<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="112.199.215.229" dst_ip="207.76.251.147" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453968"/>
        <to usec="0" sec="1444453969"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="159.59.229.143" dst_ip="200.157.196.225" src_port="55361" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453641"/>
        <to usec="0" sec="1444453896"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="173.88.27.241" dst_ip="69.82.20.10" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453557"/>
        <to usec="0" sec="1444453986"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="173.88.25.122" dst_ip="5.6.29.89" src_port="61697" dst_port="40595" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453219"/>
        <to usec="0" sec="1444454082"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="173.88.39.84" dst_ip="82.99.60.242" src_port="62680" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453278"/>
        <to usec="0" sec="1444454056"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="170.148.200.151"/>
        </slice>
        <from usec="0" sec="1444453482"/>
        <to usec="0" sec="1444453501"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="185.243.14.96" dst_ip="159.59.161.237" src_port="55408" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453700"/>
        <to usec="0" sec="1444453707"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="80.47.209.52" dst_ip="170.148.74.18" src_port="80" dst_port="55936" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453932"/>
        <to usec="0" sec="1444454012"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="126.113.188.77" dst_ip="159.59.36.68" src_port="55425" dst_port="60898" proto="udp"/>
        </slice>
        <from usec="0" sec="1444453505"/>
        <to usec="0" sec="1444453942"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="173.88.252.56" dst_ip="190.90.213.12" src_port="43823" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453886"/>
        <to usec="0" sec="1444453981"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="206.208.116.104" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453462"/>
        <to usec="0" sec="1444453518"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="170.142.81.96" dst_ip="215.216.150.48" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453922"/>
        <to usec="0" sec="1444453926"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="49.15.203.128" dst_ip="159.59.36.180" src_port="443" dst_port="51630" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453277"/>
        <to usec="0" sec="1444453575"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="79.20.250.116" dst_ip="173.88.82.114" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453405"/>
        <to usec="0" sec="1444454069"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="2.14.113.203" dst_ip="185.246.248.13" src_port="443" dst_port="55138" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453836"/>
        <to usec="0" sec="1444453838"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="159.59.36.210" dst_ip="49.13.218.181" src_port="51218" dst_port="8777" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453326"/>
        <to usec="0" sec="1444453328"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="121.47.63.243" dst_ip="185.246.38.69" src_port="80" dst_port="53840" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453675"/>
        <to usec="0" sec="1444453676"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="173.89.193.132"/>
        </slice>
        <from usec="0" sec="1444454077"/>
        <to usec="0" sec="1444454080"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="14.51.55.159" dst_ip="159.59.37.253" src_port="182" dst_port="63027" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453990"/>
        <to usec="0" sec="1444454001"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="101.40.190.219" dst_ip="206.218.26.96" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453216"/>
        <to usec="0" sec="1444453218"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="159.59.163.53" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453225"/>
        <to usec="0" sec="1444454071"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="194.114.169.136" dst_ip="159.59.37.125" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453404"/>
        <to usec="0" sec="1444453406"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="72.105.0.198" dst_ip="185.246.71.216" src_port="80" dst_port="63620" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453731"/>
        <to usec="0" sec="1444454047"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="207.108.124.130" dst_ip="185.246.249.228" src_port="80" dst_port="9650" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453711"/>
        <to usec="0" sec="1444453726"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="80.103.39.26" dst_ip="170.148.255.52" src_port="80" dst_port="54327" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453890"/>
        <to usec="0" sec="1444453892"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="207.108.124.136" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453404"/>
        <to usec="0" sec="1444454071"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="80.103.39.22" dst_ip="173.88.189.196" src_port="80" dst_port="45764" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453603"/>
        <to usec="0" sec="1444453606"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="121.22.239.226" dst_ip="185.246.251.249" src_port="26246" dst_port="16402" proto="udp"/>
        </slice>
        <from usec="0" sec="1444453698"/>
        <to usec="0" sec="1444454063"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="199.187.212.116" dst_ip="159.59.125.91" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453824"/>
        <to usec="0" sec="1444454045"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="149.51.100.255" dst_ip="185.246.249.31" src_port="1026" dst_port="21084" proto="udp"/>
        </slice>
        <from usec="0" sec="1444453477"/>
        <to usec="0" sec="1444453479"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="180.67.86.110" dst_ip="49.15.217.139" src_port="55125" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444454064"/>
        <to usec="0" sec="1444454066"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="20.79.9.218" dst_ip="172.106.13.215" src_port="56913" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453634"/>
        <to usec="0" sec="1444453639"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="5.6.29.89" dst_ip="173.88.25.122" src_port="40595" dst_port="61697" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453288"/>
        <to usec="0" sec="1444454001"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="141.134.33.72" dst_ip="185.246.39.175" src_port="34352" dst_port="55905" proto="udp"/>
        </slice>
        <from usec="0" sec="1444453748"/>
        <to usec="0" sec="1444453898"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="173.88.171.83" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453279"/>
        <to usec="0" sec="1444453962"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="131.183.203.211" dst_ip="159.59.107.149" src_port="80" dst_port="56185" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453380"/>
        <to usec="0" sec="1444453391"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="194.112.98.246" dst_ip="159.59.102.166" src_port="80" dst_port="61087" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453790"/>
        <to usec="0" sec="1444453792"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="79.20.250.90" dst_ip="159.59.229.179" src_port="80" dst_port="60207" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453408"/>
        <to usec="0" sec="1444453963"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="79.20.250.91" dst_ip="173.88.76.49" src_port="80" dst_port="57362" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453966"/>
        <to usec="0" sec="1444453968"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="212.214.65.136" dst_ip="159.59.37.228" src_port="80" dst_port="51185" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453675"/>
        <to usec="0" sec="1444453676"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="131.149.207.21" dst_ip="185.246.251.47" src_port="80" dst_port="57872" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453603"/>
        <to usec="0" sec="1444453605"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="223.3.3.207" dst_ip="207.76.248.36" src_port="57844" dst_port="53433" proto="udp"/>
        </slice>
        <from usec="0" sec="1444453940"/>
        <to usec="0" sec="1444453942"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="173.88.227.116" dst_ip="97.188.95.100" src_port="58304" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453833"/>
        <to usec="0" sec="1444453835"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="200.157.196.225" dst_ip="159.59.229.143" src_port="443" dst_port="55361" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453694"/>
        <to usec="0" sec="1444453869"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="159.59.37.63"/>
        </slice>
        <from usec="0" sec="1444453749"/>
        <to usec="0" sec="1444453751"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="159.59.105.255"/>
        </slice>
        <from usec="0" sec="1444453243"/>
        <to usec="0" sec="1444453493"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="12.36.253.52" dst_ip="170.142.215.162" src_port="80" dst_port="64564" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453775"/>
        <to usec="0" sec="1444453776"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="159.59.163.12" dst_ip="180.16.8.96" src_port="80" dst_port="14046" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453818"/>
        <to usec="0" sec="1444453820"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="170.142.100.70"/>
        </slice>
        <from usec="0" sec="1444453232"/>
        <to usec="0" sec="1444453238"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="180.67.153.34"/>
        </slice>
        <from usec="0" sec="1444453609"/>
        <to usec="0" sec="1444453611"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="30.82.200.134"/>
        </slice>
        <from usec="0" sec="1444453442"/>
        <to usec="0" sec="1444453444"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="18.8.219.71" dst_ip="170.148.74.81" src_port="443" dst_port="49622" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453892"/>
        <to usec="0" sec="1444453893"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="159.59.36.255"/>
        </slice>
        <from usec="0" sec="1444453219"/>
        <to usec="0" sec="1444453233"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="173.88.6.236" dst_ip="2.104.218.253" src_port="59418" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453440"/>
        <to usec="0" sec="1444453443"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="199.105.102.14" dst_ip="159.59.112.6" src_port="80" dst_port="60702" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453690"/>
        <to usec="0" sec="1444453692"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="130.176.123.20" dst_ip="159.59.36.225" src_port="80" dst_port="56891" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453611"/>
        <to usec="0" sec="1444453788"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="173.88.6.239"/>
        </slice>
        <from usec="0" sec="1444453798"/>
        <to usec="0" sec="1444453802"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="173.88.206.127" dst_ip="49.15.212.146" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453217"/>
        <to usec="0" sec="1444454065"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="170.142.97.164"/>
        </slice>
        <from usec="0" sec="1444453487"/>
        <to usec="0" sec="1444453857"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="159.59.231.9" dst_ip="98.105.64.161" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453480"/>
        <to usec="0" sec="1444454036"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="159.59.36.225" dst_ip="130.176.123.20" src_port="56891" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453432"/>
        <to usec="0" sec="1444453858"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="159.59.36.226" dst_ip="117.77.166.30" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453471"/>
        <to usec="0" sec="1444453515"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="170.142.114.148" dst_ip="57.166.122.245" src_port="64078" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453774"/>
        <to usec="0" sec="1444454097"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="12.131.203.13" dst_ip="173.88.9.170" src_port="80" dst_port="1943" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453816"/>
        <to usec="0" sec="1444453817"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="125.141.113.108" dst_ip="207.76.255.123" src_port="57866" dst_port="993" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444454092"/>
        <to usec="0" sec="1444454095"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="115.49.100.224" dst_ip="185.246.251.129" src_port="80" dst_port="6502" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453621"/>
        <to usec="0" sec="1444454100"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="125.14.51.85" dst_ip="206.208.97.243" src_port="52571" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444454057"/>
        <to usec="0" sec="1444454059"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="170.142.121.152" dst_ip="199.101.242.143" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453889"/>
        <to usec="0" sec="1444453909"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="141.63.247.60" dst_ip="159.59.104.204" src_port="80" dst_port="54359" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453688"/>
        <to usec="0" sec="1444453887"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="206.127.35.199" dst_ip="206.208.118.158" src_port="80" dst_port="52766" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453847"/>
        <to usec="0" sec="1444453848"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="118.74.28.4" dst_ip="206.208.208.180" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453277"/>
        <to usec="0" sec="1444453898"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="159.59.229.168"/>
        </slice>
        <from usec="0" sec="1444454065"/>
        <to usec="0" sec="1444454068"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="206.208.211.137" dst_ip="73.25.210.221" src_port="59232" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453226"/>
        <to usec="0" sec="1444453824"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="159.59.39.90" dst_ip="117.244.199.242" src_port="50743" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453572"/>
        <to usec="0" sec="1444453823"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="24.101.78.51" dst_ip="185.246.39.183" src_port="443" dst_port="52496" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453853"/>
        <to usec="0" sec="1444453857"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="159.59.120.234" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453267"/>
        <to usec="0" sec="1444453811"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="131.149.206.116" dst_ip="180.67.10.229" src_port="443" dst_port="36014" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453756"/>
        <to usec="0" sec="1444453758"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="24.101.78.48" dst_ip="185.246.137.179" src_port="443" dst_port="60002" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453721"/>
        <to usec="0" sec="1444453986"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="24.101.78.49" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453913"/>
        <to usec="0" sec="1444453986"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="170.142.215.196" dst_ip="201.244.39.218" src_port="54653" dst_port="81" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453297"/>
        <to usec="0" sec="1444454101"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="130.145.43.109" dst_ip="185.246.19.88" src_port="80" dst_port="45028" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453260"/>
        <to usec="0" sec="1444453510"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="158.47.85.155" dst_ip="185.246.249.217" src_port="27022" dst_port="63919" proto="udp"/>
        </slice>
        <from usec="0" sec="1444453558"/>
        <to usec="0" sec="1444453587"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="18.8.138.47" dst_ip="185.246.47.179" src_port="80" dst_port="41981" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453826"/>
        <to usec="0" sec="1444453827"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="141.154.94.121" dst_ip="180.67.10.205" src_port="443" dst_port="26956" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453268"/>
        <to usec="0" sec="1444453274"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="8.30.249.248" dst_ip="185.246.238.90" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444454061"/>
        <to usec="0" sec="1444454072"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="79.20.250.8" dst_ip="173.88.200.197" src_port="80" dst_port="2074" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453216"/>
        <to usec="0" sec="1444454083"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="214.207.44.172" dst_ip="159.59.37.157" src_port="80" dst_port="51030" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453694"/>
        <to usec="0" sec="1444453705"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="127.215.172.140" dst_ip="159.59.161.197" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453606"/>
        <to usec="0" sec="1444453610"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="126.113.3.206" dst_ip="206.208.122.68" src_port="80" dst_port="55955" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453978"/>
        <to usec="0" sec="1444453984"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="159.59.39.20" dst_ip="23.92.216.84" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453200"/>
        <to usec="0" sec="1444454097"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="173.88.200.68" dst_ip="2.204.236.185" src_port="5651" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453685"/>
        <to usec="0" sec="1444453688"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="159.59.39.21" dst_ip="199.129.222.125" src_port="35921" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453200"/>
        <to usec="0" sec="1444454070"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="170.142.17.43" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453267"/>
        <to usec="0" sec="1444453999"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="125.38.205.130" dst_ip="207.76.240.149" src_port="61786" dst_port="50201" proto="udp"/>
        </slice>
        <from usec="0" sec="1444453213"/>
        <to usec="0" sec="1444453215"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="206.208.118.118" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453786"/>
        <to usec="0" sec="1444454056"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="201.39.38.224" dst_ip="159.59.120.52" src_port="443" dst_port="55222" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453303"/>
        <to usec="0" sec="1444454095"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="207.108.124.241" dst_ip="185.246.248.0" src_port="80" dst_port="56086" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453212"/>
        <to usec="0" sec="1444454100"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="101.15.61.140" dst_ip="185.246.233.2" dst_port="8080" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453895"/>
        <to usec="0" sec="1444453900"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="180.67.168.55" dst_ip="73.170.30.28" src_port="50139" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453312"/>
        <to usec="0" sec="1444453373"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="102.181.33.174" dst_ip="180.67.10.129" src_port="8080" dst_port="12161" proto="udp"/>
        </slice>
        <from usec="0" sec="1444453659"/>
        <to usec="0" sec="1444454073"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="28.25.49.123"/>
        </slice>
        <from usec="0" sec="1444453837"/>
        <to usec="0" sec="1444453839"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="24.101.78.47" dst_ip="185.246.137.179" src_port="443" dst_port="59979" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453637"/>
        <to usec="0" sec="1444453641"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="220.49.134.111"/>
        </slice>
        <from usec="0" sec="1444453516"/>
        <to usec="0" sec="1444454055"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="170.142.1.117" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453706"/>
        <to usec="0" sec="1444453807"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="185.243.169.237" dst_ip="172.106.43.191" src_port="49181" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453335"/>
        <to usec="0" sec="1444453338"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="206.208.112.117" dst_ip="215.216.147.173" src_port="51878" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453207"/>
        <to usec="0" sec="1444453521"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="119.93.1.178" dst_ip="185.246.181.133" src_port="50129" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453599"/>
        <to usec="0" sec="1444453602"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="119.180.196.113" dst_ip="159.59.2.232" src_port="7273" dst_port="7273" proto="udp"/>
        </slice>
        <from usec="0" sec="1444453270"/>
        <to usec="0" sec="1444453272"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="170.148.13.109" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453781"/>
        <to usec="0" sec="1444453845"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="219.162.247.97" dst_ip="207.76.244.214" src_port="61857" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453641"/>
        <to usec="0" sec="1444453644"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="79.20.254.10" dst_ip="159.59.238.141" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453227"/>
        <to usec="0" sec="1444453231"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="12.51.184.174" dst_ip="206.218.26.134" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453973"/>
        <to usec="0" sec="1444454026"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="207.131.103.85" dst_ip="185.246.251.71" src_port="80" dst_port="55451" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453200"/>
        <to usec="0" sec="1444453815"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="198.158.227.118" dst_ip="159.59.36.150" src_port="80" dst_port="57234" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453293"/>
        <to usec="0" sec="1444453315"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="49.13.218.181" dst_ip="159.59.36.210" src_port="8777" dst_port="51218" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453376"/>
        <to usec="0" sec="1444453656"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="170.142.17.0" dst_ip="184.126.209.50" src_port="80" dst_port="51413" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453438"/>
        <to usec="0" sec="1444453796"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="198.251.166.225" dst_ip="159.59.125.219" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453424"/>
        <to usec="0" sec="1444453981"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="13.180.115.71" dst_ip="185.246.181.133" src_port="18138" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453978"/>
        <to usec="0" sec="1444453981"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="127.181.223.21" dst_ip="159.59.36.226" src_port="80" dst_port="49201" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453446"/>
        <to usec="0" sec="1444453447"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="118.234.39.119" dst_ip="185.246.251.151" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444454054"/>
        <to usec="0" sec="1444454056"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="170.148.127.145" dst_ip="73.170.30.65" src_port="54857" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453889"/>
        <to usec="0" sec="1444453891"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="206.208.123.1" dst_ip="131.183.202.6" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453502"/>
        <to usec="0" sec="1444453506"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="2.14.113.151" dst_ip="207.76.240.225" src_port="443" dst_port="51068" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453502"/>
        <to usec="0" sec="1444453503"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="105.150.42.194" dst_ip="185.246.251.47" src_port="80" dst_port="57836" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453515"/>
        <to usec="0" sec="1444453517"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="170.148.160.196" dst_ip="215.216.141.168" src_port="62328" dst_port="443" proto="udp"/>
        </slice>
        <from usec="0" sec="1444453433"/>
        <to usec="0" sec="1444454080"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="170.142.116.223" dst_ip="194.154.84.252" src_port="50567" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453672"/>
        <to usec="0" sec="1444453711"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="159.59.37.123"/>
        </slice>
        <from usec="0" sec="1444453978"/>
        <to usec="0" sec="1444454012"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="159.59.49.60" dst_ip="131.183.202.6" src_port="57681" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453704"/>
        <to usec="0" sec="1444453707"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="139.26.48.197" dst_ip="173.88.33.131" src_port="42350" dst_port="49437" proto="udp"/>
        </slice>
        <from usec="0" sec="1444453865"/>
        <to usec="0" sec="1444454050"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="206.208.208.236" dst_ip="144.157.235.83" src_port="50209" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453204"/>
