<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="54.32.59.134" dst_ip="163.44.227.166" src_port="80" dst_port="56290" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389696"/>
        <to usec="0" sec="1454389914"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="210.46.91.141" dst_ip="163.44.225.176" src_port="44882" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389314"/>
        <to usec="0" sec="1454389320"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="95.23.115.66" dst_ip="157.166.146.159" src_port="80" dst_port="50849" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389574"/>
        <to usec="0" sec="1454390101"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="103.55.136.50" dst_ip="131.230.165.69" src_port="443" dst_port="53043" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389924"/>
        <to usec="0" sec="1454389932"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="153.14.124.69" dst_ip="157.166.99.22" src_port="80" dst_port="42298" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389255"/>
        <to usec="0" sec="1454389256"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="103.148.55.9" dst_ip="203.81.128.234" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389929"/>
        <to usec="0" sec="1454389937"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="219.255.210.187" dst_ip="163.44.243.2" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389904"/>
        <to usec="0" sec="1454389906"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="203.122.87.130" dst_ip="157.166.14.208" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389544"/>
        <to usec="0" sec="1454389552"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.44.131.67" dst_ip="54.63.17.59" src_port="55599" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389394"/>
        <to usec="0" sec="1454389413"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="199.188.155.188" dst_ip="157.166.99.22" src_port="80" dst_port="45098" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389233"/>
        <to usec="0" sec="1454389235"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="175.180.92.118" dst_ip="202.34.56.9" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389642"/>
        <to usec="0" sec="1454389643"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="124.213.75.64" dst_ip="133.152.68.16" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389273"/>
        <to usec="0" sec="1454389912"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="31.242.248.240" dst_ip="202.34.56.9" src_port="443" dst_port="60918" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389617"/>
        <to usec="0" sec="1454389619"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.152.222.245" dst_ip="15.233.144.26" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389207"/>
        <to usec="0" sec="1454390004"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="120.156.105.70" dst_ip="133.152.209.154" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454390073"/>
        <to usec="0" sec="1454390074"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.44.239.183" dst_ip="124.230.112.6" src_port="1194" dst_port="61289" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389280"/>
        <to usec="0" sec="1454389568"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="164.84.130.251" dst_ip="131.230.120.44" src_port="47364" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389379"/>
        <to usec="0" sec="1454389381"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="52.148.87.136" dst_ip="157.166.52.182" src_port="80" dst_port="51524" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389424"/>
        <to usec="0" sec="1454389434"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="31.242.234.67" dst_ip="163.44.7.107" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389582"/>
        <to usec="0" sec="1454389593"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="188.123.137.67" dst_ip="157.166.99.68" src_port="80" dst_port="40422" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389777"/>
        <to usec="0" sec="1454389779"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="104.113.229.48" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389642"/>
        <to usec="0" sec="1454390088"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="124.213.75.79" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389666"/>
        <to usec="0" sec="1454389739"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="210.125.232.237" dst_ip="202.34.181.112" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389633"/>
        <to usec="0" sec="1454389634"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.43.65.82" src_port="19" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389238"/>
        <to usec="0" sec="1454390097"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="52.245.0.211" dst_ip="150.5.179.58" src_port="80" dst_port="46520" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389988"/>
        <to usec="0" sec="1454389989"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="94.242.174.208"/>
        </slice>
        <from usec="0" sec="1454389321"/>
        <to usec="0" sec="1454389335"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="194.253.99.107" dst_ip="157.166.132.231" src_port="4070" dst_port="49973" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389281"/>
        <to usec="0" sec="1454390090"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="173.61.159.41" dst_ip="202.34.181.70" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454389274"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="213.255.155.151" dst_ip="133.139.81.126" src_port="25" dst_port="39566" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389230"/>
