice>
        <from usec="0" sec="1441775117"/>
        <to usec="0" sec="1441775119"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="42.142.236.220"/>
        </slice>
        <from usec="0" sec="1441775344"/>
        <to usec="0" sec="1441775345"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="36.193.57.194" proto="icmp"/>
        </slice>
        <from usec="0" sec="1441775178"/>
        <to usec="0" sec="1441775180"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="151.87.33.202"/>
        </slice>
        <from usec="0" sec="1441775457"/>
        <to usec="0" sec="1441775458"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="3.184.26.201" proto="icmp"/>
        </slice>
        <from usec="0" sec="1441775303"/>
        <to usec="0" sec="1441775305"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="47.85.239.113" proto="icmp"/>
        </slice>
        <from usec="0" sec="1441775003"/>
        <to usec="0" sec="1441775010"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="172.130.17.75" proto="icmp"/>
        </slice>
        <from usec="0" sec="1441774871"/>
        <to usec="0" sec="1441774879"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="44.181.121.144" proto="icmp"/>
        </slice>
        <from usec="0" sec="1441775085"/>
        <to usec="0" sec="1441775086"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="38.23.176.79" proto="icmp"/>
        </slice>
        <from usec="0" sec="1441774915"/>
        <to usec="0" sec="1441774917"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="12.236.138.92" proto="icmp"/>
        </slice>
        <from usec="0" sec="1441775039"/>
        <to usec="0" sec="1441775041"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="207.32.122.109" proto="icmp"/>
        </slice>
        <from usec="0" sec="1441775233"/>
        <to usec="0" sec="1441775241"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="67.226.198.20" proto="icmp"/>
        </slice>
        <from usec="0" sec="1441775452"/>
        <to usec="0" sec="1441775454"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="41.234.94.72" proto="icmp"/>
        </slice>
        <from usec="0" sec="1441775633"/>
        <to usec="0" sec="1441775634"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="141.151.110.114"/>
        </slice>
        <from usec="0" sec="1441775478"/>
        <to usec="0" sec="1441775480"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="176.78.5.194"/>
        </slice>
        <from usec="0" sec="1441775195"/>
        <to usec="0" sec="1441775198"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="81.12.42.39"/>
        </slice>
        <from usec="0" sec="1441775515"/>
        <to usec="0" sec="1441775517"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="214.18.43.153"/>
        </slice>
        <from usec="0" sec="1441775064"/>
        <to usec="0" sec="1441775067"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="145.187.222.54"/>
        </slice>
        <from usec="0" sec="1441775107"/>
        <to usec="0" sec="1441775110"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="30.186.80.67"/>
        </slice>
        <from usec="0" sec="1441775698"/>
        <to usec="0" sec="1441775700"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="191.216.87.78"/>
        </slice>
        <from usec="0" sec="1441775186"/>
        <to usec="0" sec="1441775188"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="151.87.206.84"/>
        </slice>
        <from usec="0" sec="1441775586"/>
        <to usec="0" sec="1441775589"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="176.78.145.221"/>
        </slice>
        <from usec="0" sec="1441774994"/>
        <to usec="0" sec="1441774996"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="68.111.241.189"/>
        </slice>
        <from usec="0" sec="1441774961"/>
        <to usec="0" sec="1441774963"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="79.2.236.213"/>
        </slice>
        <from usec="0" sec="1441775449"/>
        <to usec="0" sec="1441775451"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="137.163.195.36"/>
        </slice>
        <from usec="0" sec="1441775073"/>
        <to usec="0" sec="1441775076"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="137.179.41.23"/>
        </slice>
        <from usec="0" sec="1441774841"/>
        <to usec="0" sec="1441774843"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="193.13.42.108"/>
        </slice>
        <from usec="0" sec="1441774906"/>
        <to usec="0" sec="1441774909"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="137.163.180.189"/>
        </slice>
        <from usec="0" sec="1441775390"/>
        <to usec="0" sec="1441775392"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="4.174.192.136"/>
        </slice>
        <from usec="0" sec="1441775611"/>
        <to usec="0" sec="1441775618"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="219.219.16.5"/>
        </slice>
        <from usec="0" sec="1441775502"/>
        <to usec="0" sec="1441775504"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="176.78.136.211"/>
        </slice>
        <from usec="0" sec="1441775595"/>
        <to usec="0" sec="1441775597"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="36.86.141.157"/>
        </slice>
        <from usec="0" sec="1441774968"/>
        <to usec="0" sec="1441774971"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="165.216.95.232"/>
        </slice>
        <from usec="0" sec="1441774865"/>
        <to usec="0" sec="1441774867"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="218.13.120.115"/>
        </slice>
        <from usec="0" sec="1441775048"/>
        <to usec="0" sec="1441775051"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="176.78.145.6"/>
        </slice>
        <from usec="0" sec="1441774844"/>
        <to usec="0" sec="1441774846"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="141.151.171.218"/>
        </slice>
        <from usec="0" sec="1441775462"/>
        <to usec="0" sec="1441775464"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,502,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="176.78.230.49"/>
        </slice>
        <from usec="0" sec="1441775159"/>
        <to usec="0" sec="1441775161"/>
    </anomaly>
    <anomaly type="notice" value="0.383648,1.746420,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="218.13.122.210"/>
        </slice>
        <from usec="0" sec="1441774987"/>
        <to usec="0" sec="1441774989"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,999,1 1 1 0 0 0 0 0 0 0 0 0,ipv4gretun">
        <slice>
            <filter src_ip="218.13.122.99" dst_ip="221.163.238.228"/>
            <filter src_ip="218.13.122.99" dst_ip="223.70.215.155"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441775695"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="155.174.197.236" dst_ip="137.179.114.155" src_port="80"/>
        </slice>
        <from usec="0" sec="1441775192"/>
        <to usec="0" sec="1441775195"/>
    </anomaly>
    <anomaly type="notice" value="0.696293,1.733270,502,1 1 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="207.62.241.69" dst_port="22"/>
            <filter dst_ip="219.34.189.51" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441774802"/>
        <to usec="0" sec="1441775642"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="137.179.89.54" dst_ip="195.135.57.12" src_port="57207" dst_port="443"/>
            <filter src_ip="137.179.89.54" dst_ip="195.135.57.12" src_port="57206" dst_port="443"/>
            <filter src_ip="137.179.89.54" dst_ip="195.135.57.12" src_port="57205" dst_port="443"/>
            <filter src_ip="137.179.89.54" dst_ip="195.135.57.12" src_port="57204" dst_port="443"/>
        </slice>
        <from usec="0" sec="1441775037"/>
        <to usec="0" sec="1441775077"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="62.58.62.247" dst_ip="141.151.175.41" src_port="80" dst_port="64409"/>
            <filter src_ip="62.58.62.247" dst_ip="141.151.175.41" src_port="80" dst_port="64408"/>
            <filter src_ip="62.58.62.247" dst_ip="141.151.175.41" src_port="80" dst_port="64407"/>
            <filter src_ip="62.58.62.247" dst_ip="141.151.175.41" src_port="80" dst_port="64406"/>
            <filter src_ip="62.58.62.247" dst_ip="141.151.175.41" src_port="80" dst_port="64404"/>
        </slice>
        <from usec="0" sec="1441775661"/>
        <to usec="0" sec="1441775672"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="141.151.200.128" dst_port="443"/>
        </slice>
        <from usec="0" sec="1441774807"/>
        <to usec="0" sec="1441775700"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,504,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="141.151.207.33" dst_ip="79.0.154.224" src_port="49592" dst_port="443"/>
        </slice>
        <from usec="0" sec="1441775453"/>
        <to usec="0" sec="1441775471"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="89.7.213.59" dst_ip="176.78.67.174" src_port="80" dst_port="1125"/>
        </slice>
        <from usec="0" sec="1441774922"/>
        <to usec="0" sec="1441774924"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="219.34.112.33" dst_ip="180.98.84.231" src_port="49820" dst_port="80"/>
            <filter src_ip="219.34.112.33" dst_ip="79.3.27.250" src_port="49279" dst_port="80"/>
            <filter src_ip="219.34.112.33" dst_ip="191.216.123.197" src_port="45485" dst_port="443"/>
            <filter src_ip="219.34.112.33" dst_ip="223.210.216.62" src_port="36181" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441775524"/>
        <to usec="0" sec="1441775526"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="2.109.142.225" dst_ip="153.23.230.131" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441774915"/>
        <to usec="0" sec="1441775548"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="176.78.183.164" dst_ip="3.51.198.248" src_port="993" dst_port="1036"/>
        </slice>
        <from usec="0" sec="1441774860"/>
        <to usec="0" sec="1441775524"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="176.78.96.183" dst_ip="195.135.32.26" dst_port="443"/>
            <filter src_ip="176.78.96.183" dst_ip="195.135.32.11" dst_port="443"/>
        </slice>
        <from usec="0" sec="1441775300"/>
        <to usec="0" sec="1441775435"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="219.34.101.101" dst_ip="194.29.18.32" src_port="3385" dst_port="80"/>
            <filter src_ip="219.34.101.101" dst_ip="194.29.18.32" src_port="3075" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441775225"/>
        <to usec="0" sec="1441775670"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,504,1 1 0 0 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="137.179.240.201" dst_ip="195.135.32.207" dst_port="443"/>
        </slice>
        <from usec="0" sec="1441774821"/>
        <to usec="0" sec="1441775695"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,502,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="15.99.131.148" dst_ip="218.13.118.118" src_port="51428" dst_port="22"/>
        </slice>
        <from usec="0" sec="1441774833"/>
        <to usec="0" sec="1441775439"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="172.55.141.47" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775306"/>
        <to usec="0" sec="1441775313"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="219.34.187.208" dst_ip="96.182.191.160" dst_port="443"/>
            <filter src_ip="219.34.187.208" dst_ip="96.182.191.170" dst_port="443"/>
        </slice>
        <from usec="0" sec="1441774928"/>
        <to usec="0" sec="1441775682"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="151.87.7.174" dst_port="123"/>
            <filter src_ip="151.87.7.174" dst_ip="195.135.32.245" dst_port="443"/>
        </slice>
        <from usec="0" sec="1441775102"/>
        <to usec="0" sec="1441775389"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="176.78.98.98" dst_ip="195.135.38.46" src_port="55700" dst_port="443"/>
            <filter src_ip="176.78.98.98" dst_ip="195.135.38.46" src_port="55699" dst_port="443"/>
            <filter src_ip="176.78.98.98" dst_ip="195.135.38.46" src_port="55698" dst_port="443"/>
            <filter src_ip="176.78.98.98" dst_ip="195.135.38.46" src_port="55694" dst_port="443"/>
        </slice>
        <from usec="0" sec="1441775641"/>
        <to usec="0" sec="1441775646"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="209.51.231.110" dst_ip="151.87.33.155" src_port="80" dst_port="52013"/>
        </slice>
        <from usec="0" sec="1441774909"/>
        <to usec="0" sec="1441775647"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="219.34.191.165" dst_ip="180.98.84.239" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441774871"/>
        <to usec="0" sec="1441775016"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="141.151.187.86" dst_ip="170.224.62.102" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441774819"/>
        <to usec="0" sec="1441775675"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,999,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="176.78.183.224" dst_ip="196.204.22.202" dst_port="25"/>
        </slice>
        <from usec="0" sec="1441774930"/>
        <to usec="0" sec="1441775471"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="176.78.124.59" dst_ip="195.135.44.228" dst_port="443"/>
            <filter src_ip="176.78.124.59" dst_ip="195.135.44.151" dst_port="443"/>
            <filter src_ip="176.78.124.59" dst_ip="195.135.58.2" dst_port="443"/>
        </slice>
        <from usec="0" sec="1441775022"/>
        <to usec="0" sec="1441775670"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="203.130.145.222" src_port="6000" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1441775425"/>
        <to usec="0" sec="1441775427"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="151.87.65.114" dst_ip="57.50.23.73" src_port="61238" dst_port="80"/>
            <filter src_ip="151.87.65.114" dst_ip="57.50.23.73" src_port="33870" dst_port="80"/>
            <filter src_ip="151.87.65.114" dst_ip="57.50.23.73" src_port="27636" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441774928"/>
        <to usec="0" sec="1441775406"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="176.78.30.218" dst_ip="31.196.58.224" src_port="60104" dst_port="443"/>
            <filter src_ip="176.78.30.218" dst_ip="31.196.58.0" src_port="49439" dst_port="443"/>
            <filter src_ip="176.78.30.218" dst_ip="28.59.103.226" src_port="59979" dst_port="443"/>
            <filter src_ip="176.78.30.218" dst_ip="26.236.239.87" src_port="60105" dst_port="443"/>
        </slice>
        <from usec="0" sec="1441775380"/>
        <to usec="0" sec="1441775383"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="219.34.121.122" dst_ip="180.98.84.240" src_port="50107" dst_port="80"/>
            <filter src_ip="219.34.121.122" dst_ip="180.98.84.240" src_port="50106" dst_port="80"/>
            <filter src_ip="219.34.121.122" dst_ip="180.98.84.240" src_port="50105" dst_port="80"/>
            <filter src_ip="219.34.121.122" dst_ip="180.98.84.240" src_port="50104" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441774980"/>
        <to usec="0" sec="1441774984"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="83.197.194.106" dst_ip="151.87.33.154" src_port="80" dst_port="40809"/>
        </slice>
        <from usec="0" sec="1441775519"/>
        <to usec="0" sec="1441775523"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="141.151.70.118" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774823"/>
        <to usec="0" sec="1441775529"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,502,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="119.73.183.15" dst_ip="210.254.227.157" src_port="59282" dst_port="22"/>
        </slice>
        <from usec="0" sec="1441775064"/>