        <to usec="0" sec="1444454101"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="170.142.60.217" dst_ip="213.114.123.23" src_port="3389" dst_port="62266" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453627"/>
        <to usec="0" sec="1444453629"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="159.59.37.121" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453341"/>
        <to usec="0" sec="1444454017"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="159.59.127.51" dst_ip="215.216.134.255" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444454071"/>
        <to usec="0" sec="1444454097"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="206.208.100.8" dst_ip="114.36.198.150" src_port="5041" dst_port="5044" proto="udp"/>
        </slice>
        <from usec="0" sec="1444453208"/>
        <to usec="0" sec="1444453609"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="71.172.76.176" dst_ip="207.76.240.153" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453770"/>
        <to usec="0" sec="1444453793"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="170.142.189.117" dst_ip="217.71.178.31" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453273"/>
        <to usec="0" sec="1444453378"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="131.183.202.219" dst_ip="159.59.36.92" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453885"/>
        <to usec="0" sec="1444453887"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="205.114.31.47" dst_ip="170.148.210.215" src_port="21230" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453597"/>
        <to usec="0" sec="1444453600"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="215.216.147.173" dst_ip="206.208.112.117" src_port="443" dst_port="51878" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453436"/>
        <to usec="0" sec="1444453438"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="109.178.67.72" dst_ip="173.88.210.254" src_port="443" dst_port="62454" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453371"/>
        <to usec="0" sec="1444453373"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="170.148.127.140"/>
        </slice>
        <from usec="0" sec="1444453326"/>
        <to usec="0" sec="1444453340"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="140.41.155.20" dst_ip="173.88.9.170" src_port="80" dst_port="4225" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453996"/>
        <to usec="0" sec="1444453998"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="159.59.228.129" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453500"/>
        <to usec="0" sec="1444453574"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="159.59.36.183" dst_ip="120.181.48.58" src_port="56121" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453796"/>
        <to usec="0" sec="1444453928"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="159.59.120.198" dst_ip="12.120.70.128" src_port="65079" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453644"/>
        <to usec="0" sec="1444453658"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="105.150.42.219" dst_ip="185.246.251.47" src_port="80" dst_port="57730" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453403"/>
        <to usec="0" sec="1444453405"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="159.59.36.180" dst_ip="206.16.57.93" src_port="51986" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453896"/>
        <to usec="0" sec="1444454074"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="98.238.50.118" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453329"/>
        <to usec="0" sec="1444453354"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="180.67.10.197"/>
        </slice>
        <from usec="0" sec="1444453341"/>
        <to usec="0" sec="1444453907"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="41.16.15.89" dst_ip="159.59.107.149" src_port="80" dst_port="56000" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453225"/>
        <to usec="0" sec="1444454059"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="170.46.244.113" dst_ip="185.246.10.227" src_port="80" dst_port="55315" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453892"/>
        <to usec="0" sec="1444453893"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="207.131.101.106" dst_ip="159.59.37.144" src_port="80" dst_port="41116" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453533"/>
        <to usec="0" sec="1444453535"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="170.142.103.60" dst_ip="144.177.230.71" src_port="60343" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453308"/>
        <to usec="0" sec="1444453454"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="194.236.20.239" dst_ip="180.67.231.212" src_port="443" dst_port="63503" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453530"/>
        <to usec="0" sec="1444454047"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="110.38.94.79" dst_ip="173.88.111.99" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453885"/>
        <to usec="0" sec="1444454041"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="6.206.202.152" dst_ip="185.246.251.45" src_port="53989" dst_port="58647" proto="udp"/>
        </slice>
        <from usec="0" sec="1444453453"/>
        <to usec="0" sec="1444453459"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="110.38.94.72" dst_ip="173.88.56.128" src_port="80" dst_port="57694" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453659"/>
        <to usec="0" sec="1444454032"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="116.35.243.105" dst_ip="207.76.248.60" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453683"/>
        <to usec="0" sec="1444453684"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="35.48.186.214" dst_ip="206.208.215.125" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453408"/>
        <to usec="0" sec="1444453463"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="152.146.119.244" dst_ip="185.246.233.2" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453335"/>
        <to usec="0" sec="1444453340"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="199.129.222.125" dst_ip="159.59.39.21" src_port="80" dst_port="35921" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453212"/>
        <to usec="0" sec="1444454079"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="173.88.117.232"/>
        </slice>
        <from usec="0" sec="1444453537"/>
        <to usec="0" sec="1444453539"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="79.20.254.170" dst_ip="159.59.37.124" src_port="443" dst_port="53083" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453695"/>
        <to usec="0" sec="1444453697"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="119.245.136.201" dst_ip="206.208.119.0" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453339"/>
        <to usec="0" sec="1444453341"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="170.142.101.219" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453549"/>
        <to usec="0" sec="1444454036"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="12.36.229.247" dst_ip="170.142.80.45" src_port="80" dst_port="50358" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453935"/>
        <to usec="0" sec="1444454020"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="126.188.237.99" dst_ip="185.246.248.130" src_port="7273" dst_port="7273" proto="udp"/>
        </slice>
        <from usec="0" sec="1444453766"/>
        <to usec="0" sec="1444453773"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="138.104.234.206" dst_ip="170.148.240.111" src_port="60565" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453500"/>
        <to usec="0" sec="1444453502"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="57.89.5.66" dst_ip="173.88.25.122" src_port="80" dst_port="62894" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453560"/>
        <to usec="0" sec="1444453561"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="105.150.42.72" dst_ip="185.246.251.47" src_port="80" dst_port="57813" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453509"/>
        <to usec="0" sec="1444453511"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="125.154.119.30" dst_ip="207.76.242.249" src_port="59022" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453310"/>
        <to usec="0" sec="1444453312"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="22.23.70.132" dst_ip="159.59.39.44" src_port="443" dst_port="53785" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444454069"/>
        <to usec="0" sec="1444454073"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="125.143.94.177" dst_ip="159.59.192.145" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453341"/>
        <to usec="0" sec="1444453353"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="2.27.176.205" dst_ip="180.67.38.221" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453358"/>
        <to usec="0" sec="1444453364"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="101.41.57.75" dst_ip="207.76.248.39" src_port="48280" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453915"/>
        <to usec="0" sec="1444453920"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="2.14.51.53" dst_ip="159.59.230.77" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453357"/>
        <to usec="0" sec="1444453390"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="105.94.124.111" dst_ip="159.59.37.158" src_port="9306" dst_port="9306" proto="udp"/>
        </slice>
        <from usec="0" sec="1444453270"/>
        <to usec="0" sec="1444454031"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="12.36.229.238" dst_ip="173.88.14.225" src_port="80" dst_port="50029" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453231"/>
        <to usec="0" sec="1444453330"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="170.148.96.42" dst_ip="73.170.30.25" src_port="58421" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453252"/>
        <to usec="0" sec="1444453257"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="159.59.234.5" dst_ip="147.207.55.150" src_port="80" dst_port="60335" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453683"/>
        <to usec="0" sec="1444454041"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="207.131.102.37" dst_ip="159.59.39.124" src_port="80" dst_port="60836" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453310"/>
        <to usec="0" sec="1444453770"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="207.76.228.157" dst_ip="68.100.45.89" src_port="28368" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453813"/>
        <to usec="0" sec="1444454101"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="206.16.57.93" dst_ip="159.59.36.180" src_port="80" dst_port="51986" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453897"/>
        <to usec="0" sec="1444453899"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="141.63.247.197" dst_ip="159.59.37.157" src_port="80" dst_port="49663" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453295"/>
        <to usec="0" sec="1444453296"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="173.88.107.169" dst_ip="144.39.86.250" src_port="64642" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453200"/>
        <to usec="0" sec="1444453790"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="159.59.103.34" dst_ip="80.30.197.66" src_port="51302" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453665"/>
        <to usec="0" sec="1444453667"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="214.207.35.170" dst_ip="206.208.208.56" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453449"/>
        <to usec="0" sec="1444453451"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="219.50.80.55" dst_ip="185.246.38.38" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453548"/>
        <to usec="0" sec="1444453549"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="13.27.196.246" dst_ip="159.59.229.0" src_port="80" dst_port="56538" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453526"/>
        <to usec="0" sec="1444453528"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="131.149.206.204" dst_ip="180.67.10.239" src_port="80" dst_port="19009" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453892"/>
        <to usec="0" sec="1444453893"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="180.67.238.118" dst_ip="215.216.134.94" src_port="50961" dst_port="443" proto="udp"/>
        </slice>
        <from usec="0" sec="1444453204"/>
        <to usec="0" sec="1444454101"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="206.208.111.76" dst_ip="144.177.216.245" src_port="56368" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453537"/>
        <to usec="0" sec="1444453547"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="215.244.178.209" dst_ip="159.59.238.141" src_port="80" dst_port="50769" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453848"/>
        <to usec="0" sec="1444453850"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="215.216.141.58" dst_ip="173.88.77.19" src_port="443" dst_port="64661" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453942"/>
        <to usec="0" sec="1444453944"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="215.216.147.93" dst_ip="173.88.96.58" src_port="443" dst_port="49971" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453411"/>
        <to usec="0" sec="1444453426"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="2.59.7.196" dst_ip="159.59.39.49" src_port="443" dst_port="58499" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453437"/>
        <to usec="0" sec="1444453439"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="105.150.23.67" dst_ip="206.208.211.142" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453254"/>
        <to usec="0" sec="1444453273"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="220.231.115.231"/>
        </slice>
        <from usec="0" sec="1444454099"/>
        <to usec="0" sec="1444454101"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="12.36.229.206" dst_ip="185.246.38.116" src_port="80" dst_port="63042" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453330"/>
        <to usec="0" sec="1444454057"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="180.67.121.225" dst_ip="215.216.138.240" src_port="60879" dst_port="443" proto="udp"/>
        </slice>
        <from usec="0" sec="1444453843"/>
        <to usec="0" sec="1444453899"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="2.66.226.99" dst_ip="180.67.10.210" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453515"/>
        <to usec="0" sec="1444454003"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="180.67.254.24" dst_ip="73.170.30.121" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444454046"/>
        <to usec="0" sec="1444454059"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="136.144.251.169" dst_ip="185.246.249.62" src_port="24288" dst_port="45655" proto="udp"/>
        </slice>
        <from usec="0" sec="1444453263"/>
        <to usec="0" sec="1444453899"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="170.142.126.48" dst_ip="76.90.97.145" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444454015"/>
        <to usec="0" sec="1444454019"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="159.59.37.253" dst_ip="14.51.55.159" src_port="63027" dst_port="182" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453643"/>
        <to usec="0" sec="1444454017"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="215.216.144.116" dst_ip="180.67.72.94" src_port="443" dst_port="62216" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453909"/>
        <to usec="0" sec="1444453910"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="125.141.189.149"/>
        </slice>
        <from usec="0" sec="1444453529"/>
        <to usec="0" sec="1444453569"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="118.74.31.66" dst_ip="206.208.122.68" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453772"/>
        <to usec="0" sec="1444454028"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="206.112.81.3" dst_ip="207.76.251.147" src_port="58186" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453997"/>
        <to usec="0" sec="1444453999"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="170.142.85.132"/>
        </slice>
        <from usec="0" sec="1444453366"/>
        <to usec="0" sec="1444453369"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="195.14.230.108" dst_port="22" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453340"/>
        <to usec="0" sec="1444454028"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="83.158.150.207" dst_ip="170.148.172.222" src_port="80" dst_port="62224" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453503"/>
        <to usec="0" sec="1444453504"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="170.148.104.49" dst_ip="215.216.145.121" src_port="62349" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453696"/>
        <to usec="0" sec="1444453711"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="213.253.97.82" dst_ip="159.59.36.67" src_port="80" dst_port="49511" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453595"/>
        <to usec="0" sec="1444453597"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="206.250.173.106" dst_ip="159.59.37.121" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453391"/>
        <to usec="0" sec="1444453392"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="194.112.99.118" dst_ip="159.59.37.219" src_port="80" dst_port="49490" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453607"/>
        <to usec="0" sec="1444453617"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="15.205.69.129" dst_ip="206.208.118.118" src_port="80" dst_port="60656" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453865"/>
        <to usec="0" sec="1444453866"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="159.59.230.123" dst_ip="97.188.61.30" src_port="50478" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453330"/>
        <to usec="0" sec="1444453610"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="215.216.145.8" dst_ip="206.208.117.58" src_port="443" dst_port="53979" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453993"/>
        <to usec="0" sec="1444453994"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="159.59.37.130" dst_ip="215.216.147.233" src_port="61090" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453247"/>
        <to usec="0" sec="1444453301"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="12.120.70.128" dst_ip="159.59.120.198" src_port="80" dst_port="65079" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453656"/>
        <to usec="0" sec="1444453658"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="159.59.37.131" dst_ip="2.14.96.125" src_port="54924" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453936"/>
        <to usec="0" sec="1444453966"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="220.123.12.83" dst_ip="207.76.244.214" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453510"/>
        <to usec="0" sec="1444453513"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="62.79.172.40" dst_ip="207.76.240.202" src_port="80" dst_port="51879" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453426"/>
        <to usec="0" sec="1444453512"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="62.79.175.17" dst_ip="159.59.231.133" src_port="80" dst_port="52238" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453705"/>
        <to usec="0" sec="1444453711"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="159.59.37.157" dst_ip="214.207.44.172" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453432"/>
        <to usec="0" sec="1444453973"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="206.208.118.158"/>
        </slice>
        <from usec="0" sec="1444453918"/>
        <to usec="0" sec="1444453920"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="221.215.244.59" dst_ip="185.246.38.69" src_port="80" dst_port="47513" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453948"/>
        <to usec="0" sec="1444453949"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="170.142.215.45" dst_ip="5.126.130.154" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444454022"/>
        <to usec="0" sec="1444454084"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="12.77.139.139" dst_ip="185.246.204.99" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453427"/>
        <to usec="0" sec="1444453429"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="170.142.251.149" dst_ip="15.193.75.169" src_port="80" dst_port="36030" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444454060"/>
        <to usec="0" sec="1444454062"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="130.129.38.137" dst_ip="159.59.37.155" src_port="80" dst_port="6059" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453358"/>
        <to usec="0" sec="1444453678"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="159.59.37.155" dst_ip="130.129.38.137" src_port="6059" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453346"/>
        <to usec="0" sec="1444453896"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="122.248.158.39" dst_ip="185.246.248.176" src_port="80" dst_port="53598" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453621"/>
        <to usec="0" sec="1444453622"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="159.59.37.154" dst_ip="5.48.126.123" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453633"/>
        <to usec="0" sec="1444453639"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="35.13.21.158" dst_ip="159.59.190.128" src_port="54935" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453489"/>
        <to usec="0" sec="1444453564"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="173.88.182.38"/>
        </slice>
        <from usec="0" sec="1444453230"/>
        <to usec="0" sec="1444453241"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="2.14.14.202" dst_ip="180.67.214.80" src_port="443" dst_port="37190" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453330"/>
        <to usec="0" sec="1444453499"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="162.206.105.227" dst_ip="159.59.192.145" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453397"/>
        <to usec="0" sec="1444453915"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="57.87.172.204" dst_ip="173.88.100.160" src_port="80" dst_port="49302" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453551"/>
        <to usec="0" sec="1444453553"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="173.88.57.250"/>
        </slice>
        <from usec="0" sec="1444453252"/>
        <to usec="0" sec="1444453338"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="159.59.101.50" dst_ip="94.30.117.204" src_port="55962" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453352"/>
        <to usec="0" sec="1444454027"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="159.59.25.230" dst_ip="2.13.4.8" src_port="51872" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453200"/>
        <to usec="0" sec="1444454076"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="2.204.7.205" dst_ip="185.246.36.52" src_port="443" dst_port="33382" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453493"/>
        <to usec="0" sec="1444453495"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="159.59.101.53" dst_ip="168.54.135.98" src_port="64721" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453319"/>
        <to usec="0" sec="1444453372"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="35.64.19.202" dst_ip="185.246.248.130" src_port="10956" dst_port="7273" proto="udp"/>
        </slice>
        <from usec="0" sec="1444453348"/>
        <to usec="0" sec="1444453356"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="159.59.161.237" dst_ip="185.243.14.96" src_port="80" dst_port="55408" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453702"/>
        <to usec="0" sec="1444453704"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="159.59.246.230" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453915"/>
        <to usec="0" sec="1444454068"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="103.114.147.217" dst_ip="159.59.37.198" src_port="10021" dst_port="3659" proto="udp"/>
        </slice>
        <from usec="0" sec="1444453241"/>
        <to usec="0" sec="1444454060"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="2.1.68.191" dst_ip="185.246.36.52" src_port="443" dst_port="58082" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453268"/>
        <to usec="0" sec="1444453270"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="159.59.122.238" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453397"/>
        <to usec="0" sec="1444453624"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="13.98.211.189" dst_ip="206.218.26.96" src_port="50122" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453770"/>
        <to usec="0" sec="1444453773"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="159.59.62.47" dst_ip="98.153.97.94" src_port="60356" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453666"/>
        <to usec="0" sec="1444453668"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="170.142.229.69" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453211"/>
        <to usec="0" sec="1444454021"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="170.142.53.115" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453471"/>
        <to usec="0" sec="1444454062"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="2.14.37.160" dst_ip="185.246.39.140" src_port="443" dst_port="54611" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453610"/>
        <to usec="0" sec="1444453613"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="207.76.240.225" dst_ip="2.14.113.151" src_port="51068" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453462"/>
        <to usec="0" sec="1444453550"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="71.172.76.10"/>
        </slice>
        <from usec="0" sec="1444453916"/>
        <to usec="0" sec="1444453918"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="159.59.230.83" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453291"/>