        <to usec="0" sec="1454390076"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="119.163.139.25" dst_ip="203.81.129.75" src_port="80" dst_port="51061" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389618"/>
        <to usec="0" sec="1454389915"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="61.210.75.36" dst_ip="202.34.183.206" src_port="80" dst_port="59920" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389585"/>
        <to usec="0" sec="1454389587"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="54.63.137.89" dst_ip="133.139.125.230" src_port="443" dst_port="54111" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389854"/>
        <to usec="0" sec="1454389875"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="91.219.65.25" dst_ip="163.44.131.146" src_port="80" dst_port="49960" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454390000"/>
        <to usec="0" sec="1454390004"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.44.97.36" dst_ip="109.201.139.183" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389224"/>
        <to usec="0" sec="1454390045"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="8.46.195.92" dst_ip="150.5.76.121" src_port="80" dst_port="59881" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389247"/>
        <to usec="0" sec="1454389307"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.44.15.28" dst_ip="199.220.63.90" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389692"/>
        <to usec="0" sec="1454389735"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="104.78.254.161" dst_ip="163.44.8.32" src_port="80" dst_port="59322" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389366"/>
        <to usec="0" sec="1454389367"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="210.108.1.97" src_port="51004"/>
            <filter src_ip="210.108.1.97" src_port="58905"/>
        </slice>
        <from usec="0" sec="1454389504"/>
        <to usec="0" sec="1454389770"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="124.213.75.95" dst_ip="150.5.76.40" src_port="80" dst_port="53802" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389891"/>
        <to usec="0" sec="1454389900"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="202.145.8.224" dst_ip="202.43.85.95" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389280"/>
        <to usec="0" sec="1454389563"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.44.15.31" dst_ip="54.6.136.163" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454390019"/>
        <to usec="0" sec="1454390023"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="124.213.75.98" dst_ip="133.152.68.16" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389704"/>
        <to usec="0" sec="1454389706"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="103.136.153.41" dst_ip="150.5.49.17" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389735"/>
        <to usec="0" sec="1454389737"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="69.228.44.122" dst_ip="133.152.138.158" src_port="19397" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389339"/>
        <to usec="0" sec="1454389344"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="67.106.163.156"/>
        </slice>
        <from usec="0" sec="1454389483"/>
        <to usec="0" sec="1454389486"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="194.253.99.77" dst_ip="133.139.93.110" src_port="443" dst_port="42943" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389245"/>
        <to usec="0" sec="1454389247"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.152.210.195"/>
        </slice>
        <from usec="0" sec="1454389218"/>
        <to usec="0" sec="1454389558"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.44.7.29"/>
        </slice>
        <from usec="0" sec="1454390071"/>
        <to usec="0" sec="1454390072"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="157.166.161.119" dst_ip="17.151.230.168" src_port="50789" dst_port="993" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389350"/>
        <to usec="0" sec="1454389381"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="75.80.31.39" dst_ip="157.166.99.18" src_port="80" dst_port="54372" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389849"/>
        <to usec="0" sec="1454389851"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="124.213.75.104" dst_ip="150.5.49.73" src_port="80" dst_port="3273" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389228"/>
        <to usec="0" sec="1454389415"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.128.165.182" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389315"/>
        <to usec="0" sec="1454389323"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="157.166.250.186" dst_ip="113.108.247.254" src_port="63485" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389378"/>
        <to usec="0" sec="1454389551"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="41.94.68.227" dst_ip="133.132.74.20" src_port="3619" dst_port="33133" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389627"/>
        <to usec="0" sec="1454389628"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="220.74.80.17" dst_ip="163.44.129.15" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389214"/>
        <to usec="0" sec="1454389884"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="63.114.63.241"/>
        </slice>
        <from usec="0" sec="1454390024"/>
        <to usec="0" sec="1454390026"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.44.143.127" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389646"/>
        <to usec="0" sec="1454389809"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="216.30.252.46" dst_ip="133.139.77.176" src_port="41779" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389285"/>
        <to usec="0" sec="1454389289"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.44.130.236" dst_ip="202.153.254.158" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389462"/>