        <to usec="0" sec="1441775093"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="176.78.212.191" dst_ip="195.135.44.174" dst_port="443"/>
        </slice>
        <from usec="0" sec="1441774807"/>
        <to usec="0" sec="1441775076"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="200.52.27.66" dst_ip="218.13.122.73" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441774832"/>
        <to usec="0" sec="1441775641"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.188.205.89" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774828"/>
        <to usec="0" sec="1441774839"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="141.151.99.41" dst_ip="13.72.194.29" src_port="22470" dst_port="443"/>
            <filter src_ip="141.151.99.41" dst_ip="222.73.160.84" src_port="22690" dst_port="443"/>
            <filter src_ip="141.151.99.41" dst_ip="26.236.239.95" src_port="22691" dst_port="443"/>
        </slice>
        <from usec="0" sec="1441774961"/>
        <to usec="0" sec="1441775090"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="24.143.132.33" dst_ip="153.23.130.27" src_port="80"/>
        </slice>
        <from usec="0" sec="1441775145"/>
        <to usec="0" sec="1441775148"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="14.160.208.224" dst_ip="176.78.153.72" src_port="16199" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441774988"/>
        <to usec="0" sec="1441774992"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,999,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="176.78.183.250" dst_ip="196.204.22.202" src_port="60249" dst_port="25"/>
        </slice>
        <from usec="0" sec="1441775168"/>
        <to usec="0" sec="1441775170"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="176.78.7.50" dst_ip="180.98.121.183" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441774842"/>
        <to usec="0" sec="1441775664"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="28.207.223.74" dst_ip="140.144.26.31" src_port="62003" dst_port="63424"/>
        </slice>
        <from usec="0" sec="1441775080"/>
        <to usec="0" sec="1441775313"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="51.113.19.43" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774917"/>
        <to usec="0" sec="1441774928"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="176.78.147.234" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441775299"/>
        <to usec="0" sec="1441775558"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="163.195.175.91" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775679"/>
        <to usec="0" sec="1441775701"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,999,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="36.12.134.180" dst_ip="153.23.21.105" src_port="8080" dst_port="63448"/>
        </slice>
        <from usec="0" sec="1441774884"/>
        <to usec="0" sec="1441775340"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="32.235.113.136" dst_ip="153.23.117.117" src_port="80" dst_port="51688"/>
        </slice>
        <from usec="0" sec="1441775388"/>
        <to usec="0" sec="1441775645"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="32.235.112.131" dst_ip="153.23.117.117" src_port="80" dst_port="51687"/>
        </slice>
        <from usec="0" sec="1441775182"/>
        <to usec="0" sec="1441775694"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="137.163.58.73" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441774905"/>
        <to usec="0" sec="1441775642"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="32.25.135.205" dst_ip="137.179.163.188" src_port="44318" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441775681"/>
        <to usec="0" sec="1441775684"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="176.78.125.106" dst_ip="40.252.94.139" dst_port="443"/>
        </slice>
        <from usec="0" sec="1441775122"/>
        <to usec="0" sec="1441775391"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="151.87.65.75" dst_ip="104.122.196.161" src_port="56803" dst_port="80"/>
            <filter src_ip="151.87.65.75" dst_ip="104.122.196.161" src_port="52921" dst_port="80"/>
            <filter src_ip="151.87.65.75" dst_ip="104.122.196.161" src_port="34740" dst_port="80"/>
            <filter src_ip="151.87.65.75" dst_ip="104.122.196.161" src_port="17296" dst_port="80"/>
            <filter src_ip="151.87.65.75" dst_ip="104.122.196.161" src_port="15803" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441774816"/>
        <to usec="0" sec="1441774844"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,999,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="219.34.105.63" dst_ip="11.121.227.176" src_port="5041" dst_port="5834"/>
        </slice>
        <from usec="0" sec="1441774972"/>
        <to usec="0" sec="1441775421"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="176.78.5.173" dst_ip="191.245.82.156" src_port="63681" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441774819"/>
        <to usec="0" sec="1441775691"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="176.78.127.110" dst_ip="50.138.1.44" dst_port="80"/>
            <filter src_ip="176.78.127.110" dst_ip="195.161.114.174" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441774859"/>
        <to usec="0" sec="1441774928"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="125.176.37.146" dst_ip="219.34.118.133" src_port="80" dst_port="63622"/>
        </slice>
        <from usec="0" sec="1441775372"/>
        <to usec="0" sec="1441775598"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.59.111.81" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775572"/>
        <to usec="0" sec="1441775583"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="192.13.60.25" dst_ip="153.23.41.188" src_port="80" dst_port="54857"/>
        </slice>
        <from usec="0" sec="1441774990"/>
        <to usec="0" sec="1441775002"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="176.78.108.47" dst_ip="195.135.59.24" dst_port="443"/>
            <filter src_ip="176.78.108.47" dst_ip="195.135.44.243" dst_port="443"/>
        </slice>
        <from usec="0" sec="1441775483"/>
        <to usec="0" sec="1441775545"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="62.58.58.6" dst_ip="137.163.61.224" src_port="80"/>
        </slice>
        <from usec="0" sec="1441775516"/>
        <to usec="0" sec="1441775518"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="141.151.106.232" dst_ip="139.193.8.203" dst_port="80"/>
            <filter src_ip="141.151.106.33" dst_ip="139.193.8.203" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441775300"/>
        <to usec="0" sec="1441775562"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="176.78.117.239" dst_ip="195.135.58.118" src_port="59758" dst_port="443"/>
            <filter src_ip="176.78.117.239" dst_ip="102.170.166.184" src_port="49487" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441774817"/>
        <to usec="0" sec="1441775593"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,999,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="176.78.210.74" dst_ip="53.39.35.52" src_port="58372" dst_port="20"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441775649"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="176.78.145.114" dst_ip="62.56.222.224" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441775166"/>
        <to usec="0" sec="1441775268"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="215.180.29.40" dst_ip="176.78.7.167" src_port="80"/>
        </slice>
        <from usec="0" sec="1441775544"/>
        <to usec="0" sec="1441775546"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="209.51.230.172" dst_ip="151.87.33.156" src_port="80" dst_port="52187"/>
        </slice>
        <from usec="0" sec="1441775688"/>
        <to usec="0" sec="1441775701"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,999,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.31.236.162" dst_ip="153.23.129.95" src_port="59584" dst_port="62911"/>
        </slice>
        <from usec="0" sec="1441775650"/>
        <to usec="0" sec="1441775684"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,503,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="21.74.121.52" dst_ip="141.151.99.100" src_port="80" dst_port="43974"/>
        </slice>
        <from usec="0" sec="1441775396"/>
        <to usec="0" sec="1441775486"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="219.34.116.64" dst_ip="194.29.3.53" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441775700"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="69.239.124.4" src_port="6000" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1441775654"/>
        <to usec="0" sec="1441775662"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="47.223.46.8" dst_ip="151.87.33.196" src_port="80" dst_port="42455"/>
        </slice>
        <from usec="0" sec="1441775610"/>
        <to usec="0" sec="1441775613"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="201.38.108.236" dst_ip="218.13.122.88" src_port="52941" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441775120"/>
        <to usec="0" sec="1441775123"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="176.78.7.167" dst_ip="215.180.29.40" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441775039"/>
        <to usec="0" sec="1441775664"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.249.31.3" src_port="12200" dst_port="3128"/>
        </slice>
        <from usec="0" sec="1441774806"/>
        <to usec="0" sec="1441774939"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="192.100.225.104" dst_ip="49.188.221.220" dst_port="443"/>
            <filter src_ip="192.100.225.104" dst_ip="24.83.197.71" src_port="445"/>
        </slice>
        <from usec="0" sec="1441774855"/>
        <to usec="0" sec="1441775643"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="2.73.78.92" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441774842"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="141.151.13.255"/>
        </slice>
        <from usec="0" sec="1441774944"/>
        <to usec="0" sec="1441775379"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.176.52.13" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775141"/>
        <to usec="0" sec="1441775156"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="137.179.220.8" dst_ip="195.135.62.94" src_port="63127" dst_port="443"/>
            <filter src_ip="137.179.220.8" dst_ip="195.135.62.94" src_port="53975" dst_port="443"/>
        </slice>
        <from usec="0" sec="1441774953"/>
        <to usec="0" sec="1441775587"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,502,1 1 1 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="211.25.123.195" dst_ip="218.13.117.193" src_port="41042" dst_port="22"/>
            <filter src_ip="211.25.123.195" dst_ip="218.13.117.192" src_port="38057" dst_port="22"/>
            <filter src_ip="211.25.123.195" dst_ip="218.13.117.198" src_port="43923" dst_port="22"/>
        </slice>
        <from usec="0" sec="1441774908"/>
        <to usec="0" sec="1441775569"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="141.151.57.76" dst_ip="204.235.241.71" dst_port="443"/>
            <filter src_ip="141.151.57.76" dst_ip="204.235.241.64" dst_port="443"/>
        </slice>
        <from usec="0" sec="1441775452"/>
        <to usec="0" sec="1441775466"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="151.87.24.38" dst_ip="57.50.23.98" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441775524"/>
        <to usec="0" sec="1441775533"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="193.116.27.29" dst_ip="218.13.127.189" src_port="48005" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441774974"/>
        <to usec="0" sec="1441774977"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="36.80.239.44" dst_ip="151.87.47.167" src_port="443" dst_port="54009"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441774995"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="176.78.199.59" dst_ip="102.45.104.156" dst_port="443"/>
        </slice>
        <from usec="0" sec="1441774831"/>
        <to usec="0" sec="1441774924"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="137.179.188.61" dst_ip="104.122.193.49" src_port="50646" dst_port="443"/>
        </slice>
        <from usec="0" sec="1441775000"/>
        <to usec="0" sec="1441775002"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="44.181.4.156" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775143"/>
        <to usec="0" sec="1441775160"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="21.84.25.19" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775351"/>
        <to usec="0" sec="1441775363"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="63.26.202.84" dst_ip="141.151.193.6" src_port="80" dst_port="57925"/>
        </slice>
        <from usec="0" sec="1441774869"/>
        <to usec="0" sec="1441775425"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="176.78.199.25" dst_ip="79.30.15.130" src_port="57757" dst_port="443"/>
        </slice>
        <from usec="0" sec="1441775641"/>
        <to usec="0" sec="1441775699"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="176.78.170.103" dst_ip="191.209.123.148" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441775077"/>
        <to usec="0" sec="1441775645"/>
    </anomaly>
    <anomaly type="notice" value="0.942952,1.779600,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="211.17.215.235" dst_port="22"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441775613"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,999,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="218.13.118.155" dst_ip="11.121.223.202" src_port="8080" dst_port="64540"/>
        </slice>
        <from usec="0" sec="1441774990"/>
        <to usec="0" sec="1441775001"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="194.63.22.202" src_port="5115" dst_port="5080"/>
        </slice>
        <from usec="0" sec="1441775409"/>
        <to usec="0" sec="1441775626"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="218.187.140.221" dst_ip="141.151.182.167" src_port="80"/>
        </slice>
        <from usec="0" sec="1441775018"/>
        <to usec="0" sec="1441775626"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="192.108.171.49" dst_ip="176.78.122.159" src_port="80"/>
        </slice>
        <from usec="0" sec="1441775620"/>
        <to usec="0" sec="1441775622"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="151.87.33.154" dst_ip="210.53.225.9" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441774828"/>
        <to usec="0" sec="1441775592"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="216.109.215.107" dst_ip="137.163.240.179" src_port="56542" dst_port="443"/>
            <filter src_ip="216.109.215.107" dst_ip="137.163.240.179" src_port="56541" dst_port="443"/>
            <filter src_ip="216.109.215.107" dst_ip="137.163.240.179" src_port="56534" dst_port="443"/>
            <filter src_ip="216.109.215.107" dst_ip="137.163.240.179" src_port="56533" dst_port="443"/>
            <filter src_ip="216.109.215.107" dst_ip="137.163.240.179" src_port="56532" dst_port="443"/>
        </slice>
        <from usec="0" sec="1441775626"/>
        <to usec="0" sec="1441775674"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="7.51.213.165" dst_ip="219.34.103.254" src_port="80" dst_port="55267"/>
        </slice>
        <from usec="0" sec="1441775437"/>
        <to usec="0" sec="1441775445"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,999,1 1 1 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="137.179.48.132" dst_port="25"/>
            <filter dst_ip="137.179.48.132" dst_port="993"/>
            <filter dst_ip="140.144.56.204" dst_port="25"/>
        </slice>
        <from usec="0" sec="1441774810"/>
        <to usec="0" sec="1441775681"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,999,1 1 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="219.193.245.22" dst_ip="219.34.189.40" src_port="25" dst_port="37961"/>