        <to usec="0" sec="1444453473"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="172.106.2.70" dst_ip="215.216.145.163" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453354"/>
        <to usec="0" sec="1444453380"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="159.59.37.190" dst_ip="131.183.202.12" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453495"/>
        <to usec="0" sec="1444453508"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="199.233.214.229" dst_ip="170.142.80.107" src_port="443" dst_port="60407" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453759"/>
        <to usec="0" sec="1444453760"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="159.59.238.141" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453287"/>
        <to usec="0" sec="1444453808"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="180.67.72.94"/>
        </slice>
        <from usec="0" sec="1444453814"/>
        <to usec="0" sec="1444453930"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="101.5.178.91"/>
        </slice>
        <from usec="0" sec="1444453575"/>
        <to usec="0" sec="1444453929"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="131.183.202.2" dst_ip="159.59.107.149" src_port="80" dst_port="56350" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453298"/>
        <to usec="0" sec="1444453604"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="116.119.212.112" dst_ip="159.59.2.232" src_port="32641" dst_port="7273" proto="udp"/>
        </slice>
        <from usec="0" sec="1444453225"/>
        <to usec="0" sec="1444453706"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="35.48.131.30" dst_ip="159.59.192.145" dst_port="993" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453476"/>
        <to usec="0" sec="1444453478"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="71.172.76.25" dst_ip="207.76.240.195" src_port="80" dst_port="56092" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453692"/>
        <to usec="0" sec="1444453694"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.113.110.101" dst_ip="206.52.102.241" src_port="80" dst_port="44617" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453938"/>
        <to usec="0" sec="1444453958"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="207.131.102.97" dst_ip="159.59.37.250" src_port="80" dst_port="54814" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453790"/>
        <to usec="0" sec="1444453794"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="198.251.166.173" dst_ip="198.251.166.173" src_port="51594" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453489"/>
        <to usec="0" sec="1444453821"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="185.246.183.149" dst_ip="185.246.183.149" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453711"/>
        <to usec="0" sec="1444454029"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="49.15.214.217" dst_ip="49.15.214.217" src_port="63570" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453288"/>
        <to usec="0" sec="1444453918"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="46.142.66.193" dst_ip="185.246.180.121" src_port="54410" dst_port="443"/>
        </slice>
        <from usec="0" sec="1444453426"/>
        <to usec="0" sec="1444453760"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,503,1 1 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="159.59.163.53" dst_port="80"/>
        </slice>
        <from usec="0" sec="1444453217"/>
        <to usec="0" sec="1444454025"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="131.183.203.228" dst_ip="131.183.203.228" src_port="54188" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453206"/>
        <to usec="0" sec="1444454028"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="194.168.189.2" dst_ip="194.168.189.2" src_port="123" proto="udp"/>
        </slice>
        <from usec="0" sec="1444453243"/>
        <to usec="0" sec="1444454053"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="116.83.225.209" dst_ip="159.59.192.145" src_port="51146" dst_port="993" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453342"/>
        <to usec="0" sec="1444453403"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="159.59.37.23" dst_ip="49.15.214.226" src_port="57294" dst_port="80"/>
            <filter src_ip="159.59.37.23" dst_ip="49.15.214.226" src_port="57261" dst_port="80"/>
            <filter src_ip="159.59.37.23" dst_ip="49.15.214.226" src_port="57260" dst_port="80"/>
            <filter src_ip="159.59.37.23" dst_ip="49.15.214.226" src_port="57259" dst_port="80"/>
            <filter src_ip="159.59.37.23" dst_ip="49.15.214.226" src_port="57258" dst_port="80"/>
        </slice>
        <from usec="0" sec="1444453661"/>
        <to usec="0" sec="1444454101"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="137.197.178.167" dst_ip="206.208.215.100" dst_port="80"/>
        </slice>
        <from usec="0" sec="1444453311"/>
        <to usec="0" sec="1444454067"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="207.76.244.176" dst_ip="207.76.244.176" proto="udp"/>
        </slice>
        <from usec="0" sec="1444453202"/>
        <to usec="0" sec="1444454096"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="185.246.160.21" dst_port="993"/>
        </slice>
        <from usec="0" sec="1444453406"/>
        <to usec="0" sec="1444453907"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="131.149.206.37" dst_ip="170.148.208.132" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453700"/>
        <to usec="0" sec="1444453746"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,ipv46tun">
        <slice>
            <filter src_ip="186.204.241.151" dst_ip="207.76.243.230"/>
        </slice>
        <from usec="0" sec="1444453200"/>
        <to usec="0" sec="1444453991"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="113.153.14.178" dst_ip="185.246.37.113" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453885"/>
        <to usec="0" sec="1444453886"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="2.27.177.196" dst_ip="159.59.125.42" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453957"/>
        <to usec="0" sec="1444453959"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="2.27.180.18" dst_ip="180.67.10.219" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453358"/>
        <to usec="0" sec="1444453393"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,502,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="207.76.248.149" dst_ip="112.206.201.112" src_port="22" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453201"/>
        <to usec="0" sec="1444453817"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="159.59.37.49" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453364"/>
        <to usec="0" sec="1444454097"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="221.8.86.86"/>
        </slice>
        <from usec="0" sec="1444453375"/>
        <to usec="0" sec="1444453380"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="159.59.37.55" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453248"/>
        <to usec="0" sec="1444453458"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="159.59.228.208" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453687"/>
        <to usec="0" sec="1444453689"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="159.59.228.223" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453380"/>
        <to usec="0" sec="1444454034"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="170.142.123.229" dst_ip="49.15.219.16" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444454079"/>
        <to usec="0" sec="1444454081"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="180.67.152.91"/>
        </slice>
        <from usec="0" sec="1444453382"/>
        <to usec="0" sec="1444453384"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="170.142.102.116"/>
        </slice>
        <from usec="0" sec="1444453432"/>
        <to usec="0" sec="1444453435"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="173.88.200.92"/>
        </slice>
        <from usec="0" sec="1444453438"/>
        <to usec="0" sec="1444453726"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="170.142.249.64" dst_ip="135.235.61.19" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453393"/>
        <to usec="0" sec="1444453405"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="159.59.39.49"/>
        </slice>
        <from usec="0" sec="1444453326"/>
        <to usec="0" sec="1444453769"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="180.67.10.218" dst_ip="54.136.219.113" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453252"/>
        <to usec="0" sec="1444453257"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="122.70.220.62"/>
        </slice>
        <from usec="0" sec="1444453498"/>
        <to usec="0" sec="1444453501"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="125.47.17.211"/>
        </slice>
        <from usec="0" sec="1444453520"/>
        <to usec="0" sec="1444453530"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="125.140.71.25" dst_ip="185.136.16.47" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453728"/>
        <to usec="0" sec="1444453733"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="170.142.253.92"/>
        </slice>
        <from usec="0" sec="1444453597"/>
        <to usec="0" sec="1444453620"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="113.76.195.14" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444454053"/>
        <to usec="0" sec="1444454055"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="170.142.214.61" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453254"/>
        <to usec="0" sec="1444453578"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="207.163.124.19" dst_ip="159.59.84.96" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453450"/>
        <to usec="0" sec="1444453593"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="221.225.210.199" dst_ip="206.208.208.16" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453375"/>
        <to usec="0" sec="1444453378"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="6.77.51.148" dst_ip="206.208.208.16" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453633"/>
        <to usec="0" sec="1444453724"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="159.59.36.68"/>
        </slice>
        <from usec="0" sec="1444453581"/>
        <to usec="0" sec="1444453583"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="206.208.116.177" dst_ip="62.24.166.38" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453254"/>
        <to usec="0" sec="1444453257"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="207.76.240.213"/>
        </slice>
        <from usec="0" sec="1444453241"/>
        <to usec="0" sec="1444453555"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="6.77.208.160" dst_ip="206.218.26.118" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453255"/>
        <to usec="0" sec="1444453258"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="146.203.179.86" dst_ip="207.76.251.158" dst_port="3389"/>
            <filter src_ip="146.203.179.86" dst_ip="207.76.248.112" dst_port="3389"/>
            <filter src_ip="146.203.179.86" dst_ip="207.76.245.189" dst_port="3389"/>
        </slice>
        <from usec="0" sec="1444453206"/>
        <to usec="0" sec="1444454094"/>
    </anomaly>
    <anomaly type="notice" value="1.488810,2.307490,999,1 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="100.108.9.207" dst_ip="206.218.1.145" dst_port="19"/>
            <filter src_ip="100.108.9.207" dst_ip="185.246.183.192" dst_port="19"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,502,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="112.206.201.112" dst_ip="207.76.248.149" dst_port="22"/>
        </slice>
        <from usec="0" sec="1444453202"/>
        <to usec="0" sec="1444454101"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="185.246.181.133" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453312"/>
        <to usec="0" sec="1444453546"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,020,1 0 0 0 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter src_ip="8.46.196.237" dst_ip="207.76.246.6" proto="icmp"/>
        </slice>
        <from usec="0" sec="1444453201"/>
        <to usec="0" sec="1444453202"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="175.15.5.103" dst_ip="175.15.5.103" proto="icmp"/>
        </slice>
        <from usec="0" sec="1444453443"/>
        <to usec="0" sec="1444453455"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="135.159.177.108" dst_ip="135.159.177.108" proto="icmp"/>
        </slice>
        <from usec="0" sec="1444453483"/>
        <to usec="0" sec="1444453492"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="122.62.176.193" src_port="53" proto="udp"/>
        </slice>
        <from usec="0" sec="1444453225"/>
        <to usec="0" sec="1444453895"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="222.11.35.41" src_port="6000" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453786"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.19.147.194" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453286"/>
        <to usec="0" sec="1444453312"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="173.88.112.82"/>
        </slice>
        <from usec="0" sec="1444453406"/>
        <to usec="0" sec="1444453825"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="84.219.183.244"/>
        </slice>
        <from usec="0" sec="1444453556"/>
        <to usec="0" sec="1444453564"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="86.239.148.130" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453548"/>
        <to usec="0" sec="1444453561"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="140.116.24.94" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453787"/>
        <to usec="0" sec="1444453800"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.190.183.173" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453524"/>
        <to usec="0" sec="1444453541"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="134.193.101.221" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453282"/>
        <to usec="0" sec="1444453298"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="139.27.175.157" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444454089"/>
        <to usec="0" sec="1444454093"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="99.8.239.242" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453604"/>
        <to usec="0" sec="1444453619"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="71.69.121.178" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453750"/>
        <to usec="0" sec="1444453755"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="220.133.94.54" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453352"/>
        <to usec="0" sec="1444453369"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.42.177.65" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453378"/>
        <to usec="0" sec="1444453386"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="139.95.184.58"/>
        </slice>
        <from usec="0" sec="1444453204"/>
        <to usec="0" sec="1444453226"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="49.137.162.251" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453428"/>
        <to usec="0" sec="1444453443"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="18.149.115.182" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453778"/>
        <to usec="0" sec="1444453796"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="137.231.93.45" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453852"/>
        <to usec="0" sec="1444453872"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.130.172.68" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444454005"/>
        <to usec="0" sec="1444454006"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="142.18.53.82" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453475"/>
        <to usec="0" sec="1444453477"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="9.38.227.38" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453467"/>
        <to usec="0" sec="1444453491"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="23.142.12.172"/>
        </slice>
        <from usec="0" sec="1444453696"/>
        <to usec="0" sec="1444453701"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.82.211.81" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453807"/>
        <to usec="0" sec="1444453818"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.164.204.127"/>
        </slice>
        <from usec="0" sec="1444453616"/>
        <to usec="0" sec="1444453619"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="33.143.212.170" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453999"/>
        <to usec="0" sec="1444454001"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="84.168.125.127" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453482"/>
        <to usec="0" sec="1444453489"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="206.218.26.91" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453287"/>
        <to usec="0" sec="1444453901"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="138.80.5.67" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453792"/>
        <to usec="0" sec="1444453808"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="49.152.0.62" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453514"/>
        <to usec="0" sec="1444453523"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.139.47.145" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444454020"/>
        <to usec="0" sec="1444454043"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.221.36.4" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453223"/>
        <to usec="0" sec="1444453238"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="213.17.40.221" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453201"/>
        <to usec="0" sec="1444453211"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.49.71.180" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444454018"/>
        <to usec="0" sec="1444454020"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="142.145.196.33" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453204"/>
        <to usec="0" sec="1444453206"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="139.107.206.149" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453460"/>
        <to usec="0" sec="1444453475"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="125.189.5.173"/>
        </slice>
        <from usec="0" sec="1444454047"/>
        <to usec="0" sec="1444454050"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="222.207.197.201" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453596"/>
        <to usec="0" sec="1444453610"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="140.4.49.218" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453706"/>
        <to usec="0" sec="1444453731"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="154.214.86.244" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453656"/>
        <to usec="0" sec="1444453673"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="132.206.5.210" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453981"/>
        <to usec="0" sec="1444454005"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="206.208.102.120"/>
        </slice>
        <from usec="0" sec="1444453264"/>
        <to usec="0" sec="1444453269"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.249.241.35" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453906"/>
        <to usec="0" sec="1444453916"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.226.156.107" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453343"/>
        <to usec="0" sec="1444453357"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="128.56.106.246" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453922"/>
        <to usec="0" sec="1444453947"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="9.92.52.125" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453598"/>
        <to usec="0" sec="1444453627"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="132.209.212.108" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444454094"/>
        <to usec="0" sec="1444454100"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="158.26.65.208" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453471"/>
        <to usec="0" sec="1444453480"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="142.152.195.86" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453607"/>
        <to usec="0" sec="1444453618"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="120.130.25.73" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453666"/>
        <to usec="0" sec="1444453673"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.130.123.189" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453254"/>
        <to usec="0" sec="1444453256"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.32.61.44" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453320"/>
        <to usec="0" sec="1444453365"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="54.219.12.249" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453814"/>
        <to usec="0" sec="1444453827"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="84.74.248.243" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453427"/>
        <to usec="0" sec="1444453430"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.164.185.109" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453520"/>
        <to usec="0" sec="1444453534"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.246.69.182" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453892"/>
        <to usec="0" sec="1444453911"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.29.165.12" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444454084"/>
        <to usec="0" sec="1444454088"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.205.48.89" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453580"/>
        <to usec="0" sec="1444453585"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="127.162.121.221" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453208"/>
        <to usec="0" sec="1444453220"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="135.154.43.148" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453532"/>
        <to usec="0" sec="1444453543"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="149.167.53.30" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444454058"/>
        <to usec="0" sec="1444454060"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.14.15.57" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453393"/>
        <to usec="0" sec="1444453409"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="129.78.247.90" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453501"/>
        <to usec="0" sec="1444453517"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="66.191.37.169" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453367"/>
        <to usec="0" sec="1444453379"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.228.223.209" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453725"/>
        <to usec="0" sec="1444453748"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="49.131.241.249" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453756"/>
        <to usec="0" sec="1444453779"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="141.133.57.114" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453603"/>
        <to usec="0" sec="1444453616"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="128.108.170.106" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453846"/>
        <to usec="0" sec="1444453861"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="66.191.102.63" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453211"/>
        <to usec="0" sec="1444453229"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="9.50.37.126" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453414"/>
        <to usec="0" sec="1444453431"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.191.105.150" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453479"/>
        <to usec="0" sec="1444453493"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="9.39.165.125" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453709"/>
        <to usec="0" sec="1444453736"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="134.245.38.155" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1444453540"/>
        <to usec="0" sec="1444453576"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="62.46.170.21"/>
        </slice>
        <from usec="0" sec="1444453359"/>
        <to usec="0" sec="1444453362"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="57.87.198.189"/>
        </slice>
        <from usec="0" sec="1444453638"/>
        <to usec="0" sec="1444453640"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="141.63.240.213"/>
        </slice>
        <from usec="0" sec="1444453893"/>
        <to usec="0" sec="1444453895"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="46.130.123.189" proto="icmp"/>
        </slice>
        <from usec="0" sec="1444453254"/>
        <to usec="0" sec="1444453256"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="149.167.53.30" proto="icmp"/>
        </slice>
        <from usec="0" sec="1444454058"/>
        <to usec="0" sec="1444454060"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="159.59.58.178"/>
        </slice>
        <from usec="0" sec="1444453267"/>
        <to usec="0" sec="1444453269"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="206.208.111.116"/>
        </slice>
        <from usec="0" sec="1444453550"/>
        <to usec="0" sec="1444453553"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="170.142.80.22"/>
        </slice>
        <from usec="0" sec="1444453655"/>
        <to usec="0" sec="1444453658"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="62.52.251.74"/>
        </slice>
        <from usec="0" sec="1444453944"/>
        <to usec="0" sec="1444453946"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="170.148.145.151" dst_ip="84.219.183.244" dst_port="443" proto="icmp"/>
        </slice>
        <from usec="0" sec="1444453558"/>
        <to usec="0" sec="1444453559"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="208.195.158.161" proto="icmp"/>