        <to usec="0" sec="1454389476"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="210.127.186.77" dst_ip="202.34.56.9" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389938"/>
        <to usec="0" sec="1454389940"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="108.88.18.235" dst_ip="202.34.62.135" src_port="54852" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389339"/>
        <to usec="0" sec="1454389340"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.44.168.241" dst_ip="50.255.212.66" src_port="443" dst_port="53371" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389867"/>
        <to usec="0" sec="1454389869"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="211.219.176.247" dst_ip="163.44.225.176" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389513"/>
        <to usec="0" sec="1454389516"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.44.8.12" dst_ip="199.80.25.121" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389427"/>
        <to usec="0" sec="1454389769"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="31.242.245.51" dst_ip="163.44.129.74" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389211"/>
        <to usec="0" sec="1454389215"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="92.216.114.209" dst_ip="133.152.231.254" src_port="34914" dst_port="13030" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389615"/>
        <to usec="0" sec="1454390100"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="124.213.75.112" dst_ip="150.5.88.13" src_port="80" dst_port="56067" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389208"/>
        <to usec="0" sec="1454389209"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.44.131.103"/>
        </slice>
        <from usec="0" sec="1454389253"/>
        <to usec="0" sec="1454389255"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="222.167.204.248" dst_ip="150.5.49.152" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454390031"/>
        <to usec="0" sec="1454390032"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="68.173.230.220" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389702"/>
        <to usec="0" sec="1454389704"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.213.207.69"/>
        </slice>
        <from usec="0" sec="1454389661"/>
        <to usec="0" sec="1454389664"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.44.10.199" dst_ip="54.63.135.108" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389407"/>
        <to usec="0" sec="1454389425"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.44.130.177" dst_ip="91.219.64.241" src_port="63964" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389708"/>
        <to usec="0" sec="1454389709"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="207.218.235.62" dst_ip="163.44.129.172" src_port="80" dst_port="56779" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389614"/>
        <to usec="0" sec="1454389615"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="103.59.227.54" dst_ip="202.34.181.41" src_port="443" dst_port="55330" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389879"/>
        <to usec="0" sec="1454389880"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.44.168.176"/>
        </slice>
        <from usec="0" sec="1454389637"/>
        <to usec="0" sec="1454389640"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.44.129.71" dst_ip="207.81.123.198" src_port="55187" dst_port="993" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389778"/>
        <to usec="0" sec="1454389792"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="203.81.132.186"/>
        </slice>
        <from usec="0" sec="1454389965"/>
        <to usec="0" sec="1454390096"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.44.80.185" dst_ip="204.8.64.75" src_port="56788" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389394"/>
        <to usec="0" sec="1454390047"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="104.126.111.180" dst_ip="163.44.8.85" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389642"/>
        <to usec="0" sec="1454389643"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="210.115.66.178" dst_ip="163.44.15.238" src_port="80" dst_port="64907" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454390018"/>
        <to usec="0" sec="1454390020"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="68.245.202.179"/>
        </slice>
        <from usec="0" sec="1454389533"/>
        <to usec="0" sec="1454389535"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="173.61.153.78" dst_ip="163.44.131.43" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389712"/>
        <to usec="0" sec="1454389719"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.152.138.175" dst_ip="150.1.163.74" src_port="80" dst_port="52433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389398"/>
        <to usec="0" sec="1454390061"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="66.244.101.47" dst_ip="133.139.23.70" src_port="1935" dst_port="33747" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389220"/>
        <to usec="0" sec="1454390050"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="204.102.225.83" dst_ip="131.230.240.186" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389204"/>
        <to usec="0" sec="1454390099"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.44.128.173" dst_ip="199.80.25.54" src_port="50900" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389923"/>
        <to usec="0" sec="1454389925"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="184.233.39.83" dst_ip="133.152.187.121" src_port="80" dst_port="49787" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389829"/>
        <to usec="0" sec="1454389830"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="117.88.74.166" dst_ip="163.44.129.15" src_port="7273" dst_port="7273" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389390"/>