            <filter src_ip="219.193.245.22" dst_ip="219.34.189.40" src_port="43840" dst_port="25"/>
            <filter src_ip="214.18.41.196" dst_ip="219.34.189.40" src_port="25" dst_port="49820"/>
            <filter src_ip="214.18.43.168" dst_ip="219.34.189.40" src_port="16296" dst_port="25"/>
            <filter src_ip="59.214.118.189" dst_ip="219.34.189.40" src_port="25" dst_port="36901"/>
        </slice>
        <from usec="0" sec="1441775666"/>
        <to usec="0" sec="1441775669"/>
    </anomaly>
    <anomaly type="notice" value="0.696293,1.733270,503,1 1 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_port="80"/>
            <filter dst_ip="141.151.198.31" src_port="53"/>
        </slice>
        <from usec="0" sec="1441774809"/>
        <to usec="0" sec="1441775602"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="164.22.148.75" dst_ip="176.78.122.73" src_port="80"/>
        </slice>
        <from usec="0" sec="1441775433"/>
        <to usec="0" sec="1441775434"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,011,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="211.17.215.235" src_port="22"/>
        </slice>
        <from usec="0" sec="1441774869"/>
        <to usec="0" sec="1441774872"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,011,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="36.47.161.217" src_port="23"/>
        </slice>
        <from usec="0" sec="1441775583"/>
        <to usec="0" sec="1441775586"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="8.112.131.166" dst_ip="176.78.64.45" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441774911"/>
        <to usec="0" sec="1441774913"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="116.212.243.225" dst_ip="219.43.40.66" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441774810"/>
        <to usec="0" sec="1441775180"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="176.78.146.46" dst_ip="49.101.214.72" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441774842"/>
        <to usec="0" sec="1441775700"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="151.87.39.172" dst_port="443"/>
            <filter src_ip="151.87.39.172" dst_ip="59.214.119.13" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441775293"/>
        <to usec="0" sec="1441775651"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="141.151.169.111" dst_ip="79.35.14.111" src_port="50075" dst_port="443"/>
            <filter src_ip="141.151.169.111" dst_ip="79.35.14.111" src_port="50074" dst_port="443"/>
            <filter src_ip="141.151.169.111" dst_ip="79.35.14.111" src_port="50072" dst_port="443"/>
            <filter src_ip="141.151.169.111" dst_ip="79.35.14.111" src_port="50070" dst_port="443"/>
            <filter src_ip="141.151.169.111" dst_ip="223.183.188.190" src_port="50076" dst_port="443"/>
        </slice>
        <from usec="0" sec="1441775151"/>
        <to usec="0" sec="1441775173"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="9.25.118.86" dst_ip="176.78.64.45" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441775330"/>
        <to usec="0" sec="1441775334"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="41.233.118.57" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775181"/>
        <to usec="0" sec="1441775193"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="216.28.172.137" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775560"/>
        <to usec="0" sec="1441775571"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="193.74.254.104" dst_ip="141.151.226.235" dst_port="80"/>
            <filter src_ip="67.16.185.134" dst_ip="141.151.226.235" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441774948"/>
        <to usec="0" sec="1441774951"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="176.78.145.79" dst_ip="136.2.134.204" dst_port="443"/>
        </slice>
        <from usec="0" sec="1441774855"/>
        <to usec="0" sec="1441775637"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="218.13.120.18" dst_ip="79.0.206.112" dst_port="443"/>
        </slice>
        <from usec="0" sec="1441775590"/>
        <to usec="0" sec="1441775592"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="176.78.119.228" dst_ip="215.114.103.194" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441774855"/>
        <to usec="0" sec="1441775148"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.209.128.12" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774833"/>
        <to usec="0" sec="1441774869"/>
    </anomaly>
    <anomaly type="notice" value="0.651878,1.776150,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="197.251.159.93" dst_ip="197.251.159.93" proto="icmp"/>
        </slice>
        <from usec="0" sec="1441775100"/>
        <to usec="0" sec="1441775103"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="53.91.222.22" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775225"/>
        <to usec="0" sec="1441775228"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="39.83.37.37" src_port="29441" dst_port="5900"/>
        </slice>
        <from usec="0" sec="1441774835"/>
        <to usec="0" sec="1441775696"/>
    </anomaly>
    <anomaly type="notice" value="0.696293,1.733270,020,1 1 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="153.112.33.134"/>
        </slice>
        <from usec="0" sec="1441774878"/>
        <to usec="0" sec="1441775618"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="30.211.150.143" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775325"/>
        <to usec="0" sec="1441775338"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="33.135.187.251" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775087"/>
        <to usec="0" sec="1441775123"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="162.89.215.4" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775094"/>
        <to usec="0" sec="1441775111"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.141.60.225" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775607"/>
        <to usec="0" sec="1441775619"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="163.242.217.151" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774845"/>
        <to usec="0" sec="1441774868"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.214.225.30" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775311"/>
        <to usec="0" sec="1441775325"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="173.232.94.12" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775661"/>
        <to usec="0" sec="1441775668"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="52.15.53.224" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775562"/>
        <to usec="0" sec="1441775585"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="39.218.28.225" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775293"/>
        <to usec="0" sec="1441775309"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="52.57.93.97" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775146"/>
        <to usec="0" sec="1441775158"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="40.85.228.106" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775573"/>
        <to usec="0" sec="1441775587"/>
    </anomaly>
    <anomaly type="notice" value="0.942952,1.779600,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="8.76.30.179" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="167.135.93.233" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775183"/>
        <to usec="0" sec="1441775201"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="52.24.244.58" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775094"/>
        <to usec="0" sec="1441775111"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.195.171.157" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775436"/>
        <to usec="0" sec="1441775440"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="152.137.247.30" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775155"/>
        <to usec="0" sec="1441775168"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="9.48.118.24" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775460"/>
        <to usec="0" sec="1441775483"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="13.148.240.52" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775060"/>
        <to usec="0" sec="1441775072"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="2.122.157.93" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775270"/>
        <to usec="0" sec="1441775287"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="44.181.81.235" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775082"/>
        <to usec="0" sec="1441775094"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="173.139.1.12" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775062"/>
        <to usec="0" sec="1441775076"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="209.143.197.169" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775098"/>
        <to usec="0" sec="1441775114"/>
    </anomaly>
    <anomaly type="notice" value="0.942952,1.779600,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="172.68.56.201" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="217.209.226.212" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775627"/>
        <to usec="0" sec="1441775650"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="153.48.177.153" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775661"/>
        <to usec="0" sec="1441775672"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.59.106.50" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775686"/>
        <to usec="0" sec="1441775701"/>
    </anomaly>
    <anomaly type="notice" value="0.696293,1.733270,010,1 1 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="172.55.240.239" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774977"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="34.213.4.10" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775110"/>
        <to usec="0" sec="1441775123"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="192.141.22.197" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775065"/>
        <to usec="0" sec="1441775080"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="136.9.113.191" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775083"/>
        <to usec="0" sec="1441775252"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.9.242.218" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775331"/>
        <to usec="0" sec="1441775339"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="47.80.224.202" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774843"/>
        <to usec="0" sec="1441774854"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="131.18.207.243" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775373"/>
        <to usec="0" sec="1441775384"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="42.126.241.170" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775036"/>
        <to usec="0" sec="1441775416"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="3.197.127.154" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775450"/>
        <to usec="0" sec="1441775463"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="217.88.117.83" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775534"/>
        <to usec="0" sec="1441775556"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="164.230.141.73" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775076"/>
        <to usec="0" sec="1441775091"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="6.47.86.85" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775175"/>
        <to usec="0" sec="1441775186"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="13.136.21.233" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775152"/>
        <to usec="0" sec="1441775183"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="44.184.19.221" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775079"/>
        <to usec="0" sec="1441775104"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="41.234.117.245" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775627"/>
        <to usec="0" sec="1441775638"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.9.251.238" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775344"/>
        <to usec="0" sec="1441775355"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="29.168.106.100" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775414"/>
        <to usec="0" sec="1441775426"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="47.84.200.104" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774948"/>
        <to usec="0" sec="1441774956"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="53.5.0.249" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775166"/>
        <to usec="0" sec="1441775209"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="69.132.26.8" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775661"/>
        <to usec="0" sec="1441775682"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="58.87.222.230" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775487"/>
        <to usec="0" sec="1441775497"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="13.140.26.249" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774923"/>
        <to usec="0" sec="1441774946"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="169.251.99.80" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774924"/>
        <to usec="0" sec="1441774935"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="149.156.250.174" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775569"/>
        <to usec="0" sec="1441775580"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="34.206.46.158" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775601"/>
        <to usec="0" sec="1441775620"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="67.73.7.13" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775522"/>
        <to usec="0" sec="1441775630"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="217.96.119.220" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774884"/>
        <to usec="0" sec="1441774904"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="52.60.120.187" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775318"/>
        <to usec="0" sec="1441775332"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="52.39.170.175" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775134"/>
        <to usec="0" sec="1441775158"/>
    </anomaly>
    <anomaly type="notice" value="0.942952,1.779600,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="175.203.209.94" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="172.73.182.40" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775051"/>
        <to usec="0" sec="1441775090"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="52.31.23.233" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774921"/>
        <to usec="0" sec="1441774938"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="44.186.63.234" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774867"/>
        <to usec="0" sec="1441774879"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="207.32.122.109" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775225"/>
        <to usec="0" sec="1441775241"/>
    </anomaly>
    <anomaly type="notice" value="0.696293,1.733270,010,1 1 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="32.30.241.72" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="205.176.247.157" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775318"/>
        <to usec="0" sec="1441775331"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="165.213.53.198" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775035"/>
        <to usec="0" sec="1441775049"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="40.93.63.228" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775679"/>