        </slice>
        <from usec="0" sec="1444453407"/>
        <to usec="0" sec="1444453409"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="132.209.212.108" proto="icmp"/>
        </slice>
        <from usec="0" sec="1444454094"/>
        <to usec="0" sec="1444454100"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="116.253.91.78" proto="icmp"/>
        </slice>
        <from usec="0" sec="1444453208"/>
        <to usec="0" sec="1444453210"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="46.42.177.65" proto="icmp"/>
        </slice>
        <from usec="0" sec="1444453378"/>
        <to usec="0" sec="1444453386"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="170.142.189.48"/>
        </slice>
        <from usec="0" sec="1444454028"/>
        <to usec="0" sec="1444454030"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="121.25.213.173" proto="icmp"/>
        </slice>
        <from usec="0" sec="1444453496"/>
        <to usec="0" sec="1444453498"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="21.83.95.69"/>
        </slice>
        <from usec="0" sec="1444454045"/>
        <to usec="0" sec="1444454047"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="121.189.56.67"/>
        </slice>
        <from usec="0" sec="1444454049"/>
        <to usec="0" sec="1444454051"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="121.189.56.66"/>
        </slice>
        <from usec="0" sec="1444453233"/>
        <to usec="0" sec="1444453238"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="6.77.196.151"/>
        </slice>
        <from usec="0" sec="1444453379"/>
        <to usec="0" sec="1444453382"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="57.81.16.128"/>
        </slice>
        <from usec="0" sec="1444453414"/>
        <to usec="0" sec="1444453417"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="159.59.104.98"/>
        </slice>
        <from usec="0" sec="1444453711"/>
        <to usec="0" sec="1444453714"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.155.189.12"/>
        </slice>
        <from usec="0" sec="1444453516"/>
        <to usec="0" sec="1444453519"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="23.211.250.202"/>
        </slice>
        <from usec="0" sec="1444454034"/>
        <to usec="0" sec="1444454036"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="170.148.145.151" dst_ip="73.170.30.70" dst_port="80"/>
        </slice>
        <from usec="0" sec="1444453206"/>
        <to usec="0" sec="1444454072"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,999,1 1 1 0 0 0 0 0 0 0 0 0,ipv4gretun">
        <slice>
            <filter src_ip="207.76.242.51" dst_ip="203.216.243.31"/>
            <filter src_ip="207.76.242.51" dst_ip="201.235.47.145"/>
        </slice>
        <from usec="0" sec="1444453200"/>
        <to usec="0" sec="1444454096"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="172.106.7.202" dst_ip="215.216.141.101" dst_port="443"/>
        </slice>
        <from usec="0" sec="1444453204"/>
        <to usec="0" sec="1444453472"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,504,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="207.76.232.12" dst_port="53"/>
            <filter src_ip="207.76.232.12" dst_port="443"/>
        </slice>
        <from usec="0" sec="1444453333"/>
        <to usec="0" sec="1444453712"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,504,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="49.15.214.217" dst_ip="159.59.2.141" src_port="443" dst_port="50842"/>
        </slice>
        <from usec="0" sec="1444453351"/>
        <to usec="0" sec="1444454078"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.128.128.82" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453692"/>
        <to usec="0" sec="1444454078"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="194.237.181.235" dst_ip="185.246.19.94" src_port="80" dst_port="1147"/>
        </slice>
        <from usec="0" sec="1444453200"/>
        <to usec="0" sec="1444454101"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="213.119.30.118" dst_ip="206.208.208.56" src_port="80" dst_port="54289"/>
        </slice>
        <from usec="0" sec="1444453446"/>
        <to usec="0" sec="1444453447"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="131.183.203.228" dst_ip="206.208.114.210" src_port="80" dst_port="54188"/>
        </slice>
        <from usec="0" sec="1444453531"/>
        <to usec="0" sec="1444454038"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,999,1 1 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="207.76.245.189" dst_ip="146.203.179.86" src_port="3389"/>
            <filter src_ip="207.76.248.112" dst_ip="146.203.179.86" src_port="3389"/>
            <filter src_ip="207.76.251.158" dst_ip="146.203.179.86" src_port="3389"/>
        </slice>
        <from usec="0" sec="1444453228"/>
        <to usec="0" sec="1444454094"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="173.88.227.71" dst_ip="130.129.38.165" src_port="56286" dst_port="80"/>
            <filter src_ip="173.88.227.71" dst_ip="130.129.38.144" src_port="60696" dst_port="80"/>
            <filter src_ip="173.88.227.71" dst_ip="71.98.91.195" src_port="57776" dst_port="80"/>
            <filter src_ip="173.88.227.71" dst_ip="130.129.38.119" src_port="50314" dst_port="80"/>
            <filter src_ip="173.88.227.71" dst_ip="130.129.36.129" src_port="45141" dst_port="80"/>
        </slice>
        <from usec="0" sec="1444453200"/>
        <to usec="0" sec="1444454097"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,999,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="173.88.82.181" dst_ip="84.218.130.162" src_port="61353" dst_port="5000"/>
        </slice>
        <from usec="0" sec="1444453422"/>
        <to usec="0" sec="1444453734"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.164.229.75" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453448"/>
        <to usec="0" sec="1444453460"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="173.88.14.13" dst_ip="57.87.22.53" dst_port="80"/>
        </slice>
        <from usec="0" sec="1444453395"/>
        <to usec="0" sec="1444453413"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="57.149.158.81" dst_ip="170.148.201.226" src_port="80" dst_port="56882"/>
        </slice>
        <from usec="0" sec="1444453978"/>
        <to usec="0" sec="1444453980"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="105.150.23.227" dst_ip="206.208.117.203" src_port="80" dst_port="50897"/>
        </slice>
        <from usec="0" sec="1444453870"/>
        <to usec="0" sec="1444453871"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="98.237.113.3" dst_ip="173.88.237.109" src_port="80"/>
        </slice>
        <from usec="0" sec="1444453475"/>
        <to usec="0" sec="1444453476"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="23.92.216.84" dst_ip="159.59.39.20" src_port="80" dst_port="45997"/>
            <filter src_ip="23.92.216.84" dst_ip="159.59.39.20" src_port="80" dst_port="40827"/>
        </slice>
        <from usec="0" sec="1444453778"/>
        <to usec="0" sec="1444453895"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,504,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="159.59.100.100" dst_port="80"/>
            <filter src_ip="159.59.100.100" dst_port="443"/>
        </slice>
        <from usec="0" sec="1444453217"/>
        <to usec="0" sec="1444453930"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.101.110.208" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453549"/>
        <to usec="0" sec="1444454101"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,503,1 1 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="159.59.104.206" dst_ip="198.197.110.249" dst_port="80"/>
            <filter src_ip="159.59.37.154" dst_ip="198.197.110.249" dst_port="80"/>
            <filter src_ip="159.59.39.25" dst_ip="198.197.110.249" dst_port="80"/>
        </slice>
        <from usec="0" sec="1444453387"/>
        <to usec="0" sec="1444453808"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="84.168.139.126" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454061"/>
        <to usec="0" sec="1444454072"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="180.67.85.247" dst_ip="215.216.147.76" src_port="64808" dst_port="443"/>
        </slice>
        <from usec="0" sec="1444453263"/>
        <to usec="0" sec="1444453340"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="125.41.94.236" dst_ip="206.218.26.118" dst_port="80"/>
        </slice>
        <from usec="0" sec="1444453362"/>
        <to usec="0" sec="1444453365"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="132.239.151.198" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453375"/>
        <to usec="0" sec="1444453387"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,503,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="159.59.37.125" dst_port="80"/>
        </slice>
        <from usec="0" sec="1444453404"/>
        <to usec="0" sec="1444453411"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="170.142.102.69" dst_ip="152.135.60.180" src_port="58277" dst_port="80"/>
        </slice>
        <from usec="0" sec="1444453379"/>
        <to usec="0" sec="1444453422"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,999,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="119.47.204.127" dst_ip="207.76.252.36" src_port="5302" dst_port="55730"/>
        </slice>
        <from usec="0" sec="1444453573"/>
        <to usec="0" sec="1444453579"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,999,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="206.208.215.118" dst_ip="116.25.163.9" src_port="53025" dst_port="25"/>
        </slice>
        <from usec="0" sec="1444453971"/>
        <to usec="0" sec="1444454074"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="57.83.210.150" dst_ip="170.142.99.7" src_port="443"/>
        </slice>
        <from usec="0" sec="1444453599"/>
        <to usec="0" sec="1444453601"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,503,1 1 1 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="12.36.250.44" dst_ip="170.148.90.233" src_port="80" dst_port="51620"/>
        </slice>
        <from usec="0" sec="1444453649"/>
        <to usec="0" sec="1444453651"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,503,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="110.38.94.78" dst_ip="173.88.243.132" src_port="80"/>
        </slice>
        <from usec="0" sec="1444453947"/>
        <to usec="0" sec="1444454062"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="216.83.74.107" dst_port="22"/>
        </slice>
        <from usec="0" sec="1444453201"/>
        <to usec="0" sec="1444454100"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="173.88.18.254" dst_ip="105.138.27.178" dst_port="443"/>
        </slice>
        <from usec="0" sec="1444453232"/>
        <to usec="0" sec="1444453403"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,999,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="140.61.9.245" dst_ip="206.208.215.118" src_port="25877" dst_port="25"/>
        </slice>
        <from usec="0" sec="1444453969"/>
        <to usec="0" sec="1444453972"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="206.208.116.141" dst_ip="41.228.25.97" dst_port="80"/>
        </slice>
        <from usec="0" sec="1444453209"/>
        <to usec="0" sec="1444454066"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="105.150.23.123" dst_ip="159.59.231.66" src_port="80" dst_port="62891"/>
        </slice>
        <from usec="0" sec="1444453617"/>
        <to usec="0" sec="1444453826"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,503,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="159.59.37.201" dst_port="80"/>
            <filter src_ip="159.59.37.201" dst_port="443"/>
            <filter src_ip="159.59.107.149" dst_port="80"/>
        </slice>
        <from usec="0" sec="1444453204"/>
        <to usec="0" sec="1444454076"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="18.239.138.105" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453528"/>
        <to usec="0" sec="1444453543"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,504,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="159.59.36.98" dst_port="443"/>
            <filter src_ip="159.59.36.98" dst_port="80"/>
        </slice>
        <from usec="0" sec="1444453434"/>
        <to usec="0" sec="1444453852"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="180.67.15.178" dst_ip="49.15.219.46" src_port="61086" dst_port="443"/>
        </slice>
        <from usec="0" sec="1444453229"/>
        <to usec="0" sec="1444453852"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="99.15.116.164" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453814"/>
        <to usec="0" sec="1444453821"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.51.132.139" src_port="21678" dst_port="8443"/>
        </slice>
        <from usec="0" sec="1444453537"/>
        <to usec="0" sec="1444453982"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="159.59.37.228" dst_ip="79.175.247.186" dst_port="80"/>
        </slice>
        <from usec="0" sec="1444453257"/>
        <to usec="0" sec="1444453561"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="140.8.193.237" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453652"/>
        <to usec="0" sec="1444453686"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="206.208.124.131" dst_ip="29.74.225.245" dst_port="80"/>
            <filter src_ip="206.208.124.131" dst_ip="73.2.88.231" dst_port="80"/>
        </slice>
        <from usec="0" sec="1444453226"/>
        <to usec="0" sec="1444454086"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="170.142.189.250" dst_port="443"/>
        </slice>
        <from usec="0" sec="1444453471"/>
        <to usec="0" sec="1444454041"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="129.248.25.33" dst_ip="207.76.255.122" dst_port="80"/>
        </slice>
        <from usec="0" sec="1444453340"/>
        <to usec="0" sec="1444453960"/>
    </anomaly>
    <anomaly type="notice" value="0.388221,2.345150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="173.88.13.85" dst_ip="137.243.178.226" dst_port="443"/>
            <filter src_ip="173.88.13.85" dst_ip="137.243.181.34" dst_port="443"/>
            <filter src_ip="173.88.13.85" dst_ip="200.157.251.22" dst_port="443"/>
        </slice>
        <from usec="0" sec="1444453207"/>
        <to usec="0" sec="1444454045"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="84.249.164.183" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454002"/>
        <to usec="0" sec="1444454014"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="144.188.190.129" dst_ip="159.59.107.149" src_port="80"/>
        </slice>
        <from usec="0" sec="1444453343"/>
        <to usec="0" sec="1444454002"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="120.198.56.59" dst_ip="185.246.249.189" src_port="80" dst_port="51276"/>
        </slice>
        <from usec="0" sec="1444453934"/>
        <to usec="0" sec="1444453937"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,503,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="170.142.215.56" dst_port="80"/>
        </slice>
        <from usec="0" sec="1444453272"/>
        <to usec="0" sec="1444454095"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="144.188.190.128" dst_ip="159.59.107.149" src_port="80" dst_port="56142"/>
        </slice>
        <from usec="0" sec="1444453598"/>
        <to usec="0" sec="1444454100"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="207.76.244.168" dst_ip="144.199.56.92" src_port="80"/>
        </slice>
        <from usec="0" sec="1444453350"/>
        <to usec="0" sec="1444454098"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,999,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="117.220.97.116" dst_ip="185.246.248.130" src_port="7273" dst_port="7273"/>
        </slice>
        <from usec="0" sec="1444453206"/>
        <to usec="0" sec="1444453621"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="215.216.141.101" dst_ip="172.106.7.202" src_port="443"/>
        </slice>
        <from usec="0" sec="1444453204"/>
        <to usec="0" sec="1444453471"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="98.238.52.151" dst_ip="206.208.111.46" src_port="443" dst_port="57446"/>
        </slice>
        <from usec="0" sec="1444453279"/>
        <to usec="0" sec="1444453365"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.182.205.132" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454048"/>
        <to usec="0" sec="1444454065"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="184.244.80.241" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453268"/>
        <to usec="0" sec="1444453284"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,504,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="98.238.2.151" dst_ip="159.59.125.42" src_port="443" dst_port="51797"/>
        </slice>
        <from usec="0" sec="1444453913"/>
        <to usec="0" sec="1444453915"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="151.93.69.65" dst_port="22"/>
        </slice>
        <from usec="0" sec="1444453205"/>
        <to usec="0" sec="1444454098"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="132.12.100.21" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453609"/>
        <to usec="0" sec="1444453620"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="185.243.15.164" dst_ip="206.208.215.100" src_port="46849" dst_port="80"/>
        </slice>
        <from usec="0" sec="1444453217"/>
        <to usec="0" sec="1444453220"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="159.59.2.232" src_port="7273" dst_port="7273"/>
        </slice>
        <from usec="0" sec="1444453207"/>
        <to usec="0" sec="1444454100"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.191.157.147" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453412"/>
        <to usec="0" sec="1444453425"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="159.59.230.77" dst_ip="2.14.199.9" src_port="58504" dst_port="443"/>
            <filter src_ip="159.59.230.77" dst_ip="2.14.199.9" src_port="58503" dst_port="443"/>
            <filter src_ip="159.59.230.77" dst_ip="2.14.199.9" src_port="58502" dst_port="443"/>
            <filter src_ip="159.59.230.77" dst_ip="2.14.199.9" src_port="58501" dst_port="443"/>
            <filter src_ip="159.59.230.77" dst_ip="2.14.199.9" src_port="58500" dst_port="443"/>
        </slice>
        <from usec="0" sec="1444453322"/>
        <to usec="0" sec="1444454033"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.71.66.53" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453803"/>
        <to usec="0" sec="1444453815"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="206.208.111.46" dst_ip="73.27.2.96" src_port="57441" dst_port="443"/>
            <filter src_ip="206.208.111.46" dst_ip="101.47.181.242" src_port="57450" dst_port="80"/>
        </slice>
        <from usec="0" sec="1444453304"/>
        <to usec="0" sec="1444453307"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.81.3.93" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453484"/>
        <to usec="0" sec="1444453499"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,503,1 1 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="206.252.97.12" dst_ip="159.59.103.41" src_port="80" dst_port="49892"/>
        </slice>
        <from usec="0" sec="1444453490"/>
        <to usec="0" sec="1444453491"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="75.110.98.140" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453225"/>
        <to usec="0" sec="1444453236"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="204.232.101.207" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453319"/>
        <to usec="0" sec="1444453329"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="206.208.114.210" dst_ip="131.183.203.228" src_port="54188" dst_port="80"/>
        </slice>
        <from usec="0" sec="1444453210"/>
        <to usec="0" sec="1444454101"/>
    </anomaly>
    <anomaly type="notice" value="0.824574,2.346270,504,1 1 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="173.88.56.128" dst_port="443"/>
            <filter dst_ip="49.15.212.172" dst_port="443"/>
        </slice>
        <from usec="0" sec="1444453200"/>
        <to usec="0" sec="1444454101"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,503,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="170.142.80.202" dst_port="80"/>
            <filter src_ip="170.142.215.24" dst_ip="31.16.134.43"/>
            <filter src_ip="170.142.215.24" dst_port="80"/>
            <filter dst_ip="31.16.134.43" dst_port="80"/>
        </slice>
        <from usec="0" sec="1444453202"/>
        <to usec="0" sec="1444454096"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,503,1 1 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="159.59.163.55" dst_port="80"/>
        </slice>
        <from usec="0" sec="1444453351"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="0.927436,2.345000,020,1 1 1 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="222.11.50.57"/>
        </slice>
        <from usec="0" sec="1444453380"/>
        <to usec="0" sec="1444453426"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,011,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="119.101.110.208" src_port="23"/>
        </slice>
        <from usec="0" sec="1444453603"/>
        <to usec="0" sec="1444453609"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,999,1 1 1 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="144.162.36.41" dst_ip="206.218.26.91" src_port="60056" dst_port="22"/>
            <filter src_ip="144.162.36.41" dst_ip="206.218.26.91" src_port="55381" dst_port="22"/>
            <filter src_ip="109.18.119.69" dst_ip="206.218.26.91" src_port="49422" dst_port="25"/>
            <filter src_ip="206.197.74.105" dst_ip="206.218.26.91" src_port="39427" dst_port="25"/>
            <filter src_ip="206.197.74.217" dst_ip="206.218.26.91" src_port="25" dst_port="35015"/>
        </slice>
        <from usec="0" sec="1444453452"/>
        <to usec="0" sec="1444453626"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="57.87.164.98" dst_ip="159.59.100.100" src_port="443"/>
        </slice>
        <from usec="0" sec="1444453515"/>
        <to usec="0" sec="1444453844"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,020,1 1 0 0 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="185.136.214.57"/>
        </slice>
        <from usec="0" sec="1444453593"/>
        <to usec="0" sec="1444454096"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="106.190.3.127" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453980"/>
        <to usec="0" sec="1444453997"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="129.71.52.221" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453405"/>
        <to usec="0" sec="1444453417"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="218.230.153.217" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453689"/>
        <to usec="0" sec="1444453705"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="90.15.228.149" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453210"/>
        <to usec="0" sec="1444453224"/>
    </anomaly>
    <anomaly type="notice" value="0.816971,2.409400,504,0 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="206.208.211.137"/>
        </slice>
        <from usec="0" sec="1444453235"/>
        <to usec="0" sec="1444453238"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.85.29.231" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453432"/>
        <to usec="0" sec="1444453461"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,020,1 1 0 0 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="185.136.215.52"/>
        </slice>
        <from usec="0" sec="1444453200"/>
        <to usec="0" sec="1444454077"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="142.91.122.7" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453358"/>
        <to usec="0" sec="1444453374"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.194.234.23" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453786"/>
        <to usec="0" sec="1444453802"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="90.3.228.82" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453206"/>
        <to usec="0" sec="1444453217"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="118.119.49.149" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454032"/>
        <to usec="0" sec="1444454048"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="185.136.214.36"/>
        </slice>
        <from usec="0" sec="1444453211"/>
        <to usec="0" sec="1444454075"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,999,1 1 1 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="194.193.176.117" dst_ip="207.76.250.147"/>
            <filter src_ip="194.193.176.117"/>
            <filter src_ip="194.193.176.117"/>
            <filter src_ip="194.193.176.113" dst_ip="207.76.250.147"/>
            <filter src_ip="194.193.176.113" src_port="500"/>
            <filter src_ip="194.193.176.113"/>
            <filter src_ip="194.193.176.113" dst_port="500"/>
            <filter src_ip="194.193.176.113"/>
            <filter src_ip="194.143.202.193" dst_ip="207.76.250.147"/>
            <filter src_ip="194.143.202.193"/>
            <filter src_ip="194.143.202.193"/>
            <filter src_ip="194.193.176.117" src_port="500" dst_port="500"/>
            <filter dst_ip="207.76.250.147" src_port="500" dst_port="500"/>
            <filter dst_ip="207.76.250.147"/>
        </slice>
        <from usec="0" sec="1444453308"/>
        <to usec="0" sec="1444453994"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="128.20.52.60"/>
        </slice>
        <from usec="0" sec="1444454008"/>
        <to usec="0" sec="1444454017"/>
    </anomaly>
    <anomaly type="notice" value="0.824574,2.346270,020,1 1 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="145.81.253.32"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453651"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="6.165.31.45"/>
        </slice>
        <from usec="0" sec="1444454078"/>
        <to usec="0" sec="1444454080"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="103.233.168.215"/>
        </slice>
        <from usec="0" sec="1444453200"/>
        <to usec="0" sec="1444453202"/>
    </anomaly>