        <to usec="0" sec="1454389742"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="202.34.183.165" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389358"/>
        <to usec="0" sec="1454389769"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.34.182.165" dst_ip="222.72.224.130" src_port="55862" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389540"/>
        <to usec="0" sec="1454389542"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.44.168.167"/>
        </slice>
        <from usec="0" sec="1454389764"/>
        <to usec="0" sec="1454389839"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.152.210.164" dst_ip="108.64.80.194" src_port="49372" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389860"/>
        <to usec="0" sec="1454389942"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="185.181.26.92" dst_ip="163.44.7.208" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389418"/>
        <to usec="0" sec="1454389447"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="46.137.170.35" dst_ip="157.166.86.33" src_port="443" dst_port="50033" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389390"/>
        <to usec="0" sec="1454389392"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="130.194.60.94" dst_ip="31.242.253.11" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389296"/>
        <to usec="0" sec="1454389885"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="91.253.78.154" dst_ip="163.44.97.81" src_port="80" dst_port="59384" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389347"/>
        <to usec="0" sec="1454389746"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="126.101.234.227" dst_ip="202.34.56.58" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389499"/>
        <to usec="0" sec="1454389502"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="203.122.86.226" dst_ip="150.5.49.161" src_port="80" dst_port="12793" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389380"/>
        <to usec="0" sec="1454390038"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="141.250.199.235" dst_ip="157.166.90.57" src_port="80" dst_port="58368" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454390036"/>
        <to usec="0" sec="1454390037"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.152.218.126" dst_ip="152.187.120.97" src_port="50462" dst_port="993" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389397"/>
        <to usec="0" sec="1454389399"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="104.78.254.231" dst_ip="163.44.15.31" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389579"/>
        <to usec="0" sec="1454389877"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.139.34.248" dst_ip="17.151.229.89" src_port="61714" dst_port="993" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389231"/>
        <to usec="0" sec="1454389833"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.152.68.21" dst_ip="81.225.243.198" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389385"/>
        <to usec="0" sec="1454390082"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.34.177.106" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389910"/>
        <to usec="0" sec="1454390076"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="222.192.154.132" dst_ip="150.5.252.239" src_port="443" dst_port="52874" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389214"/>
        <to usec="0" sec="1454389221"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="198.192.229.125" dst_ip="163.44.160.255" src_port="443" dst_port="60866" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389479"/>
        <to usec="0" sec="1454389481"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.44.99.98" dst_ip="54.63.53.204" src_port="60015" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389224"/>
        <to usec="0" sec="1454389688"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="198.192.229.109" dst_ip="163.44.22.157" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389524"/>
        <to usec="0" sec="1454389526"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="73.33.131.146" dst_ip="150.5.127.87" src_port="51622" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389394"/>
        <to usec="0" sec="1454389616"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="68.16.146.146" dst_ip="203.81.140.212" src_port="8769" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389428"/>
        <to usec="0" sec="1454389448"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.44.99.117" dst_ip="54.6.136.254" src_port="60009" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389556"/>
        <to usec="0" sec="1454389567"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.44.95.234" dst_ip="199.110.103.49" src_port="80" dst_port="32915" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389482"/>
        <to usec="0" sec="1454389483"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="202.175.31.154" dst_ip="202.34.56.9" src_port="80" dst_port="57686" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389548"/>
        <to usec="0" sec="1454389811"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="131.230.183.123" dst_ip="199.107.15.202" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389209"/>
        <to usec="0" sec="1454389534"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="80.54.133.153" dst_ip="163.44.128.170" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454390007"/>
        <to usec="0" sec="1454390009"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="157.166.107.7" dst_ip="31.242.246.136" src_port="53762" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389399"/>
        <to usec="0" sec="1454389718"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="96.158.104.2" dst_ip="133.139.216.174" src_port="80" dst_port="60000" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389709"/>