        <to usec="0" sec="1441775691"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="52.19.187.202" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775275"/>
        <to usec="0" sec="1441775287"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.178.247.36" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775430"/>
        <to usec="0" sec="1441775454"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="172.205.110.181" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775157"/>
        <to usec="0" sec="1441775169"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="172.83.145.53" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775616"/>
        <to usec="0" sec="1441775642"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="52.13.25.219" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775700"/>
        <to usec="0" sec="1441775701"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="34.196.117.43" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775511"/>
        <to usec="0" sec="1441775527"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="175.221.96.181" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775579"/>
        <to usec="0" sec="1441775593"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="184.207.139.58" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775124"/>
        <to usec="0" sec="1441775149"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.195.91.139" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775093"/>
        <to usec="0" sec="1441775107"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="206.192.84.229" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774949"/>
        <to usec="0" sec="1441774960"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="193.99.51.113" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775513"/>
        <to usec="0" sec="1441775526"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="34.204.3.65" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774919"/>
        <to usec="0" sec="1441774949"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="165.150.34.212" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774920"/>
        <to usec="0" sec="1441774932"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.196.137.110" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775082"/>
        <to usec="0" sec="1441775099"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="21.110.154.220" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775430"/>
        <to usec="0" sec="1441775436"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="197.251.159.93" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775100"/>
        <to usec="0" sec="1441775104"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="13.180.61.93" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774911"/>
        <to usec="0" sec="1441774923"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.175.25.86" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775663"/>
        <to usec="0" sec="1441775679"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="45.193.14.132" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775299"/>
        <to usec="0" sec="1441775327"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="6.157.139.181" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775664"/>
        <to usec="0" sec="1441775690"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.215.171.13" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775453"/>
        <to usec="0" sec="1441775553"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="0.2.28.130" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775597"/>
        <to usec="0" sec="1441775609"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="47.81.131.20" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774825"/>
        <to usec="0" sec="1441775258"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="169.213.162.146" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775670"/>
        <to usec="0" sec="1441775683"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="71.137.71.222" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775083"/>
        <to usec="0" sec="1441775114"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="109.189.128.78" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775334"/>
        <to usec="0" sec="1441775347"/>
    </anomaly>
    <anomaly type="notice" value="0.942952,1.779600,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="29.132.173.93" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.192.141.93" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775245"/>
        <to usec="0" sec="1441775256"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="47.82.6.230" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775637"/>
        <to usec="0" sec="1441775659"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="53.27.144.104" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774908"/>
        <to usec="0" sec="1441774934"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="44.186.108.155" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774806"/>
        <to usec="0" sec="1441774820"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.122.10.213" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775281"/>
        <to usec="0" sec="1441775304"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="52.30.90.238" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775423"/>
        <to usec="0" sec="1441775436"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="173.23.243.205" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775216"/>
        <to usec="0" sec="1441775219"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="163.8.43.152" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775105"/>
        <to usec="0" sec="1441775116"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="172.53.79.79" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775460"/>
        <to usec="0" sec="1441775489"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="25.203.143.89" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775226"/>
        <to usec="0" sec="1441775229"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="161.212.24.216" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775606"/>
        <to usec="0" sec="1441775620"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.59.11.22" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775131"/>
        <to usec="0" sec="1441775157"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="90.82.67.31" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775389"/>
        <to usec="0" sec="1441775400"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="41.189.226.122" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775549"/>
        <to usec="0" sec="1441775554"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.193.179.110" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775302"/>
        <to usec="0" sec="1441775315"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="206.193.96.179" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775192"/>
        <to usec="0" sec="1441775205"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="52.25.74.64" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775459"/>
        <to usec="0" sec="1441775471"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="175.175.177.132" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774926"/>
        <to usec="0" sec="1441774950"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="109.210.211.49" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441774805"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="34.197.2.67" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775460"/>
        <to usec="0" sec="1441775473"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="67.23.38.59" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775541"/>
        <to usec="0" sec="1441775567"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="34.214.255.235" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775438"/>
        <to usec="0" sec="1441775451"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="161.96.245.116" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775145"/>
        <to usec="0" sec="1441775157"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.198.209.165" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775496"/>
        <to usec="0" sec="1441775512"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.125.145.175" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775481"/>
        <to usec="0" sec="1441775504"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="203.78.157.81" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775515"/>
        <to usec="0" sec="1441775530"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="6.210.173.159" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775677"/>
        <to usec="0" sec="1441775694"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="32.17.243.135" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774953"/>
        <to usec="0" sec="1441774979"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="44.181.121.144" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775082"/>
        <to usec="0" sec="1441775086"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="197.65.47.173" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775520"/>
        <to usec="0" sec="1441775538"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="52.21.92.248" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775080"/>
        <to usec="0" sec="1441775107"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="168.224.46.60" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775182"/>
        <to usec="0" sec="1441775193"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="175.236.33.34" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774816"/>
        <to usec="0" sec="1441774827"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="55.119.117.244" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774918"/>
        <to usec="0" sec="1441774932"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="172.71.99.107" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775425"/>
        <to usec="0" sec="1441775438"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="29.150.59.85" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775300"/>
        <to usec="0" sec="1441775315"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="13.157.71.123" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775310"/>
        <to usec="0" sec="1441775329"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="181.147.201.82" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775607"/>
        <to usec="0" sec="1441775619"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="34.216.209.37" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775386"/>
        <to usec="0" sec="1441775398"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="104.94.68.97" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774964"/>
        <to usec="0" sec="1441774979"/>
    </anomaly>
    <anomaly type="notice" value="0.942952,1.779600,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="173.111.54.115" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="52.30.70.254" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775256"/>
        <to usec="0" sec="1441775270"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.195.150.151" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775227"/>
        <to usec="0" sec="1441775239"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="169.62.27.159" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775417"/>
        <to usec="0" sec="1441775430"/>
    </anomaly>
    <anomaly type="notice" value="0.696293,1.733270,010,1 1 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="168.161.102.205" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="33.83.3.88" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775523"/>
        <to usec="0" sec="1441775545"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="41.234.94.72" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775631"/>
        <to usec="0" sec="1441775634"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="61.235.32.221" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774858"/>
        <to usec="0" sec="1441774865"/>
    </anomaly>
    <anomaly type="notice" value="0.696293,1.733270,010,1 1 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="44.181.60.182" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774974"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="220.101.115.101" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775030"/>
        <to usec="0" sec="1441775055"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="163.169.64.74" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775069"/>
        <to usec="0" sec="1441775081"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="173.109.183.181" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775335"/>
        <to usec="0" sec="1441775339"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="50.232.212.233" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774872"/>
        <to usec="0" sec="1441774883"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="38.101.220.240" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774877"/>
        <to usec="0" sec="1441774895"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="59.87.32.15" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775112"/>
        <to usec="0" sec="1441775124"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="109.117.185.7" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775626"/>
        <to usec="0" sec="1441775645"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="1.75.115.69" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775508"/>
        <to usec="0" sec="1441775518"/>
    </anomaly>
    <anomaly type="notice" value="1.044090,1.746180,010,1 1 0 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="41.232.94.194" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775054"/>
        <to usec="0" sec="1441775087"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.190.228.236" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775019"/>
        <to usec="0" sec="1441775041"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.9.6.183" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774907"/>
        <to usec="0" sec="1441774918"/>
    </anomaly>
    <anomaly type="notice" value="0.942952,1.779600,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="71.107.231.138" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.135.202.0" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775175"/>
        <to usec="0" sec="1441775186"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="52.17.122.228" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775032"/>
        <to usec="0" sec="1441775045"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="160.216.60.114" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775064"/>
        <to usec="0" sec="1441775077"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="32.17.37.137" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775183"/>
        <to usec="0" sec="1441775206"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.102.42.117" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775421"/>
        <to usec="0" sec="1441775435"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.80.113.69" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774884"/>
        <to usec="0" sec="1441774896"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="175.3.16.98" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775294"/>
        <to usec="0" sec="1441775307"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="44.203.118.135" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774839"/>