    <anomaly type="notice" value="0.816971,2.409400,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="135.159.177.108" dst_ip="135.159.177.108" proto="icmp"/>
        </slice>
        <from usec="0" sec="1444453483"/>
        <to usec="0" sec="1444453492"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,DDoSIC">
        <slice>
            <filter dst_ip="207.76.246.6" dst_port="33435"/>
            <filter dst_ip="207.76.246.6"/>
        </slice>
        <from usec="0" sec="1444453403"/>
        <to usec="0" sec="1444453763"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="36.78.206.11"/>
        </slice>
        <from usec="0" sec="1444453994"/>
        <to usec="0" sec="1444453995"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="222.205.161.123"/>
        </slice>
        <from usec="0" sec="1444453489"/>
        <to usec="0" sec="1444453491"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,503,1 1 1 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="206.218.42.59" dst_ip="215.200.65.139" dst_port="80"/>
            <filter dst_ip="91.51.132.139" src_port="8443" dst_port="21678"/>
        </slice>
        <from usec="0" sec="1444453472"/>
        <to usec="0" sec="1444454101"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="66.45.161.2"/>
        </slice>
        <from usec="0" sec="1444453449"/>
        <to usec="0" sec="1444453452"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="135.113.134.173"/>
        </slice>
        <from usec="0" sec="1444453934"/>
        <to usec="0" sec="1444453936"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="87.178.73.179"/>
        </slice>
        <from usec="0" sec="1444453684"/>
        <to usec="0" sec="1444453685"/>
    </anomaly>
    <anomaly type="notice" value="0.824574,2.346270,020,1 1 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="94.107.31.227"/>
        </slice>
        <from usec="0" sec="1444453875"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="103.27.32.82"/>
        </slice>
        <from usec="0" sec="1444453993"/>
        <to usec="0" sec="1444453995"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="101.7.66.197" src_port="12200" dst_port="8118"/>
            <filter src_ip="101.7.66.197" src_port="12200" dst_port="3128"/>
        </slice>
        <from usec="0" sec="1444453752"/>
        <to usec="0" sec="1444453757"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="134.7.17.146" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453989"/>
        <to usec="0" sec="1444454001"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="84.180.150.12" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453899"/>
        <to usec="0" sec="1444453913"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="71.69.182.122" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453274"/>
        <to usec="0" sec="1444453286"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.88.28.104" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453226"/>
        <to usec="0" sec="1444453238"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="209.36.134.80" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453977"/>
        <to usec="0" sec="1444453990"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.237.141.139" src_port="6000" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1444453718"/>
        <to usec="0" sec="1444453719"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="120.128.17.116" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453981"/>
        <to usec="0" sec="1444454002"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.115.7.139" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453793"/>
        <to usec="0" sec="1444453808"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="101.7.27.186" src_port="12200" dst_port="3128"/>
        </slice>
        <from usec="0" sec="1444453754"/>
        <to usec="0" sec="1444453797"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,020,1 1 0 0 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="185.136.215.36"/>
        </slice>
        <from usec="0" sec="1444453293"/>
        <to usec="0" sec="1444454083"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="218.100.98.132" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453823"/>
        <to usec="0" sec="1444453834"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.64.138.203" src_port="39418" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453990"/>
        <to usec="0" sec="1444454014"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="222.11.50.115" src_port="6000" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1444453824"/>
        <to usec="0" sec="1444453907"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.84.181.13" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454000"/>
        <to usec="0" sec="1444454013"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="30.91.100.137" src_port="12200" dst_port="3128"/>
        </slice>
        <from usec="0" sec="1444453222"/>
        <to usec="0" sec="1444453227"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.112.21.120" src_port="5065" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1444453202"/>
        <to usec="0" sec="1444454024"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.84.72.13" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453822"/>
        <to usec="0" sec="1444453833"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="8.31.70.22" src_port="53" dst_port="35461"/>
        </slice>
        <from usec="0" sec="1444453212"/>
        <to usec="0" sec="1444454101"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="114.97.57.195" src_port="53" dst_port="35461"/>
        </slice>
        <from usec="0" sec="1444453315"/>
        <to usec="0" sec="1444454099"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="9.238.159.146" src_port="6000" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1444453985"/>
        <to usec="0" sec="1444453987"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.0.113.204" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453210"/>
        <to usec="0" sec="1444453244"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.84.153.222" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453869"/>
        <to usec="0" sec="1444453881"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="136.239.17.200" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453289"/>
        <to usec="0" sec="1444453304"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.179.160.106" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453871"/>
        <to usec="0" sec="1444453884"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="97.103.218.146" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453501"/>
        <to usec="0" sec="1444453520"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.191.21.16" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453952"/>
        <to usec="0" sec="1444453969"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="127.34.8.23" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453790"/>
        <to usec="0" sec="1444453802"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.216.239.238" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454023"/>
        <to usec="0" sec="1444454039"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="132.239.217.195" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453398"/>
        <to usec="0" sec="1444453405"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.96.90.1" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453584"/>
        <to usec="0" sec="1444453601"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.84.112.208" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453752"/>
        <to usec="0" sec="1444453773"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.242.66.196" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453784"/>
        <to usec="0" sec="1444453809"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="205.109.116.35" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453313"/>
        <to usec="0" sec="1444453334"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="135.77.159.30" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453719"/>
        <to usec="0" sec="1444453745"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="205.17.46.227" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453989"/>
        <to usec="0" sec="1444454013"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="84.206.83.62" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453863"/>
        <to usec="0" sec="1444453868"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="74.191.247.41" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453351"/>
        <to usec="0" sec="1444453363"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="97.166.166.237" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453528"/>
        <to usec="0" sec="1444453539"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="131.172.111.149" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453505"/>
        <to usec="0" sec="1444453516"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.187.166.169" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453931"/>
        <to usec="0" sec="1444453944"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.84.71.240" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453995"/>
        <to usec="0" sec="1444454014"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="97.65.240.10" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453716"/>
        <to usec="0" sec="1444453745"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.123.203.71" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453452"/>
        <to usec="0" sec="1444453463"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="28.154.129.74" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453764"/>
        <to usec="0" sec="1444453779"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="206.143.106.182" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453664"/>
        <to usec="0" sec="1444453677"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="95.191.75.26" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453692"/>
        <to usec="0" sec="1444453703"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="8.45.120.246" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453550"/>
        <to usec="0" sec="1444453575"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="90.2.182.31" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453994"/>
        <to usec="0" sec="1444454024"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="77.124.164.86" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453248"/>
        <to usec="0" sec="1444453281"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.179.186.211" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454065"/>
        <to usec="0" sec="1444454084"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="6.157.6.57" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453917"/>
        <to usec="0" sec="1444453924"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="175.15.5.103" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453443"/>
        <to usec="0" sec="1444453455"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="84.182.70.68" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453598"/>
        <to usec="0" sec="1444453615"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="128.20.52.60" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454008"/>
        <to usec="0" sec="1444454017"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="132.255.179.195" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453403"/>
        <to usec="0" sec="1444453415"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="90.141.219.65" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453971"/>
        <to usec="0" sec="1444453975"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.128.62.113" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453964"/>
        <to usec="0" sec="1444453976"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="175.132.80.184" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453981"/>
        <to usec="0" sec="1444453998"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.71.74.118" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453647"/>
        <to usec="0" sec="1444453653"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.238.213.18" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453520"/>
        <to usec="0" sec="1444453530"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.173.11.141" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454045"/>
        <to usec="0" sec="1444454061"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="69.129.232.108" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453457"/>
        <to usec="0" sec="1444453483"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.173.219.147" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453858"/>
        <to usec="0" sec="1444453870"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="139.249.76.93" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453248"/>
        <to usec="0" sec="1444453257"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="129.231.35.133" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453415"/>
        <to usec="0" sec="1444453423"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.84.34.169" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453442"/>
        <to usec="0" sec="1444453456"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="196.59.183.73" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453736"/>
        <to usec="0" sec="1444453760"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.181.111.249" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453748"/>
        <to usec="0" sec="1444453753"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="141.1.112.98" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453665"/>
        <to usec="0" sec="1444453677"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="139.238.52.131" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453893"/>
        <to usec="0" sec="1444453904"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="120.138.172.119" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453326"/>
        <to usec="0" sec="1444453331"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.217.207.79" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454074"/>
        <to usec="0" sec="1444454076"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="135.181.163.224" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453932"/>
        <to usec="0" sec="1444453940"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="69.177.76.240" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453742"/>
        <to usec="0" sec="1444453754"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="120.130.233.87" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453320"/>
        <to usec="0" sec="1444453332"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="184.97.136.16" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453681"/>
        <to usec="0" sec="1444453697"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="139.16.37.122" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453755"/>
        <to usec="0" sec="1444453770"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="87.240.39.157" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453790"/>
        <to usec="0" sec="1444453815"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="220.239.41.193" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453581"/>
        <to usec="0" sec="1444453593"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="90.93.49.35" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453958"/>
        <to usec="0" sec="1444453976"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="143.123.58.168" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453704"/>
        <to usec="0" sec="1444453716"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="83.173.224.102" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453505"/>
        <to usec="0" sec="1444453799"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="99.108.151.48" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453380"/>
        <to usec="0" sec="1444453392"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="151.93.195.149" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453339"/>
        <to usec="0" sec="1444453362"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="129.28.167.56" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453812"/>
        <to usec="0" sec="1444453823"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="12.92.242.173" dst_port="222"/>
        </slice>
        <from usec="0" sec="1444453543"/>
        <to usec="0" sec="1444453545"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="128.42.61.118" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453274"/>
        <to usec="0" sec="1444453290"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="84.179.56.79" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453990"/>
        <to usec="0" sec="1444454005"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="127.40.76.20" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453781"/>
        <to usec="0" sec="1444453783"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="120.143.73.13" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453311"/>
        <to usec="0" sec="1444453324"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.83.73.97" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453704"/>
        <to usec="0" sec="1444453725"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.172.157.122" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453800"/>
        <to usec="0" sec="1444453827"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.83.238.51" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453693"/>
        <to usec="0" sec="1444453697"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="90.2.113.193" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453884"/>
        <to usec="0" sec="1444453895"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="120.150.23.64" dst_port="445"/>
            <filter src_ip="120.150.23.64" dst_port="139"/>
        </slice>
        <from usec="0" sec="1444453918"/>
        <to usec="0" sec="1444453958"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="193.69.200.128" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453242"/>
        <to usec="0" sec="1444453269"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="84.181.162.227" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453866"/>
        <to usec="0" sec="1444453881"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="213.189.250.232" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453957"/>
        <to usec="0" sec="1444453980"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.85.228.167" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453864"/>
        <to usec="0" sec="1444453874"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="28.15.57.80" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453835"/>
        <to usec="0" sec="1444453842"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="145.81.253.32" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453631"/>
        <to usec="0" sec="1444453635"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="66.191.25.153" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453916"/>
        <to usec="0" sec="1444453933"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.54.49.7" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453448"/>
        <to usec="0" sec="1444453459"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="18.12.198.121" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453495"/>
        <to usec="0" sec="1444453511"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="81.70.160.224" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453496"/>
        <to usec="0" sec="1444453517"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="128.56.96.153" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453816"/>
        <to usec="0" sec="1444453836"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="103.25.92.177" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453918"/>
        <to usec="0" sec="1444453936"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="12.43.131.204" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453732"/>
        <to usec="0" sec="1444453736"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="137.249.172.70" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453948"/>
        <to usec="0" sec="1444453961"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="136.134.135.106" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453440"/>
        <to usec="0" sec="1444453482"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.15.218.47" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453672"/>
        <to usec="0" sec="1444453685"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.84.69.205" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453740"/>
        <to usec="0" sec="1444453748"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="80.61.162.103" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454022"/>
        <to usec="0" sec="1444454038"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="136.251.7.118" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453213"/>
        <to usec="0" sec="1444453233"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="107.144.188.135" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453617"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.157.131.57" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453634"/>
        <to usec="0" sec="1444453645"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="212.50.216.38" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453932"/>
        <to usec="0" sec="1444453964"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="208.14.212.216" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453898"/>
        <to usec="0" sec="1444453911"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="137.242.136.239" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453518"/>
        <to usec="0" sec="1444453539"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="21.6.161.163" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453825"/>
        <to usec="0" sec="1444453846"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="84.166.1.148" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454062"/>
        <to usec="0" sec="1444454085"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="86.158.12.147" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453678"/>
        <to usec="0" sec="1444453692"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="221.244.148.220" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453488"/>
        <to usec="0" sec="1444453502"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.174.11.177" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453841"/>
        <to usec="0" sec="1444453854"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.25.152.217" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453949"/>
        <to usec="0" sec="1444453953"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="80.186.169.97" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453893"/>
        <to usec="0" sec="1444453908"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="132.211.143.146" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453546"/>
        <to usec="0" sec="1444453558"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="133.215.64.159" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453597"/>
        <to usec="0" sec="1444453608"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="219.45.128.47" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453987"/>
        <to usec="0" sec="1444454006"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="66.191.49.104" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453288"/>
        <to usec="0" sec="1444453309"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.65.166.118" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453255"/>
        <to usec="0" sec="1444453269"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.124.135.43" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453718"/>
        <to usec="0" sec="1444453736"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.251.207.105" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453471"/>
        <to usec="0" sec="1444453479"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="33.56.218.248" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453663"/>
        <to usec="0" sec="1444453683"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="18.238.219.115" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453494"/>
        <to usec="0" sec="1444453510"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="206.218.62.235" dst_port="25"/>
        </slice>
        <from usec="0" sec="1444453318"/>
        <to usec="0" sec="1444454012"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="126.39.223.254" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453828"/>
        <to usec="0" sec="1444453843"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.83.129.124" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453781"/>
        <to usec="0" sec="1444453786"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="192.15.166.30" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453328"/>
        <to usec="0" sec="1444453338"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="220.215.24.57" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453842"/>
        <to usec="0" sec="1444453859"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="205.25.226.65" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453526"/>
        <to usec="0" sec="1444453613"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.164.204.107" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453708"/>
        <to usec="0" sec="1444453734"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="128.213.141.69" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453738"/>
        <to usec="0" sec="1444453760"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="139.74.211.138" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454012"/>