        <to usec="0" sec="1454389711"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.152.45.125" dst_ip="199.80.25.125" src_port="46828" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389640"/>
        <to usec="0" sec="1454389642"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.34.182.119"/>
        </slice>
        <from usec="0" sec="1454390096"/>
        <to usec="0" sec="1454390098"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="52.229.149.182" dst_ip="202.34.56.9" src_port="80" dst_port="34740" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389685"/>
        <to usec="0" sec="1454389686"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="77.137.169.185" dst_ip="150.5.55.141" src_port="11113" dst_port="61040" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389907"/>
        <to usec="0" sec="1454389908"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.166.99.66" dst_ip="125.61.197.126" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389287"/>
        <to usec="0" sec="1454389691"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="93.183.30.116" dst_ip="133.139.47.95" src_port="80" dst_port="2722" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389246"/>
        <to usec="0" sec="1454389491"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="173.61.156.177" dst_ip="163.44.10.67" src_port="443" dst_port="63400" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389915"/>
        <to usec="0" sec="1454389917"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="107.185.241.182" dst_ip="202.34.179.95" src_port="80" dst_port="50027" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389222"/>
        <to usec="0" sec="1454389224"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.42.190.119" dst_ip="163.44.31.145" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389925"/>
        <to usec="0" sec="1454389929"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="36.225.51.183" dst_ip="133.132.85.198" src_port="4890" dst_port="45644" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389867"/>
        <to usec="0" sec="1454389868"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.44.131.137" dst_ip="165.209.170.76" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389982"/>
        <to usec="0" sec="1454389983"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="61.210.81.138" dst_ip="163.44.128.5" src_port="80" dst_port="50235" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389207"/>
        <to usec="0" sec="1454389209"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.139.74.119" dst_ip="27.17.166.203" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389477"/>
        <to usec="0" sec="1454389769"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="206.67.140.72" dst_ip="202.34.183.41" src_port="5075" dst_port="62247" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389793"/>
        <to usec="0" sec="1454390100"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.152.44.188" dst_port="80"/>
        </slice>
        <from usec="0" sec="1454389277"/>
        <to usec="0" sec="1454389880"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.152.231.190"/>
        </slice>
        <from usec="0" sec="1454389524"/>
        <to usec="0" sec="1454389526"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="70.112.120.171" dst_ip="133.139.80.144" src_port="8489" dst_port="31825" proto="udp"/>
        </slice>
        <from usec="0" sec="1454390007"/>
        <to usec="0" sec="1454390009"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="91.163.39.149" dst_ip="157.166.94.33" src_port="80" dst_port="57650" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389642"/>
        <to usec="0" sec="1454389643"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="117.63.169.162" dst_ip="131.230.52.171" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389501"/>
        <to usec="0" sec="1454389866"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.132.72.94" dst_ip="195.42.250.37" src_port="34722" dst_port="2110" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389910"/>
        <to usec="0" sec="1454389911"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="183.79.245.70" dst_ip="202.34.186.219" src_port="80" dst_port="56764" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389249"/>
        <to usec="0" sec="1454389870"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="183.79.245.71" dst_ip="202.34.56.9" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454390098"/>
        <to usec="0" sec="1454390099"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="165.209.191.133" dst_ip="133.139.23.70" src_port="12340" dst_port="17849" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389223"/>
        <to usec="0" sec="1454390095"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="81.84.175.180" dst_ip="163.44.97.81" src_port="80" dst_port="59406" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389538"/>
        <to usec="0" sec="1454390050"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="123.225.0.110" dst_ip="150.5.255.117" src_port="80" dst_port="53959" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389962"/>
        <to usec="0" sec="1454389964"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.152.187.121"/>
        </slice>
        <from usec="0" sec="1454389829"/>
        <to usec="0" sec="1454389846"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="104.113.229.163" dst_ip="163.44.131.213" src_port="443" dst_port="51948" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389835"/>
        <to usec="0" sec="1454389836"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="126.135.220.130" dst_ip="203.81.134.15" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389680"/>