        <to usec="0" sec="1441775214"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="216.67.200.51" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775404"/>
        <to usec="0" sec="1441775424"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="169.157.222.192" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775107"/>
        <to usec="0" sec="1441775135"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="48.154.239.2" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775498"/>
        <to usec="0" sec="1441775510"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="30.134.137.108" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774850"/>
        <to usec="0" sec="1441774861"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="135.95.177.181" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775042"/>
        <to usec="0" sec="1441775053"/>
    </anomaly>
    <anomaly type="notice" value="0.942952,1.779600,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="42.201.220.76" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="9.25.74.60" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775269"/>
        <to usec="0" sec="1441775286"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="152.106.84.140" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775512"/>
        <to usec="0" sec="1441775533"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="175.3.29.14" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775628"/>
        <to usec="0" sec="1441775659"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.193.136.40" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775131"/>
        <to usec="0" sec="1441775140"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="194.158.154.78" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775426"/>
        <to usec="0" sec="1441775448"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="55.5.127.219" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775503"/>
        <to usec="0" sec="1441775506"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="38.124.35.14" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775175"/>
        <to usec="0" sec="1441775188"/>
    </anomaly>
    <anomaly type="notice" value="0.696293,1.733270,010,1 1 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="196.143.43.133" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="153.155.7.196" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775616"/>
        <to usec="0" sec="1441775629"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.11.51.81" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775154"/>
        <to usec="0" sec="1441775183"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="33.177.194.8" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775286"/>
        <to usec="0" sec="1441775301"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="53.5.75.174" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775675"/>
        <to usec="0" sec="1441775688"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="160.171.180.168" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774918"/>
        <to usec="0" sec="1441774934"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="200.165.73.192" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775263"/>
        <to usec="0" sec="1441775274"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="53.14.190.83" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775615"/>
        <to usec="0" sec="1441775629"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="219.132.104.245" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775626"/>
        <to usec="0" sec="1441775638"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="52.24.171.183" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775389"/>
        <to usec="0" sec="1441775403"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="160.96.34.177" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774885"/>
        <to usec="0" sec="1441774906"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="3.211.39.48" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775224"/>
        <to usec="0" sec="1441775248"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="47.80.231.124" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775349"/>
        <to usec="0" sec="1441775363"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="30.113.16.122" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775174"/>
        <to usec="0" sec="1441775198"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="188.153.196.129" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775428"/>
        <to usec="0" sec="1441775462"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="41.234.36.78" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775285"/>
        <to usec="0" sec="1441775303"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="7.118.195.132" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775662"/>
        <to usec="0" sec="1441775677"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="217.36.117.34" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775582"/>
        <to usec="0" sec="1441775595"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="217.158.17.40" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775146"/>
        <to usec="0" sec="1441775177"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.198.84.17" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775370"/>
        <to usec="0" sec="1441775397"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="163.228.74.91" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775615"/>
        <to usec="0" sec="1441775626"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="52.13.145.61" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775262"/>
        <to usec="0" sec="1441775274"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="197.124.251.246" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775167"/>
        <to usec="0" sec="1441775169"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.58.57.59" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775198"/>
        <to usec="0" sec="1441775213"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="164.65.54.19" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775032"/>
        <to usec="0" sec="1441775045"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="41.232.149.254" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775534"/>
        <to usec="0" sec="1441775546"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="161.160.26.26" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775354"/>
        <to usec="0" sec="1441775365"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.243.223.123" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775267"/>
        <to usec="0" sec="1441775270"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="32.222.24.122" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775435"/>
        <to usec="0" sec="1441775450"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="6.43.142.108" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775065"/>
        <to usec="0" sec="1441775077"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="52.207.187.223" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774893"/>
        <to usec="0" sec="1441774895"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="52.25.115.92" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775637"/>
        <to usec="0" sec="1441775649"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="34.204.94.48" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774859"/>
        <to usec="0" sec="1441774871"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.202.149.133" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775639"/>
        <to usec="0" sec="1441775654"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="33.181.55.23" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775357"/>
        <to usec="0" sec="1441775368"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="161.2.3.57" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775679"/>
        <to usec="0" sec="1441775701"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="11.108.179.3" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774889"/>
        <to usec="0" sec="1441774900"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="193.72.83.235" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775331"/>
        <to usec="0" sec="1441775338"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="41.141.230.217" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775141"/>
        <to usec="0" sec="1441775159"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="41.240.225.54" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775546"/>
        <to usec="0" sec="1441775565"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.204.138.41" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775575"/>
        <to usec="0" sec="1441775600"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.21.130.169" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775397"/>
        <to usec="0" sec="1441775415"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="53.52.244.80" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774966"/>
        <to usec="0" sec="1441774980"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="167.238.127.197" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774813"/>
        <to usec="0" sec="1441774830"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="193.32.245.102" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774968"/>
        <to usec="0" sec="1441774982"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="172.70.215.125" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775442"/>
        <to usec="0" sec="1441775455"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="172.52.80.176" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775291"/>
        <to usec="0" sec="1441775304"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="40.144.115.252" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774918"/>
        <to usec="0" sec="1441774931"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="34.198.185.75" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775504"/>
        <to usec="0" sec="1441775516"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="15.114.16.115" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775233"/>
        <to usec="0" sec="1441775235"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="173.59.134.41" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775290"/>
        <to usec="0" sec="1441775315"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="52.27.247.88" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774956"/>
        <to usec="0" sec="1441774972"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="52.27.80.213" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774803"/>
        <to usec="0" sec="1441774824"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="51.118.55.3" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441774803"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.252.14.76" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775541"/>
        <to usec="0" sec="1441775552"/>
    </anomaly>
    <anomaly type="notice" value="0.696293,1.733270,010,1 1 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="44.186.153.170" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="174.95.217.178" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775312"/>
        <to usec="0" sec="1441775336"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="41.149.102.66" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775605"/>
        <to usec="0" sec="1441775613"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="174.165.159.160" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775280"/>
        <to usec="0" sec="1441775292"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.217.221.233" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775600"/>
        <to usec="0" sec="1441775622"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="12.236.138.92" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775039"/>
        <to usec="0" sec="1441775041"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="34.204.145.44" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775475"/>
        <to usec="0" sec="1441775483"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="44.202.18.54" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775643"/>
        <to usec="0" sec="1441775666"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,999,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="141.151.0.188" dst_ip="210.223.86.24" dst_port="53"/>
        </slice>
        <from usec="0" sec="1441775628"/>
        <to usec="0" sec="1441775630"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="34.198.204.27" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774805"/>
        <to usec="0" sec="1441774818"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="104.160.211.245" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775192"/>
        <to usec="0" sec="1441775204"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.102.193.29" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775691"/>
        <to usec="0" sec="1441775697"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="44.180.156.119" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774804"/>
        <to usec="0" sec="1441774814"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="52.248.200.140" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775445"/>
        <to usec="0" sec="1441775468"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="163.65.91.13" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775586"/>
        <to usec="0" sec="1441775592"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.199.192.3" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775400"/>
        <to usec="0" sec="1441775417"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="40.108.229.164" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774958"/>
        <to usec="0" sec="1441774975"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.211.234.178" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775352"/>
        <to usec="0" sec="1441775364"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="163.232.58.243" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775244"/>
        <to usec="0" sec="1441775268"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.164.159.117" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774843"/>
        <to usec="0" sec="1441774858"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter dst_ip="86.23.117.22" dst_port="443"/>
            <filter src_ip="176.78.144.143" dst_ip="86.23.117.22" dst_port="80"/>
            <filter src_ip="176.78.144.143" dst_ip="219.171.232.193" dst_port="443"/>
            <filter src_ip="176.78.144.143" dst_ip="1.11.84.15" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441775321"/>
        <to usec="0" sec="1441775323"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="174.24.23.198" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775453"/>
        <to usec="0" sec="1441775464"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.135.156.132" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774962"/>
        <to usec="0" sec="1441774977"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="29.169.181.117" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775519"/>
        <to usec="0" sec="1441775532"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="44.185.144.206" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775691"/>
        <to usec="0" sec="1441775699"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="217.220.62.147" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774912"/>