        <to usec="0" sec="1444454041"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="109.85.164.143" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453811"/>
        <to usec="0" sec="1444453860"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.12.214.215" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453649"/>
        <to usec="0" sec="1444453661"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="134.105.47.163" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453841"/>
        <to usec="0" sec="1444453852"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="120.144.106.168" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453496"/>
        <to usec="0" sec="1444453501"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="49.18.179.119" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453688"/>
        <to usec="0" sec="1444453705"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="143.150.66.21" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453918"/>
        <to usec="0" sec="1444453935"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="84.120.181.169" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453353"/>
        <to usec="0" sec="1444453368"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.93.123.172" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453285"/>
        <to usec="0" sec="1444453305"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="204.234.64.40" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453919"/>
        <to usec="0" sec="1444453930"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="90.107.255.194" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453201"/>
        <to usec="0" sec="1444453218"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.164.204.96" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453609"/>
        <to usec="0" sec="1444453632"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="53.39.154.113" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453777"/>
        <to usec="0" sec="1444453797"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.25.91.8" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453497"/>
        <to usec="0" sec="1444453510"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="218.28.231.150" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453559"/>
        <to usec="0" sec="1444453574"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.85.37.38" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453261"/>
        <to usec="0" sec="1444453281"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="84.165.36.36" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453497"/>
        <to usec="0" sec="1444453516"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.85.108.186" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453659"/>
        <to usec="0" sec="1444453667"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.61.98.92" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453849"/>
        <to usec="0" sec="1444453866"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="143.232.55.198" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453370"/>
        <to usec="0" sec="1444453388"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.77.29.114" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453396"/>
        <to usec="0" sec="1444453410"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="100.60.199.163" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453405"/>
        <to usec="0" sec="1444453436"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.181.179.41" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453370"/>
        <to usec="0" sec="1444453384"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.101.155.84" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453218"/>
        <to usec="0" sec="1444453233"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.169.222.96" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453668"/>
        <to usec="0" sec="1444453679"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="101.79.201.60" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453293"/>
        <to usec="0" sec="1444453316"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.2.155.224" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453626"/>
        <to usec="0" sec="1444453637"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="67.132.145.83" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454005"/>
        <to usec="0" sec="1444454017"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="18.166.18.156" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453987"/>
        <to usec="0" sec="1444454001"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="18.239.238.160" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453342"/>
        <to usec="0" sec="1444453357"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="84.196.138.165" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453437"/>
        <to usec="0" sec="1444453454"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.3.124.151" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453804"/>
        <to usec="0" sec="1444453819"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.219.25.123" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453900"/>
        <to usec="0" sec="1444453912"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="103.226.181.91" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453489"/>
        <to usec="0" sec="1444453510"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="137.88.171.224" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453368"/>
        <to usec="0" sec="1444453380"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="129.53.17.135" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453639"/>
        <to usec="0" sec="1444453657"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="213.87.239.158" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453721"/>
        <to usec="0" sec="1444453740"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="84.181.160.126" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453666"/>
        <to usec="0" sec="1444453681"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="139.41.94.177" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453776"/>
        <to usec="0" sec="1444453800"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="114.21.209.253" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453803"/>
        <to usec="0" sec="1444453805"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.65.107.166" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453298"/>
        <to usec="0" sec="1444453312"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="106.222.212.142" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453638"/>
        <to usec="0" sec="1444453674"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="135.81.102.252" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453435"/>
        <to usec="0" sec="1444453459"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.225.53.35" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453259"/>
        <to usec="0" sec="1444453275"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.0.91.48" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453483"/>
        <to usec="0" sec="1444453499"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="84.179.145.192" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453306"/>
        <to usec="0" sec="1444453322"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="9.33.56.37" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453774"/>
        <to usec="0" sec="1444453785"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="18.12.244.81" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453788"/>
        <to usec="0" sec="1444453804"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.87.80.82" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454070"/>
        <to usec="0" sec="1444454094"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.178.8.249" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453216"/>
        <to usec="0" sec="1444453235"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="18.219.37.5" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453575"/>
        <to usec="0" sec="1444453578"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="132.206.65.173" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454039"/>
        <to usec="0" sec="1444454066"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="9.39.58.251" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453770"/>
        <to usec="0" sec="1444453794"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="138.112.195.192" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453979"/>
        <to usec="0" sec="1444453993"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.189.168.92" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453636"/>
        <to usec="0" sec="1444453654"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.178.5.94" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453671"/>
        <to usec="0" sec="1444453684"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.94.111.232" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453218"/>
        <to usec="0" sec="1444453231"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="132.239.199.237" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453543"/>
        <to usec="0" sec="1444453568"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="204.228.37.67" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453202"/>
        <to usec="0" sec="1444453203"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="18.238.145.61" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453307"/>
        <to usec="0" sec="1444453314"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.28.72.8" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453490"/>
        <to usec="0" sec="1444453506"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="192.120.193.84" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453767"/>
        <to usec="0" sec="1444453779"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="90.254.230.241" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453586"/>
        <to usec="0" sec="1444453600"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="94.84.171.240" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453762"/>
        <to usec="0" sec="1444453783"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="57.104.210.58" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453539"/>
        <to usec="0" sec="1444453555"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.95.39.120" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453479"/>
        <to usec="0" sec="1444453503"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="208.195.158.161" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453407"/>
        <to usec="0" sec="1444453421"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.83.28.216" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453532"/>
        <to usec="0" sec="1444453556"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="103.233.168.215" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453200"/>
        <to usec="0" sec="1444453203"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="130.145.24.149" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454093"/>
        <to usec="0" sec="1444454099"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.177.86.235" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453913"/>
        <to usec="0" sec="1444453931"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="138.96.39.80" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453498"/>
        <to usec="0" sec="1444453521"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.174.110.54" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453633"/>
        <to usec="0" sec="1444453646"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.227.194.224" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453683"/>
        <to usec="0" sec="1444453695"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="65.84.10.106" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453230"/>
        <to usec="0" sec="1444453243"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="21.232.177.44" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453262"/>
        <to usec="0" sec="1444453276"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="218.31.212.19" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453638"/>
        <to usec="0" sec="1444453658"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.85.241.232" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453739"/>
        <to usec="0" sec="1444453752"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.76.130.82" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453240"/>
        <to usec="0" sec="1444453257"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="30.232.216.39" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453553"/>
        <to usec="0" sec="1444453574"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="140.38.37.36" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453282"/>
        <to usec="0" sec="1444453309"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="87.15.21.236" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453711"/>
        <to usec="0" sec="1444453726"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="135.113.181.171" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454073"/>
        <to usec="0" sec="1444454078"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.82.118.75" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453354"/>
        <to usec="0" sec="1444453367"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.82.152.235" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453649"/>
        <to usec="0" sec="1444453662"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="66.191.98.187" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454072"/>
        <to usec="0" sec="1444454093"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="137.87.125.85" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453425"/>
        <to usec="0" sec="1444453436"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="136.100.167.103" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453319"/>
        <to usec="0" sec="1444453331"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="89.38.138.56" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453200"/>
        <to usec="0" sec="1444453228"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="134.162.73.153" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453518"/>
        <to usec="0" sec="1444453528"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="216.92.115.19" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453521"/>
        <to usec="0" sec="1444453538"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="118.98.108.155" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453630"/>
        <to usec="0" sec="1444453647"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="128.88.2.33" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453597"/>
        <to usec="0" sec="1444453609"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="68.181.171.211" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453980"/>
        <to usec="0" sec="1444453987"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="133.209.18.137" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453395"/>
        <to usec="0" sec="1444453411"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="90.87.144.59" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453335"/>
        <to usec="0" sec="1444453356"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="137.141.172.243" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454066"/>
        <to usec="0" sec="1444454076"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="137.74.87.184" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453321"/>
        <to usec="0" sec="1444453332"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="21.82.152.16" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454020"/>
        <to usec="0" sec="1444454031"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="154.215.128.68" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453426"/>
        <to usec="0" sec="1444453433"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.187.63.120" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453883"/>
        <to usec="0" sec="1444453899"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.173.144.2" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454029"/>
        <to usec="0" sec="1444454041"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="222.168.185.16" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453332"/>
        <to usec="0" sec="1444453354"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="204.141.198.224" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453389"/>
        <to usec="0" sec="1444453401"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="204.141.194.192" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453451"/>
        <to usec="0" sec="1444453464"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="139.26.87.107" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453438"/>
        <to usec="0" sec="1444453454"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.182.3.90" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453784"/>
        <to usec="0" sec="1444453798"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.191.187.136" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453943"/>
        <to usec="0" sec="1444453959"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="215.229.225.73" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453478"/>
        <to usec="0" sec="1444453502"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="135.159.177.108" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453483"/>
        <to usec="0" sec="1444453492"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="134.80.149.81" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454095"/>
        <to usec="0" sec="1444454101"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="204.37.101.23" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453796"/>
        <to usec="0" sec="1444453812"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="84.140.1.66" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453472"/>
        <to usec="0" sec="1444453488"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.144.181.177" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453218"/>
        <to usec="0" sec="1444453233"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="12.79.119.6" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454009"/>
        <to usec="0" sec="1444454026"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="84.74.184.249" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453419"/>
        <to usec="0" sec="1444453433"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.94.210.246" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453793"/>
        <to usec="0" sec="1444453805"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.78.206.11" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453994"/>
        <to usec="0" sec="1444453995"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="146.197.38.20" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453486"/>
        <to usec="0" sec="1444453518"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="84.176.161.195" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453529"/>
        <to usec="0" sec="1444453541"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.175.246.152" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453399"/>
        <to usec="0" sec="1444453417"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="64.29.225.180" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453690"/>
        <to usec="0" sec="1444453703"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="136.93.80.103" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453780"/>
        <to usec="0" sec="1444453788"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="204.141.176.221" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453555"/>
        <to usec="0" sec="1444453578"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="221.245.80.115" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453219"/>
        <to usec="0" sec="1444453222"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.80.182.25" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453516"/>
        <to usec="0" sec="1444453528"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="137.133.130.29" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453241"/>
        <to usec="0" sec="1444453258"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.76.205.217" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453362"/>
        <to usec="0" sec="1444453374"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.208.154.201" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453595"/>
        <to usec="0" sec="1444453600"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="49.173.199.155" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453356"/>
        <to usec="0" sec="1444453367"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.164.103.105" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453652"/>
        <to usec="0" sec="1444453666"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="134.147.182.107" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453580"/>
        <to usec="0" sec="1444453611"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.46.209.251" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453551"/>
        <to usec="0" sec="1444453560"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.25.217.120" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453678"/>
        <to usec="0" sec="1444453691"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="136.93.80.114" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453618"/>
        <to usec="0" sec="1444453630"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="217.88.119.8" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453400"/>
        <to usec="0" sec="1444453403"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="133.169.210.105" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453310"/>
        <to usec="0" sec="1444453320"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="136.39.48.6" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453656"/>
        <to usec="0" sec="1444453678"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.102.86.70" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453893"/>
        <to usec="0" sec="1444453904"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="141.92.121.181" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453401"/>
        <to usec="0" sec="1444453415"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.172.218.23" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453864"/>
        <to usec="0" sec="1444453886"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.30.29.170" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453525"/>
        <to usec="0" sec="1444453529"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="135.83.246.235" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454052"/>
        <to usec="0" sec="1444454054"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="21.119.246.172" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453482"/>
        <to usec="0" sec="1444453485"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.172.142.123" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453488"/>
        <to usec="0" sec="1444453501"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.153.85.190" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453647"/>
        <to usec="0" sec="1444453671"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.26.180.188" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453768"/>
        <to usec="0" sec="1444453785"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="219.46.79.165" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453936"/>
        <to usec="0" sec="1444453946"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="213.200.69.93" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453739"/>
        <to usec="0" sec="1444453749"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.191.149.216" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453424"/>
        <to usec="0" sec="1444453435"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="9.67.224.54" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453266"/>
        <to usec="0" sec="1444453290"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="134.20.207.214" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453892"/>
        <to usec="0" sec="1444453906"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="9.94.63.2" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454026"/>
        <to usec="0" sec="1444454037"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.174.65.14" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453226"/>
        <to usec="0" sec="1444453238"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="23.252.27.99" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453788"/>
        <to usec="0" sec="1444453804"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="87.144.204.226" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453336"/>
        <to usec="0" sec="1444453353"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="135.113.185.116" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453556"/>
        <to usec="0" sec="1444453570"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="175.10.153.96" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453855"/>
        <to usec="0" sec="1444453867"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="9.39.120.214" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453458"/>
        <to usec="0" sec="1444453473"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.177.243.66" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453408"/>
        <to usec="0" sec="1444453419"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="132.158.66.200" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453592"/>
        <to usec="0" sec="1444453610"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="103.244.189.99" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453618"/>
        <to usec="0" sec="1444453633"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="94.110.81.121" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453261"/>
        <to usec="0" sec="1444453271"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="222.205.161.123" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453489"/>
        <to usec="0" sec="1444453491"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="218.202.164.185" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453924"/>
        <to usec="0" sec="1444453937"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.29.106.0" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453827"/>
        <to usec="0" sec="1444453835"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="134.16.3.89" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453884"/>
        <to usec="0" sec="1444453904"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="209.65.231.95" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453796"/>
        <to usec="0" sec="1444453805"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.67.4.242" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453344"/>
        <to usec="0" sec="1444453360"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.84.222.174" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453717"/>
        <to usec="0" sec="1444453728"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.34.96.246" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453887"/>
        <to usec="0" sec="1444453900"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="79.158.92.144" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453739"/>
        <to usec="0" sec="1444453751"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="135.82.154.239" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453428"/>
        <to usec="0" sec="1444453445"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.59.227.227" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453251"/>
        <to usec="0" sec="1444453278"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="218.202.120.248" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453997"/>
        <to usec="0" sec="1444454003"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.173.189.145" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453545"/>
        <to usec="0" sec="1444453558"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.68.197.9" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453921"/>
        <to usec="0" sec="1444453950"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="70.139.39.25" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453406"/>
        <to usec="0" sec="1444453425"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="72.136.96.75" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453824"/>
        <to usec="0" sec="1444453835"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="66.45.161.2" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453449"/>
        <to usec="0" sec="1444453452"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="135.80.217.213" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453511"/>
        <to usec="0" sec="1444453516"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="86.171.4.234" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453341"/>
        <to usec="0" sec="1444453352"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.106.120.15" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453435"/>
        <to usec="0" sec="1444453495"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="138.14.150.176" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453239"/>
        <to usec="0" sec="1444453260"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="92.252.102.22" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453668"/>
        <to usec="0" sec="1444453695"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="220.39.99.29" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453351"/>
        <to usec="0" sec="1444453367"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.54.211.37" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453873"/>
        <to usec="0" sec="1444453886"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.83.16.31" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453650"/>
        <to usec="0" sec="1444453679"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="135.254.50.53" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453320"/>
        <to usec="0" sec="1444453335"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="214.36.186.134" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453734"/>
        <to usec="0" sec="1444453747"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.173.107.248" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453212"/>
        <to usec="0" sec="1444453235"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="154.215.172.99" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453331"/>
        <to usec="0" sec="1444453349"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="135.113.134.173" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453934"/>
        <to usec="0" sec="1444453936"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="140.55.117.134" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453410"/>
        <to usec="0" sec="1444453426"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.64.41.44" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453920"/>
        <to usec="0" sec="1444453941"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="33.65.55.177" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453633"/>
        <to usec="0" sec="1444453648"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.44.190.202" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454020"/>
        <to usec="0" sec="1444454036"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="138.237.113.3" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453732"/>
        <to usec="0" sec="1444453737"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="192.102.58.111" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453442"/>
        <to usec="0" sec="1444453454"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="128.2.74.90" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453750"/>
        <to usec="0" sec="1444453761"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.40.77.70" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454070"/>
        <to usec="0" sec="1444454082"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="135.82.248.122" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453545"/>
        <to usec="0" sec="1444453557"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="104.224.61.246" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453263"/>
        <to usec="0" sec="1444453283"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.185.187.31" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453200"/>
        <to usec="0" sec="1444453208"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="103.234.232.87" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453995"/>
        <to usec="0" sec="1444454008"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="120.4.171.188" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453391"/>
        <to usec="0" sec="1444453413"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="99.100.235.3" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453888"/>
        <to usec="0" sec="1444453899"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.172.61.110" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453526"/>
        <to usec="0" sec="1444453540"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="209.110.20.244" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453212"/>
        <to usec="0" sec="1444453215"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.68.179.9" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453660"/>
        <to usec="0" sec="1444453678"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="134.210.87.166" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453589"/>
        <to usec="0" sec="1444453596"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.62.92.99" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453567"/>
        <to usec="0" sec="1444453582"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="205.79.48.133" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453907"/>
        <to usec="0" sec="1444453935"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="75.0.81.32" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454090"/>
        <to usec="0" sec="1444454101"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="79.174.2.137" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453984"/>
        <to usec="0" sec="1444453995"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="94.230.225.237" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454002"/>
        <to usec="0" sec="1444454023"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="136.216.42.65" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453544"/>
        <to usec="0" sec="1444453555"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="102.1.195.196" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453522"/>
        <to usec="0" sec="1444453541"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="128.44.233.251" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453645"/>
        <to usec="0" sec="1444453658"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="208.120.35.126" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453350"/>
        <to usec="0" sec="1444453373"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.148.169.70" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453638"/>
        <to usec="0" sec="1444453664"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="49.11.15.12" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453350"/>
        <to usec="0" sec="1444453365"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="12.146.191.83" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454091"/>
        <to usec="0" sec="1444454101"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="105.247.142.95" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453934"/>
        <to usec="0" sec="1444453958"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.181.234.41" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453878"/>
        <to usec="0" sec="1444453889"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.31.209.81" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454054"/>
        <to usec="0" sec="1444454055"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="12.93.175.14" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453332"/>
        <to usec="0" sec="1444453349"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.159.198.161" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453663"/>
        <to usec="0" sec="1444453678"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="87.178.73.179" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453682"/>
        <to usec="0" sec="1444453686"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.59.189.225" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454016"/>
        <to usec="0" sec="1444454028"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="9.48.183.107" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453340"/>
        <to usec="0" sec="1444453355"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="33.227.209.77" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453307"/>
        <to usec="0" sec="1444453320"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="136.112.202.168" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453268"/>
        <to usec="0" sec="1444453296"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.46.236.32" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453734"/>
        <to usec="0" sec="1444453760"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.173.179.218" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453575"/>
        <to usec="0" sec="1444453596"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="132.14.108.53" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453943"/>
        <to usec="0" sec="1444453953"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.101.154.192" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453580"/>
        <to usec="0" sec="1444453592"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="81.36.97.24" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453327"/>
        <to usec="0" sec="1444453340"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="30.237.66.215" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453213"/>
        <to usec="0" sec="1444453230"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="132.46.158.236" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454018"/>
        <to usec="0" sec="1444454028"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="84.181.109.122" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454023"/>
        <to usec="0" sec="1444454033"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="103.2.27.159" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453465"/>
        <to usec="0" sec="1444453471"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="120.5.190.2" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453877"/>
        <to usec="0" sec="1444453889"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="136.249.69.177" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454085"/>
        <to usec="0" sec="1444454099"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="120.138.37.89" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454095"/>
        <to usec="0" sec="1444454101"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="28.98.198.24" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453626"/>
        <to usec="0" sec="1444453629"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.172.63.76" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453465"/>
        <to usec="0" sec="1444453466"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="13.166.80.16" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453537"/>
        <to usec="0" sec="1444453551"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="196.114.74.148" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453358"/>
        <to usec="0" sec="1444453361"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="66.255.43.108" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453846"/>
        <to usec="0" sec="1444453868"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="132.108.246.181" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453977"/>
        <to usec="0" sec="1444453987"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.21.77.125" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453944"/>
        <to usec="0" sec="1444453968"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="9.37.194.242" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453582"/>
        <to usec="0" sec="1444453597"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="204.238.215.250" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453368"/>
        <to usec="0" sec="1444453370"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="128.236.108.221" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453998"/>
        <to usec="0" sec="1444454013"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.225.23.64" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453550"/>
        <to usec="0" sec="1444453577"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="139.97.167.77" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453831"/>
        <to usec="0" sec="1444453853"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="138.125.176.165" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453445"/>
        <to usec="0" sec="1444453467"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.28.165.58" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453428"/>
        <to usec="0" sec="1444453452"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.128.161.225" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453947"/>
        <to usec="0" sec="1444453959"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="143.139.231.92" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453515"/>
        <to usec="0" sec="1444453527"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="84.249.226.38" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453305"/>
        <to usec="0" sec="1444453320"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="138.196.253.184" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453486"/>
        <to usec="0" sec="1444453500"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.84.96.15" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453348"/>
        <to usec="0" sec="1444453365"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="94.107.31.227" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453889"/>
        <to usec="0" sec="1444454031"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.88.27.12" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453973"/>
        <to usec="0" sec="1444453988"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="140.1.207.96" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453451"/>
        <to usec="0" sec="1444453455"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="120.5.93.19" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453538"/>
        <to usec="0" sec="1444453550"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="220.137.35.91" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453600"/>
        <to usec="0" sec="1444453612"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.79.75.87" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453380"/>
        <to usec="0" sec="1444453394"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="152.149.151.7" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453716"/>
        <to usec="0" sec="1444453734"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.202.218.237" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453691"/>
        <to usec="0" sec="1444453704"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="84.217.86.73" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453592"/>
        <to usec="0" sec="1444453611"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.172.58.75" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453703"/>
        <to usec="0" sec="1444453707"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="204.93.203.80" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453658"/>
        <to usec="0" sec="1444453671"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.178.208.68" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453911"/>
        <to usec="0" sec="1444453926"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.238.239.90" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453821"/>
        <to usec="0" sec="1444453839"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="135.56.107.53" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453553"/>
        <to usec="0" sec="1444453568"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.82.223.210" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453730"/>
        <to usec="0" sec="1444453741"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="132.14.192.107" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453368"/>
        <to usec="0" sec="1444453380"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="84.207.53.148" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453309"/>
        <to usec="0" sec="1444453320"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="8.223.193.75" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453469"/>
        <to usec="0" sec="1444453488"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="54.82.68.70" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453750"/>
        <to usec="0" sec="1444453761"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="84.179.245.209" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453250"/>
        <to usec="0" sec="1444453280"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.74.65.9" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453760"/>
        <to usec="0" sec="1444453761"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="94.127.35.27" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453962"/>
        <to usec="0" sec="1444453977"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.56.244.137" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453937"/>
        <to usec="0" sec="1444453949"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="84.210.177.29" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453760"/>
        <to usec="0" sec="1444453816"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.181.210.227" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453301"/>
        <to usec="0" sec="1444453314"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.85.97.236" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453797"/>
        <to usec="0" sec="1444453808"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="137.146.114.188" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453839"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="84.168.165.215" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454091"/>
        <to usec="0" sec="1444454101"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="30.231.191.197" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454071"/>
        <to usec="0" sec="1444454097"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.161.65.250" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453477"/>
        <to usec="0" sec="1444453484"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="49.173.183.22" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453238"/>
        <to usec="0" sec="1444453257"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.81.13.171" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454038"/>
        <to usec="0" sec="1444454052"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.71.239.86" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453350"/>
        <to usec="0" sec="1444453382"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="146.38.168.181" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453247"/>
        <to usec="0" sec="1444453264"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="205.125.34.156" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453533"/>
        <to usec="0" sec="1444453545"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.27.185.66" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453403"/>
        <to usec="0" sec="1444453405"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="66.191.85.147" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453760"/>
        <to usec="0" sec="1444453774"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.164.188.110" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454018"/>
        <to usec="0" sec="1444454033"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.173.144.106" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453200"/>
        <to usec="0" sec="1444453213"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="204.228.195.64" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453267"/>
        <to usec="0" sec="1444453289"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="103.27.32.82" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453993"/>
        <to usec="0" sec="1444453995"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.151.191.207" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453443"/>
        <to usec="0" sec="1444453473"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="130.240.37.65" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453467"/>
        <to usec="0" sec="1444453743"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="64.119.35.80" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453587"/>
        <to usec="0" sec="1444453598"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="143.146.197.113" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453804"/>
        <to usec="0" sec="1444453816"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.164.63.131" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453803"/>
        <to usec="0" sec="1444453826"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="8.230.119.173" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453660"/>
        <to usec="0" sec="1444453671"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="147.194.24.199" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453821"/>
        <to usec="0" sec="1444453833"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="99.103.7.25" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453588"/>
        <to usec="0" sec="1444453605"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="204.78.167.70" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453286"/>
        <to usec="0" sec="1444453307"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.202.159.118" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444454084"/>
        <to usec="0" sec="1444454094"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="132.239.217.195"/>
        </slice>
        <from usec="0" sec="1444453398"/>
        <to usec="0" sec="1444453405"/>
    </anomaly>
    <anomaly type="notice" value="0.824574,2.346270,020,1 1 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="65.71.74.118"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453651"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="116.238.153.21"/>
        </slice>
        <from usec="0" sec="1444453200"/>
        <to usec="0" sec="1444453202"/>
    </anomaly>
    <anomaly type="notice" value="0.927436,2.345000,020,1 1 1 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="6.182.15.54"/>
        </slice>
        <from usec="0" sec="1444453875"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="65.83.129.124"/>
        </slice>
        <from usec="0" sec="1444453782"/>
        <to usec="0" sec="1444453786"/>
    </anomaly>