        <to usec="0" sec="1441774928"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="207.130.122.165" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775615"/>
        <to usec="0" sec="1441775629"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="42.8.151.233" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774852"/>
        <to usec="0" sec="1441774877"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="53.179.99.156" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775152"/>
        <to usec="0" sec="1441775169"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="55.108.194.109" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775364"/>
        <to usec="0" sec="1441775376"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="162.217.178.164" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775441"/>
        <to usec="0" sec="1441775461"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.211.83.226" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775407"/>
        <to usec="0" sec="1441775419"/>
    </anomaly>
    <anomaly type="notice" value="0.942952,1.779600,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="71.137.78.148" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774972"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="216.104.125.36" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775185"/>
        <to usec="0" sec="1441775197"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="172.54.217.82" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774807"/>
        <to usec="0" sec="1441774820"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="47.80.133.84" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775202"/>
        <to usec="0" sec="1441775214"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="40.54.209.238" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775510"/>
        <to usec="0" sec="1441775523"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="68.160.39.117" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775548"/>
        <to usec="0" sec="1441775566"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="6.47.97.206" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774851"/>
        <to usec="0" sec="1441774866"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="34.198.200.235" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774903"/>
        <to usec="0" sec="1441774914"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.193.63.255" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774962"/>
        <to usec="0" sec="1441774974"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="40.90.126.126" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775303"/>
        <to usec="0" sec="1441775305"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="29.184.54.167" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774956"/>
        <to usec="0" sec="1441774962"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="34.204.201.42" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775168"/>
        <to usec="0" sec="1441775185"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="42.156.101.81" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775112"/>
        <to usec="0" sec="1441775124"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="29.79.10.132" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774920"/>
        <to usec="0" sec="1441774938"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="44.200.58.104" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775301"/>
        <to usec="0" sec="1441775312"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="13.190.80.93" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775482"/>
        <to usec="0" sec="1441775492"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="175.164.2.252" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775179"/>
        <to usec="0" sec="1441775208"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="163.171.203.109" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775178"/>
        <to usec="0" sec="1441775195"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="175.160.18.24" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775566"/>
        <to usec="0" sec="1441775578"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="44.181.202.132" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774867"/>
        <to usec="0" sec="1441774879"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.102.176.28" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775072"/>
        <to usec="0" sec="1441775081"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.67.46.36" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775262"/>
        <to usec="0" sec="1441775274"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="42.62.154.174" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774961"/>
        <to usec="0" sec="1441774974"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.107.29.81" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775248"/>
        <to usec="0" sec="1441775262"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="42.165.154.30" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775523"/>
        <to usec="0" sec="1441775539"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="52.24.180.143" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775487"/>
        <to usec="0" sec="1441775500"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.95.50.63" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775489"/>
        <to usec="0" sec="1441775502"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="168.189.167.241" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775233"/>
        <to usec="0" sec="1441775248"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="59.150.225.235" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775339"/>
        <to usec="0" sec="1441775367"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="160.31.62.72" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775039"/>
        <to usec="0" sec="1441775051"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="160.208.108.249" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775549"/>
        <to usec="0" sec="1441775567"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="34.202.176.37" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774808"/>
        <to usec="0" sec="1441774824"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="47.84.105.119" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775277"/>
        <to usec="0" sec="1441775291"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="68.126.249.186" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775509"/>
        <to usec="0" sec="1441775538"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="34.217.178.63" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775596"/>
        <to usec="0" sec="1441775609"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="52.6.80.157" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775380"/>
        <to usec="0" sec="1441775395"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.53.248.199" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774850"/>
        <to usec="0" sec="1441774863"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="165.237.182.97" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775083"/>
        <to usec="0" sec="1441775094"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="29.112.161.195" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775033"/>
        <to usec="0" sec="1441775036"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="203.5.110.138" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775395"/>
        <to usec="0" sec="1441775407"/>
    </anomaly>
    <anomaly type="notice" value="0.942952,1.779600,010,1 1 1 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="163.234.162.23" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="104.93.234.62" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775401"/>
        <to usec="0" sec="1441775446"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="59.210.215.232" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774821"/>
        <to usec="0" sec="1441774842"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="34.199.198.68" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775171"/>
        <to usec="0" sec="1441775193"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="164.70.208.246" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774934"/>
        <to usec="0" sec="1441774952"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="218.161.166.13" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775389"/>
        <to usec="0" sec="1441775404"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.198.131.36" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775431"/>
        <to usec="0" sec="1441775449"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="17.201.216.49" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775277"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="196.189.155.10" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775191"/>
        <to usec="0" sec="1441775249"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.44.50.179" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775489"/>
        <to usec="0" sec="1441775516"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="175.133.13.98" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775336"/>
        <to usec="0" sec="1441775368"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="160.38.194.124" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775441"/>
        <to usec="0" sec="1441775456"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.196.111.170" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775292"/>
        <to usec="0" sec="1441775296"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.118.114.182" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774875"/>
        <to usec="0" sec="1441774896"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="52.24.194.64" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775138"/>
        <to usec="0" sec="1441775150"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.47.161.217" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775583"/>
        <to usec="0" sec="1441775586"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="55.108.239.218" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775434"/>
        <to usec="0" sec="1441775449"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="29.76.170.213" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775179"/>
        <to usec="0" sec="1441775200"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="13.143.102.67" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775522"/>
        <to usec="0" sec="1441775540"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.211.193.143" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774853"/>
        <to usec="0" sec="1441774879"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="38.96.45.76" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775035"/>
        <to usec="0" sec="1441775048"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="160.163.240.158" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775414"/>
        <to usec="0" sec="1441775426"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="192.55.115.38" dst_ip="176.78.227.136" src_port="54349" dst_port="80"/>
            <filter src_ip="192.55.115.38" dst_ip="176.78.227.136" src_port="35918" dst_port="80"/>
            <filter src_ip="63.79.119.233" dst_ip="176.78.227.136" src_port="58209" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441775372"/>
        <to usec="0" sec="1441775374"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="177.127.248.195"/>
        </slice>
        <from usec="0" sec="1441775188"/>
        <to usec="0" sec="1441775190"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="47.84.200.104"/>
        </slice>
        <from usec="0" sec="1441774948"/>
        <to usec="0" sec="1441774955"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="69.132.26.8"/>
        </slice>
        <from usec="0" sec="1441775661"/>
        <to usec="0" sec="1441775681"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="173.23.243.205"/>
        </slice>
        <from usec="0" sec="1441775217"/>
        <to usec="0" sec="1441775219"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="173.109.183.181"/>
        </slice>
        <from usec="0" sec="1441775336"/>
        <to usec="0" sec="1441775338"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="197.221.19.50"/>
        </slice>
        <from usec="0" sec="1441775116"/>
        <to usec="0" sec="1441775120"/>
    </anomaly>
    <anomaly type="notice" value="0.651878,1.776150,504,0 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="176.78.7.167" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1441775039"/>
        <to usec="0" sec="1441775040"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="34.204.145.44"/>
        </slice>
        <from usec="0" sec="1441775476"/>
        <to usec="0" sec="1441775483"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="36.193.63.255"/>
        </slice>
        <from usec="0" sec="1441774963"/>
        <to usec="0" sec="1441774974"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="29.112.161.195"/>
        </slice>
        <from usec="0" sec="1441775034"/>
        <to usec="0" sec="1441775036"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="172.55.141.47"/>
        </slice>
        <from usec="0" sec="1441775306"/>
        <to usec="0" sec="1441775312"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="55.5.127.219"/>
        </slice>
        <from usec="0" sec="1441775503"/>
        <to usec="0" sec="1441775506"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,011,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="197.124.251.246" src_port="23"/>
        </slice>
        <from usec="0" sec="1441775167"/>
        <to usec="0" sec="1441775169"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,011,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="17.9.35.254" src_port="23"/>
        </slice>
        <from usec="0" sec="1441775159"/>
        <to usec="0" sec="1441775161"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,011,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="2.73.78.92" src_port="23"/>
        </slice>
        <from usec="0" sec="1441774835"/>
        <to usec="0" sec="1441774838"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="53.91.222.22"/>
        </slice>
        <from usec="0" sec="1441775225"/>
        <to usec="0" sec="1441775228"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="36.195.171.157"/>
        </slice>
        <from usec="0" sec="1441775436"/>
        <to usec="0" sec="1441775439"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="165.150.34.212"/>
        </slice>
        <from usec="0" sec="1441774920"/>
        <to usec="0" sec="1441774931"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="41.189.226.122"/>
        </slice>
        <from usec="0" sec="1441775549"/>
        <to usec="0" sec="1441775554"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="201.14.1.3"/>
        </slice>
        <from usec="0" sec="1441775642"/>
        <to usec="0" sec="1441775645"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="172.54.210.110"/>
        </slice>
        <from usec="0" sec="1441775597"/>
        <to usec="0" sec="1441775598"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="67.54.21.7"/>
        </slice>
        <from usec="0" sec="1441775167"/>
        <to usec="0" sec="1441775170"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="41.149.102.66"/>
        </slice>
        <from usec="0" sec="1441775605"/>
        <to usec="0" sec="1441775612"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="29.184.54.167"/>
        </slice>
        <from usec="0" sec="1441774957"/>
        <to usec="0" sec="1441774962"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="164.70.208.246"/>
        </slice>
        <from usec="0" sec="1441774949"/>
        <to usec="0" sec="1441774950"/>
    </anomaly>
    <anomaly type="notice" value="0.942952,1.779600,020,1 1 1 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="36.196.111.170"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="173.232.94.12"/>
        </slice>
        <from usec="0" sec="1441775661"/>
        <to usec="0" sec="1441775666"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="136.9.113.191"/>
        </slice>
        <from usec="0" sec="1441775248"/>
        <to usec="0" sec="1441775252"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="71.107.231.138"/>
        </slice>
        <from usec="0" sec="1441775008"/>
        <to usec="0" sec="1441775011"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="115.217.134.88"/>
        </slice>
        <from usec="0" sec="1441775145"/>
        <to usec="0" sec="1441775147"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="41.233.251.19"/>
        </slice>
        <from usec="0" sec="1441775239"/>
        <to usec="0" sec="1441775245"/>
    </anomaly>
    <anomaly type="notice" value="0.942952,1.779600,020,1 1 1 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="83.243.223.123"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="163.65.91.13"/>
        </slice>
        <from usec="0" sec="1441775586"/>
        <to usec="0" sec="1441775592"/>
    </anomaly>
    <anomaly type="notice" value="0.815348,1.784320,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="91.102.176.28"/>
        </slice>
        <from usec="0" sec="1441775072"/>
        <to usec="0" sec="1441775080"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="1.11.103.171" dst_ip="219.43.40.65" src_port="37624" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441775294"/>
        <to usec="0" sec="1441775296"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="219.34.117.247" dst_ip="59.184.249.51" dst_port="443"/>
            <filter src_ip="219.34.117.247" dst_ip="59.184.202.103" dst_port="53"/>
        </slice>
        <from usec="0" sec="1441774978"/>
        <to usec="0" sec="1441774980"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="8.197.164.9" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774870"/>
        <to usec="0" sec="1441774883"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,999,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="137.186.147.102" dst_ip="219.249.118.84" src_port="39280" dst_port="1336"/>
        </slice>
        <from usec="0" sec="1441775531"/>
        <to usec="0" sec="1441775533"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="17.196.16.159" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775695"/>
        <to usec="0" sec="1441775701"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="67.53.110.182" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775116"/>
        <to usec="0" sec="1441775128"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="219.34.113.38" dst_ip="96.182.174.107" dst_port="443"/>
            <filter src_ip="219.34.113.38" dst_ip="96.182.174.110" dst_port="443"/>
        </slice>
        <from usec="0" sec="1441775544"/>
        <to usec="0" sec="1441775546"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="219.34.189.51" dst_ip="162.127.199.121" src_port="80"/>
        </slice>
        <from usec="0" sec="1441775179"/>
        <to usec="0" sec="1441775183"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="30.48.197.160" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775360"/>
        <to usec="0" sec="1441775700"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="30.126.37.238" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775147"/>
        <to usec="0" sec="1441775165"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="168.220.153.197" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775552"/>
        <to usec="0" sec="1441775564"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="41.233.251.19" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441775238"/>
        <to usec="0" sec="1441775245"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="52.24.54.19" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774847"/>
        <to usec="0" sec="1441774859"/>
    </anomaly>
    <anomaly type="notice" value="0.510351,1.738110,999,1 1 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="7.204.247.214" dst_ip="218.13.124.37" dst_port="993"/>
            <filter src_ip="55.111.67.233" dst_ip="218.13.124.37" dst_port="993"/>
        </slice>
        <from usec="0" sec="1441775651"/>
        <to usec="0" sec="1441775658"/>
    </anomaly>
    <anomaly type="notice" value="0.942952,1.779600,503,1 1 1 0 0 0 1 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="219.43.29.152" dst_port="80"/>
            <filter src_ip="219.43.29.152" dst_port="53"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441775700"/>
    </anomaly>
    <anomaly type="notice" value="0.846171,1.829330,999,0 0 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="176.78.56.125" dst_ip="180.125.87.97" src_port="27562" dst_port="65012" proto="udp"/>
        </slice>
        <from usec="0" sec="1441775699"/>
        <to usec="0" sec="1441775701"/>
    </anomaly>
    <anomaly type="notice" value="0.846171,1.829330,020,0 0 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="197.251.159.93" proto="icmp"/>
        </slice>
        <from usec="0" sec="1441775100"/>
        <to usec="0" sec="1441775102"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441775629"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="172.159.212.47"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441774909"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,010,0 0 0 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="172.116.63.172"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441774850"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="102.170.162.54"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441774908"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="38.80.93.27"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441774909"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="137.163.230.201"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441774909"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="1.212.224.202"/>
        </slice>
        <from usec="0" sec="1441774802"/>
        <to usec="0" sec="1441774908"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="50.98.68.125"/>
        </slice>
        <from usec="0" sec="1441774805"/>
        <to usec="0" sec="1441774903"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="219.34.189.45"/>
        </slice>
        <from usec="0" sec="1441774819"/>
        <to usec="0" sec="1441774871"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="94.201.43.145"/>
        </slice>
        <from usec="0" sec="1441774863"/>
        <to usec="0" sec="1441774880"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="40.188.210.151"/>
        </slice>
        <from usec="0" sec="1441774872"/>
        <to usec="0" sec="1441774900"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="13.79.155.108"/>
        </slice>
        <from usec="0" sec="1441774898"/>
        <to usec="0" sec="1441774900"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="189.59.152.12"/>
        </slice>
        <from usec="0" sec="1441774805"/>
        <to usec="0" sec="1441775043"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="79.117.210.62"/>
        </slice>
        <from usec="0" sec="1441774807"/>
        <to usec="0" sec="1441775048"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="28.52.89.15"/>
        </slice>
        <from usec="0" sec="1441774815"/>
        <to usec="0" sec="1441775086"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="134.184.87.107"/>
        </slice>
        <from usec="0" sec="1441774817"/>
        <to usec="0" sec="1441775084"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="141.151.197.11"/>
        </slice>
        <from usec="0" sec="1441774825"/>
        <to usec="0" sec="1441774971"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="47.223.251.128"/>
        </slice>
        <from usec="0" sec="1441774886"/>
        <to usec="0" sec="1441775078"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="137.179.185.106"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441775158"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="206.53.156.93"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441775177"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.59.6.17"/>
        </slice>
        <from usec="0" sec="1441774802"/>
        <to usec="0" sec="1441775156"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="68.135.130.132"/>
        </slice>
        <from usec="0" sec="1441774806"/>
        <to usec="0" sec="1441775179"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="79.107.253.235"/>
        </slice>
        <from usec="0" sec="1441774808"/>
        <to usec="0" sec="1441775159"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="219.43.11.87"/>
        </slice>
        <from usec="0" sec="1441774808"/>
        <to usec="0" sec="1441775179"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="15.41.34.235"/>
        </slice>
        <from usec="0" sec="1441774812"/>
        <to usec="0" sec="1441775160"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="210.203.46.10"/>
        </slice>
        <from usec="0" sec="1441774821"/>
        <to usec="0" sec="1441775172"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="81.21.214.4"/>
        </slice>
        <from usec="0" sec="1441774831"/>
        <to usec="0" sec="1441775266"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="79.30.3.108"/>
        </slice>
        <from usec="0" sec="1441774961"/>
        <to usec="0" sec="1441775005"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="209.45.254.195"/>
        </slice>
        <from usec="0" sec="1441775015"/>
        <to usec="0" sec="1441775163"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.122.44.179"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441775269"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="176.78.229.220"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441775269"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="137.163.190.45"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441775267"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="219.199.1.119"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441775269"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="71.250.254.115"/>
        </slice>
        <from usec="0" sec="1441774802"/>
        <to usec="0" sec="1441775268"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="137.163.60.139"/>
        </slice>
        <from usec="0" sec="1441774802"/>
        <to usec="0" sec="1441775267"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="208.48.163.9"/>
        </slice>
        <from usec="0" sec="1441774802"/>
        <to usec="0" sec="1441775266"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="176.78.144.38"/>
        </slice>
        <from usec="0" sec="1441774804"/>
        <to usec="0" sec="1441775269"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="176.78.210.116"/>
        </slice>
        <from usec="0" sec="1441774805"/>
        <to usec="0" sec="1441775264"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="180.98.84.180"/>
        </slice>
        <from usec="0" sec="1441774807"/>
        <to usec="0" sec="1441775245"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="151.87.35.127"/>
        </slice>
        <from usec="0" sec="1441774824"/>
        <to usec="0" sec="1441775266"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="141.151.159.222"/>
        </slice>
        <from usec="0" sec="1441774826"/>
        <to usec="0" sec="1441775260"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="125.176.11.122"/>
        </slice>
        <from usec="0" sec="1441775129"/>
        <to usec="0" sec="1441775137"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="219.34.186.122"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441775359"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="119.245.8.146"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441775342"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="59.127.244.224"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441775359"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="219.43.28.103"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441775355"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="37.35.107.251"/>
        </slice>
        <from usec="0" sec="1441774802"/>
        <to usec="0" sec="1441775345"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="216.161.59.106"/>
        </slice>
        <from usec="0" sec="1441774802"/>
        <to usec="0" sec="1441775358"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="28.59.102.84"/>
        </slice>
        <from usec="0" sec="1441774810"/>
        <to usec="0" sec="1441775358"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="42.142.213.66"/>
        </slice>
        <from usec="0" sec="1441774879"/>
        <to usec="0" sec="1441775332"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="2.88.189.157"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775356"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="176.12.214.104"/>
        </slice>
        <from usec="0" sec="1441775184"/>
        <to usec="0" sec="1441775358"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="218.13.120.29"/>
        </slice>
        <from usec="0" sec="1441775202"/>
        <to usec="0" sec="1441775350"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="165.216.238.225"/>
        </slice>
        <from usec="0" sec="1441775260"/>
        <to usec="0" sec="1441775278"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="62.74.138.242"/>
        </slice>
        <from usec="0" sec="1441775303"/>
        <to usec="0" sec="1441775319"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="7.237.45.116"/>
        </slice>
        <from usec="0" sec="1441775588"/>
        <to usec="0" sec="1441775591"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="216.106.242.223"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441775449"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="197.88.50.229"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441775447"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="137.179.149.246"/>
        </slice>
        <from usec="0" sec="1441774802"/>
        <to usec="0" sec="1441775445"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="6.18.153.130"/>
        </slice>
        <from usec="0" sec="1441775063"/>
        <to usec="0" sec="1441775408"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="56.144.65.119"/>
        </slice>
        <from usec="0" sec="1441774803"/>
        <to usec="0" sec="1441775538"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="219.34.185.51"/>
        </slice>
        <from usec="0" sec="1441775204"/>
        <to usec="0" sec="1441775539"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="96.182.177.205"/>
        </slice>
        <from usec="0" sec="1441775379"/>
        <to usec="0" sec="1441775413"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="42.100.248.194"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441775629"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="36.188.103.103"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441775629"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="219.166.218.134"/>
        </slice>
        <from usec="0" sec="1441774802"/>
        <to usec="0" sec="1441775628"/>
    </anomaly>
    <anomaly type="notice" value="1.068340,1.792150,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="0.209.238.79"/>
        </slice>