    <anomaly type="notice" value="0.927436,2.345000,020,1 1 1 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="205.25.226.65"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453651"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="13.131.161.253"/>
        </slice>
        <from usec="0" sec="1444453331"/>
        <to usec="0" sec="1444453333"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="129.53.17.135"/>
        </slice>
        <from usec="0" sec="1444453655"/>
        <to usec="0" sec="1444453657"/>
    </anomaly>
    <anomaly type="notice" value="0.824574,2.346270,020,1 1 0 0 0 0 1 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="114.21.209.253"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="68.181.171.211"/>
        </slice>
        <from usec="0" sec="1444453980"/>
        <to usec="0" sec="1444453987"/>
    </anomaly>
    <anomaly type="notice" value="0.927436,2.345000,020,1 1 1 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="136.93.80.103"/>
        </slice>
        <from usec="0" sec="1444453780"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="221.245.80.115"/>
        </slice>
        <from usec="0" sec="1444453219"/>
        <to usec="0" sec="1444453222"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="217.88.119.8"/>
        </slice>
        <from usec="0" sec="1444453400"/>
        <to usec="0" sec="1444453403"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="113.30.29.170"/>
        </slice>
        <from usec="0" sec="1444453525"/>
        <to usec="0" sec="1444453528"/>
    </anomaly>
    <anomaly type="notice" value="0.927436,2.345000,020,1 1 1 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="134.20.207.214"/>
        </slice>
        <from usec="0" sec="1444453875"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,011,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="222.11.53.70" src_port="1433" dst_port="6000"/>
            <filter dst_ip="12.105.252.42" src_port="1433" dst_port="6000"/>
        </slice>
        <from usec="0" sec="1444453200"/>
        <to usec="0" sec="1444454099"/>
    </anomaly>
    <anomaly type="notice" value="0.824574,2.346270,020,1 1 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="93.29.106.0"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453835"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="135.80.217.213"/>
        </slice>
        <from usec="0" sec="1444453513"/>
        <to usec="0" sec="1444453516"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="196.114.74.148"/>
        </slice>
        <from usec="0" sec="1444453358"/>
        <to usec="0" sec="1444453361"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="204.238.215.250"/>
        </slice>
        <from usec="0" sec="1444453369"/>
        <to usec="0" sec="1444453370"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="140.1.207.96"/>
        </slice>
        <from usec="0" sec="1444453451"/>
        <to usec="0" sec="1444453455"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="31.74.65.9"/>
        </slice>
        <from usec="0" sec="1444453760"/>
        <to usec="0" sec="1444453761"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="116.252.192.79"/>
        </slice>
        <from usec="0" sec="1444453232"/>
        <to usec="0" sec="1444453234"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="206.143.106.182"/>
        </slice>
        <from usec="0" sec="1444453664"/>
        <to usec="0" sec="1444453677"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,011,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="65.84.69.205" src_port="23"/>
        </slice>
        <from usec="0" sec="1444453740"/>
        <to usec="0" sec="1444453748"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,011,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="114.252.199.170" src_port="22"/>
        </slice>
        <from usec="0" sec="1444453462"/>
        <to usec="0" sec="1444453464"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="123.27.185.66"/>
        </slice>
        <from usec="0" sec="1444453403"/>
        <to usec="0" sec="1444453405"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="129.71.52.221"/>
        </slice>
        <from usec="0" sec="1444453405"/>
        <to usec="0" sec="1444453416"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="139.249.76.93"/>
        </slice>
        <from usec="0" sec="1444453248"/>
        <to usec="0" sec="1444453256"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="65.83.238.51"/>
        </slice>
        <from usec="0" sec="1444453693"/>
        <to usec="0" sec="1444453697"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="85.208.154.201"/>
        </slice>
        <from usec="0" sec="1444453596"/>
        <to usec="0" sec="1444453600"/>
    </anomaly>
    <anomaly type="notice" value="0.927436,2.345000,020,1 1 1 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="54.23.56.13"/>
        </slice>
        <from usec="0" sec="1444453875"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="0.824574,2.346270,020,1 1 0 0 0 0 1 0 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="57.162.47.50"/>
        </slice>
        <from usec="0" sec="1444453596"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="0.927436,2.345000,020,1 1 1 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="54.219.12.249"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="103.2.27.159"/>
        </slice>
        <from usec="0" sec="1444453466"/>
        <to usec="0" sec="1444453471"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="83.172.63.76"/>
        </slice>
        <from usec="0" sec="1444453465"/>
        <to usec="0" sec="1444453466"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="84.206.83.62"/>
        </slice>
        <from usec="0" sec="1444453863"/>
        <to usec="0" sec="1444453868"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="132.255.179.195"/>
        </slice>
        <from usec="0" sec="1444453403"/>
        <to usec="0" sec="1444453413"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="90.141.219.65"/>
        </slice>
        <from usec="0" sec="1444453971"/>
        <to usec="0" sec="1444453975"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="69.129.232.108"/>
        </slice>
        <from usec="0" sec="1444453472"/>
        <to usec="0" sec="1444453482"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="129.231.35.133"/>
        </slice>
        <from usec="0" sec="1444453421"/>
        <to usec="0" sec="1444453423"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="95.181.111.249"/>
        </slice>
        <from usec="0" sec="1444453748"/>
        <to usec="0" sec="1444453752"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="91.217.207.79"/>
        </slice>
        <from usec="0" sec="1444454074"/>
        <to usec="0" sec="1444454076"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="127.40.76.20"/>
        </slice>
        <from usec="0" sec="1444453781"/>
        <to usec="0" sec="1444453783"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="212.50.216.38"/>
        </slice>
        <from usec="0" sec="1444453932"/>
        <to usec="0" sec="1444453956"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="93.25.152.217"/>
        </slice>
        <from usec="0" sec="1444453949"/>
        <to usec="0" sec="1444453953"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="120.144.106.168"/>
        </slice>
        <from usec="0" sec="1444453496"/>
        <to usec="0" sec="1444453501"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="18.219.37.5"/>
        </slice>
        <from usec="0" sec="1444453575"/>
        <to usec="0" sec="1444453578"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="204.228.37.67"/>
        </slice>
        <from usec="0" sec="1444453202"/>
        <to usec="0" sec="1444453203"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="18.238.145.61"/>
        </slice>
        <from usec="0" sec="1444453307"/>
        <to usec="0" sec="1444453314"/>
    </anomaly>
    <anomaly type="notice" value="0.824574,2.346270,020,1 1 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="9.51.62.4"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453654"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="116.242.233.10"/>
        </slice>
        <from usec="0" sec="1444453963"/>
        <to usec="0" sec="1444453965"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="135.113.181.171"/>
        </slice>
        <from usec="0" sec="1444454073"/>
        <to usec="0" sec="1444454078"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="88.167.64.138"/>
        </slice>
        <from usec="0" sec="1444453765"/>
        <to usec="0" sec="1444453775"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="49.152.0.62"/>
        </slice>
        <from usec="0" sec="1444453521"/>
        <to usec="0" sec="1444453523"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="135.83.246.235"/>
        </slice>
        <from usec="0" sec="1444454052"/>
        <to usec="0" sec="1444454053"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="21.119.246.172"/>
        </slice>
        <from usec="0" sec="1444453482"/>
        <to usec="0" sec="1444453484"/>
    </anomaly>
    <anomaly type="notice" value="0.927436,2.345000,020,1 1 1 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="209.65.231.95"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="0.824574,2.346270,020,1 1 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="99.15.116.164"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="103.234.232.87"/>
        </slice>
        <from usec="0" sec="1444453992"/>
        <to usec="0" sec="1444454008"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="209.110.20.244"/>
        </slice>
        <from usec="0" sec="1444453212"/>
        <to usec="0" sec="1444453214"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="134.210.87.166"/>
        </slice>
        <from usec="0" sec="1444453589"/>
        <to usec="0" sec="1444453596"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="93.62.92.99"/>
        </slice>
        <from usec="0" sec="1444453567"/>
        <to usec="0" sec="1444453581"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="83.172.58.75"/>
        </slice>
        <from usec="0" sec="1444453703"/>
        <to usec="0" sec="1444453706"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="91.161.65.250"/>
        </slice>
        <from usec="0" sec="1444453477"/>
        <to usec="0" sec="1444453484"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="8.230.119.173"/>
        </slice>
        <from usec="0" sec="1444453660"/>
        <to usec="0" sec="1444453671"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="122.53.165.61"/>
        </slice>
        <from usec="0" sec="1444453519"/>
        <to usec="0" sec="1444453520"/>
    </anomaly>
    <anomaly type="notice" value="0.611759,2.322300,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="82.202.159.118"/>
        </slice>
        <from usec="0" sec="1444454084"/>
        <to usec="0" sec="1444454094"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="23.142.12.163" dst_port="23"/>
        </slice>
        <from usec="0" sec="1444453232"/>
        <to usec="0" sec="1444453237"/>
    </anomaly>
    <anomaly type="notice" value="0.440495,2.323580,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="170.142.62.123" dst_port="80"/>
        </slice>
        <from usec="0" sec="1444453228"/>
        <to usec="0" sec="1444454084"/>
    </anomaly>
    <anomaly type="notice" value="0.920682,2.408160,504,0 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="159.59.25.230" dst_ip="2.13.4.8" src_port="51862" dst_port="443"/>
        </slice>
        <from usec="0" sec="1444453207"/>
        <to usec="0" sec="1444453220"/>
    </anomaly>
    <anomaly type="notice" value="0.896848,2.428980,901,0 0 1 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="135.159.177.108" dst_ip="135.159.177.108" proto="icmp"/>
        </slice>
        <from usec="0" sec="1444453483"/>
        <to usec="0" sec="1444453492"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="30.91.100.137" dst_port="80"/>
        </slice>
        <from usec="0" sec="1444453200"/>
        <to usec="0" sec="1444453246"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="30.91.100.137" src_port="12200" dst_port="8118"/>
        </slice>
        <from usec="0" sec="1444453200"/>
        <to usec="0" sec="1444453246"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="30.91.100.137" dst_port="21320"/>
        </slice>
        <from usec="0" sec="1444453200"/>
        <to usec="0" sec="1444453246"/>
    </anomaly>
    <anomaly type="notice" value="0.927436,2.345000,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.182.219.181" src_port="21188" dst_port="21"/>
        </slice>
        <from usec="0" sec="1444453335"/>
        <to usec="0" sec="1444453858"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="106.111.213.244"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453651"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="206.218.38.118"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453651"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="207.76.245.170" dst_port="80"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453651"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="206.208.96.0"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453651"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="69.237.250.47"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453651"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="96.234.237.7" dst_ip="206.218.1.50" dst_port="53"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453651"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="206.218.1.52"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453651"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="69.237.250.43"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453651"/>
    </anomaly>
    <anomaly type="notice" value="0.797874,2.367630,020,1 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="99.8.239.242"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453651"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="185.246.116.147"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453651"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="207.76.251.133"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453651"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="216.115.163.34"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453651"/>
    </anomaly>
    <anomaly type="notice" value="0.797874,2.367630,020,1 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="82.164.204.127"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453651"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="129.53.17.135"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453651"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="185.246.177.166"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453651"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="185.246.117.215"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453651"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="64.202.149.254"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453651"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="185.246.177.212"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453651"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="141.133.57.114"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453651"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="206.208.209.114"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453651"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="206.52.102.241" src_port="80"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453651"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="185.246.178.150" src_port="53"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453651"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="173.88.130.181" src_port="53"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453651"/>
    </anomaly>
    <anomaly type="notice" value="0.927436,2.345000,503,1 1 1 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="207.76.251.147" dst_ip="198.87.182.1" src_port="80"/>
        </slice>
        <from usec="0" sec="1444453204"/>
        <to usec="0" sec="1444454094"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="159.59.132.147" src_port="53"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453651"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="185.246.176.0" dst_port="25996"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="173.88.130.191"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="170.142.20.221"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="0.797874,2.367630,503,1 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="126.113.112.9" dst_ip="206.52.102.241" src_port="80"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="170.148.145.151" src_port="443"/>
            <filter dst_ip="170.148.145.151" src_port="80"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="185.246.178.150" src_port="53"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="173.88.97.114" src_port="53"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="173.88.3.116" src_port="53"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="105.139.226.80" dst_ip="173.88.60.182" src_port="53"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,503,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="142.148.47.8" dst_ip="185.246.38.74" src_port="80"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="69.237.250.40"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="185.136.16.7"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="159.59.132.167" src_port="53"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="207.76.246.222"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="207.76.241.247"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="206.208.208.180" src_port="80"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="135.235.115.6"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="185.136.165.21" dst_port="54748"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="170.154.143.85" dst_port="50348"/>
        </slice>
        <from usec="0" sec="1444453380"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="0.797874,2.367630,503,1 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="206.208.211.142" src_port="80"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="98.105.21.132"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="0.797874,2.367630,504,1 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.230.138.54" dst_ip="206.208.208.174" src_port="443"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453987"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,504,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="170.148.144.92"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="185.246.116.240" dst_port="54770"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="170.154.143.61" dst_port="50356"/>
        </slice>
        <from usec="0" sec="1444453200"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="131.253.134.112"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="216.115.163.0"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="185.136.215.36" dst_port="54748"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="185.246.37.62" dst_port="54762"/>
        </slice>
        <from usec="0" sec="1444453380"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="170.148.89.167"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="198.8.25.122"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="185.136.164.169" dst_port="54748"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="185.136.164.185" dst_port="54756"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="185.246.117.174" dst_port="54770"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="207.76.242.206"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="207.76.244.147"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="101.7.27.186" src_port="12200" dst_port="80"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="207.76.250.178" dst_port="80"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="207.76.250.179" dst_port="80"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="207.76.245.170" dst_port="80"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="206.218.1.50" dst_port="53"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="207.76.243.206" dst_port="53"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="206.208.123.124" dst_port="53"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="207.76.243.212" dst_port="53"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="207.76.246.228" dst_port="53"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="207.76.243.208" dst_port="53"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="0.824574,2.346270,999,1 1 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="207.76.232.75" dst_port="53"/>
        </slice>
        <from usec="0" sec="1444453200"/>
        <to usec="0" sec="1444454077"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="185.246.193.61" dst_port="53"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="185.246.76.147" dst_port="53"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="206.208.97.202" dst_port="53"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="207.76.242.68" dst_port="53"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="185.246.177.175" dst_port="53"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="185.246.177.212" dst_port="53"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="206.208.209.127" dst_port="53"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453831"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="185.246.37.102" dst_port="54770"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="207.76.250.178" dst_port="80"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="185.246.178.150"/>
        </slice>
        <from usec="0" sec="1444453875"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="185.246.255.209"/>
        </slice>
        <from usec="0" sec="1444453875"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="180.67.170.45"/>
        </slice>
        <from usec="0" sec="1444453875"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="159.59.132.167" src_port="53"/>
        </slice>
        <from usec="0" sec="1444453875"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="80.36.225.219"/>
        </slice>
        <from usec="0" sec="1444453875"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="180.67.173.172"/>
        </slice>
        <from usec="0" sec="1444453875"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="207.76.243.212" src_port="53"/>
            <filter dst_ip="207.76.243.212" dst_port="53"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="207.76.243.210" dst_port="53"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="207.76.243.208" dst_port="53"/>
        </slice>
        <from usec="0" sec="1444453875"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="207.76.251.133"/>
        </slice>
        <from usec="0" sec="1444453875"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="131.253.134.121"/>
        </slice>
        <from usec="0" sec="1444453875"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,503,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="141.63.217.139" dst_ip="159.59.50.46" src_port="80"/>
        </slice>
        <from usec="0" sec="1444453875"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="131.253.134.104"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="216.115.163.57"/>
        </slice>
        <from usec="0" sec="1444453875"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="159.59.123.153" src_port="80"/>
        </slice>
        <from usec="0" sec="1444453875"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="185.136.215.52" dst_port="54756"/>
        </slice>
        <from usec="0" sec="1444453380"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="185.246.37.143" dst_port="54770"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="185.246.177.175" dst_port="53"/>
        </slice>
        <from usec="0" sec="1444453875"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="185.246.177.166" dst_port="53"/>
        </slice>
        <from usec="0" sec="1444453875"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="88.34.242.4"/>
        </slice>
        <from usec="0" sec="1444453875"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="207.76.242.178" dst_port="80"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="118.79.185.107"/>
        </slice>
        <from usec="0" sec="1444453875"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="170.154.140.66" dst_port="50348"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="207.76.246.97" dst_port="53"/>
        </slice>
        <from usec="0" sec="1444453785"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="170.154.140.28" dst_port="50356"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="69.82.98.227" dst_ip="207.76.255.119" dst_port="53"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="218.95.22.197"/>
        </slice>
        <from usec="0" sec="1444453875"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="159.59.37.131" src_port="80"/>
        </slice>
        <from usec="0" sec="1444453875"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="185.136.214.57" dst_port="54748"/>
        </slice>
        <from usec="0" sec="1444453200"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="185.246.177.212"/>
        </slice>
        <from usec="0" sec="1444453875"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,504,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="185.246.137.62"/>
        </slice>
        <from usec="0" sec="1444453875"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="185.246.36.207" dst_port="54762"/>
        </slice>
        <from usec="0" sec="1444453605"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="185.136.214.36" dst_port="54756"/>
        </slice>
        <from usec="0" sec="1444453380"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="1.053570,2.451910,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="206.208.209.127"/>
        </slice>
        <from usec="0" sec="1444453875"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="notice" value="1.488810,2.307490,504,1 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="206.208.117.58" dst_ip="215.216.145.8" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