        <from usec="0" sec="1441775430"/>
        <to usec="0" sec="1441775535"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="176.78.147.44" src_port="80"/>
            <filter src_ip="195.185.46.188" dst_ip="176.78.147.44" src_port="53"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441774847"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="141.151.46.80"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="1.168640,1.787450,020,0 0 0 1 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="137.163.246.216"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="168.254.235.107"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="42.193.1.148"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="42.193.1.149"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="168.114.163.154"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="137.163.242.85"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,020,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="218.145.50.93"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,502,0 0 0 0 0 0 1 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="87.176.238.225"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="1.168640,1.787450,020,0 0 0 1 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="153.112.82.1"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441775269"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="75.1.229.48"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="172.159.201.142"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="44.201.22.206" src_port="34680" dst_port="10514"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="153.112.82.21"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="203.117.173.11"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="24.153.50.50"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="170.227.220.210"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="55.146.164.81"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,020,0 0 0 0 0 0 1 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="24.206.145.198"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="44.201.125.192"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="215.138.205.73"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="215.138.206.189"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.942952,1.779600,020,1 1 1 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="153.112.33.145"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441775637"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="214.129.62.121"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="214.129.62.117"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="214.129.62.119"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="61.238.154.190"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="59.255.47.21"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="61.238.179.17"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="81.18.66.240"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="153.112.83.2"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="153.112.83.26"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="37.251.102.73"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="218.13.122.237"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="61.238.176.48"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="172.159.212.47"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="37.251.103.157"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="211.94.251.116"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="83.214.166.91"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="153.112.32.87"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="7.51.216.25"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="223.93.30.42" dst_port="53"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="218.13.113.112" dst_ip="76.240.169.103" dst_port="80"/>
            <filter src_ip="218.13.113.112" dst_ip="76.250.232.36" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.609550,1.741610,010,1 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="47.85.239.113" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="141.151.170.80" dst_port="53"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="141.151.233.105" dst_port="53"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="155.174.197.236" src_port="80"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="137.163.111.0" src_port="15585"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="146.227.122.110" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="137.163.242.81" dst_port="53"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="6.198.156.131" dst_port="445"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="166.142.58.146" dst_port="445"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="83.202.20.253" dst_port="445"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="28.57.76.48" src_port="80"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="207.107.43.228" src_port="8451"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="176.78.192.112" dst_port="53"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="204.218.254.205" dst_port="445"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.609550,1.741610,010,1 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="8.158.10.40" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="219.43.28.101" src_port="53"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="176.78.192.89" dst_port="53"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="49.45.104.63" dst_port="445"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="218.137.21.89" dst_port="445"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="160.41.123.39" dst_port="445"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="3.119.9.247" src_port="8451"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="161.175.145.98" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="49.86.82.156" dst_port="445"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="31.247.245.95" dst_port="445"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="218.13.99.19" src_port="53"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="47.207.41.222" dst_port="445"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="38.80.93.27" dst_port="445"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,011,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="58.127.37.3" src_port="80"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="191.26.175.227" dst_port="445"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="214.129.62.120" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="137.163.240.6" src_port="53"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="166.113.172.42" dst_port="445"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="19.98.132.172" dst_ip="141.151.170.80" src_port="53"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="192.100.225.70" dst_port="53"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="31.249.246.232" dst_port="445"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="44.181.114.253" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="165.216.200.201" dst_ip="176.78.105.63" src_port="80"/>
            <filter src_ip="165.216.200.201" dst_ip="176.78.76.241" src_port="80"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.609550,1.741610,010,1 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.214.248.82" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.609550,1.741610,010,1 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.211.126.255" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="37.251.96.189" src_port="29483"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="137.163.228.63" src_port="6881"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.225.18.67" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="137.163.61.13" src_port="6881"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.609550,1.741610,010,1 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="172.134.245.143" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775037"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="24.234.164.9" dst_port="445"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="219.11.36.29" src_port="80"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="201.9.107.166" dst_port="445"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="11.163.154.186" dst_port="445"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="219.34.185.28" src_port="16177"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="41.234.64.216" dst_port="23"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="176.78.138.37" src_port="19498"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775027"/>
    </anomaly>
    <anomaly type="notice" value="1.122290,1.778720,010,1 1 0 0 0 0 1 1 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="75.68.252.106" dst_port="110"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441775684"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="214.129.62.122" src_port="26600" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775252"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="153.112.32.79"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="219.43.13.30"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="153.23.132.176"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="218.13.125.50" dst_port="80"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="49.46.93.109"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="219.34.111.155" dst_port="53"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="219.43.55.34"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="49.46.93.114"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="153.112.145.166"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="218.13.123.36" dst_port="53"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="153.112.82.1"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="219.34.120.111"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="153.23.107.111" dst_port="54762"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="153.112.82.21" dst_port="54756"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="218.13.123.63" dst_port="53"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="49.46.93.87"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="218.13.123.59" dst_port="53"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="218.13.123.56"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="153.23.196.158"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="218.13.112.178" dst_port="53"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="153.23.178.156"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="218.13.122.10" dst_port="53"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="153.23.162.105"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="153.23.134.195"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="153.23.128.48"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="153.23.196.185"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="153.23.187.131"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="153.23.116.108"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="153.112.33.134" dst_port="54748"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="204.67.224.193"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,502,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="164.118.131.118"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="153.23.19.95" dst_port="54762"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="153.23.75.120"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.609550,1.741610,999,1 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="219.34.110.145" dst_port="53"/>
        </slice>
        <from usec="0" sec="1441775072"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="218.13.122.43"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="153.23.225.63"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="153.23.225.62"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="153.23.225.55"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="153.23.80.173"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="153.112.83.2" dst_port="54748"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="153.23.106.193" dst_port="54762"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="153.23.106.175" dst_port="54770"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="1.168640,1.787450,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="218.13.127.176" dst_port="53"/>
        </slice>
        <from usec="0" sec="1441774813"/>
        <to usec="0" sec="1441775355"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="49.188.141.80" dst_ip="218.13.117.179" dst_port="53"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="218.13.124.117"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.609550,1.741610,020,1 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="13.183.131.16"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775300"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="153.23.225.103"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="153.23.18.39" dst_port="54762"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="218.13.124.67" src_port="53"/>
            <filter dst_ip="218.13.124.67"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="153.23.226.7"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="219.34.184.221"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="219.34.184.208"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="210.236.141.246" dst_ip="153.23.225.224" src_port="53"/>
        </slice>
        <from usec="0" sec="1441774801"/>
        <to usec="0" sec="1441775387"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="150.45.183.23" dst_ip="141.151.46.80" src_port="53"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="219.34.111.157" src_port="53"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="220.20.30.25" dst_ip="137.179.27.237" src_port="53"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="176.78.192.112" src_port="53"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="153.23.18.165" src_port="80"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="137.179.107.129" src_port="53"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="151.87.33.195" src_port="80"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="151.87.33.201" src_port="80"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="151.87.41.62" src_port="53"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775297"/>
    </anomaly>
    <anomaly type="notice" value="0.609550,1.741610,503,1 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="151.87.33.159" src_port="80"/>
        </slice>
        <from usec="0" sec="1441774920"/>
        <to usec="0" sec="1441775670"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="27.220.66.67"/>
        </slice>
        <from usec="0" sec="1441775341"/>
        <to usec="0" sec="1441775387"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="218.13.113.112" dst_ip="174.176.88.155"/>
        </slice>
        <from usec="0" sec="1441775341"/>
        <to usec="0" sec="1441775387"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="218.13.113.112" dst_ip="174.177.194.132"/>
        </slice>
        <from usec="0" sec="1441775341"/>
        <to usec="0" sec="1441775387"/>
    </anomaly>
    <anomaly type="notice" value="0.732147,1.779570,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="153.23.226.203" src_port="53"/>
        </slice>
        <from usec="0" sec="1441775251"/>
        <to usec="0" sec="1441775387"/>
    </anomaly>
    <anomaly type="notice" value="1.144880,1.823870,010,0 0 0 0 0 0 1 1 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="214.129.62.116" src_port="3714" dst_port="22"/>
        </slice>
        <from usec="0" sec="1441774981"/>
        <to usec="0" sec="1441775252"/>
    </anomaly>
</admd:annotation>