        <to usec="0" sec="1454389682"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.152.45.156" dst_ip="199.80.25.51" src_port="55769" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454390016"/>
        <to usec="0" sec="1454390026"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="204.142.123.174" dst_ip="163.44.11.107" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454390072"/>
        <to usec="0" sec="1454390096"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="125.29.59.116" dst_ip="150.5.49.129" src_port="80" dst_port="51326" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454390059"/>
        <to usec="0" sec="1454390060"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="98.44.148.174" dst_ip="133.139.195.15" src_port="4444" dst_port="53" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389582"/>
        <to usec="0" sec="1454390078"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="211.2.54.81" dst_ip="150.5.183.5" src_port="2474" dst_port="22075" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389762"/>
        <to usec="0" sec="1454390061"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="220.12.0.145" dst_ip="133.139.81.38" src_port="80" dst_port="59348" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389599"/>
        <to usec="0" sec="1454389824"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="183.50.243.144" dst_ip="150.5.49.191" src_port="80" dst_port="1928" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389353"/>
        <to usec="0" sec="1454389909"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="216.30.240.134" dst_ip="157.166.99.18" src_port="80" dst_port="37716" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389971"/>
        <to usec="0" sec="1454389972"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="61.210.81.203" dst_ip="202.34.56.9" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389416"/>
        <to usec="0" sec="1454389583"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.44.60.194" dst_ip="157.213.216.123" src_port="37719" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454390069"/>
        <to usec="0" sec="1454390072"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="54.63.127.201" dst_ip="163.44.97.33" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389482"/>
        <to usec="0" sec="1454389483"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.139.29.198" dst_ip="17.165.6.209" src_port="51896" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389563"/>
        <to usec="0" sec="1454389565"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.152.227.198" dst_ip="54.67.216.251" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389954"/>
        <to usec="0" sec="1454389978"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="193.123.1.195"/>
        </slice>
        <from usec="0" sec="1454389280"/>
        <to usec="0" sec="1454389952"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="88.198.77.204" dst_ip="150.5.50.215" src_port="80" dst_port="49631" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389420"/>
        <to usec="0" sec="1454389422"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="110.50.11.203" dst_ip="150.5.49.188" src_port="80" dst_port="56688" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389776"/>
        <to usec="0" sec="1454390054"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="91.163.32.52" dst_ip="163.44.116.45" src_port="80" dst_port="44563" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389921"/>
        <to usec="0" sec="1454389951"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="131.230.121.202" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389407"/>
        <to usec="0" sec="1454389415"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="77.156.179.196" dst_ip="163.44.97.7" src_port="182" dst_port="43018" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389212"/>
        <to usec="0" sec="1454389357"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.152.184.204" dst_ip="52.132.136.172" src_port="58157" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389551"/>
        <to usec="0" sec="1454389814"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="74.125.55.193" dst_ip="163.44.130.234" src_port="443" dst_port="56878" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454390004"/>
        <to usec="0" sec="1454390097"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="124.40.32.63"/>
        </slice>
        <from usec="0" sec="1454389364"/>
        <to usec="0" sec="1454389365"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="173.50.88.210" dst_ip="202.34.183.132" src_port="80" dst_port="34738" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389830"/>
        <to usec="0" sec="1454389936"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="107.171.224.212"/>
        </slice>
        <from usec="0" sec="1454389837"/>
        <to usec="0" sec="1454390054"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="89.49.234.45" dst_ip="202.34.182.32" src_port="80" dst_port="56147" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389300"/>
        <to usec="0" sec="1454389975"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="107.185.246.45" dst_ip="202.34.181.122" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389379"/>
        <to usec="0" sec="1454389399"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.44.128.36" dst_ip="54.63.138.243" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389643"/>
        <to usec="0" sec="1454390044"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.44.129.219" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389557"/>
        <to usec="0" sec="1454389559"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.152.45.217"/>
        </slice>
        <from usec="0" sec="1454389266"/>
        <to usec="0" sec="1454389268"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="121.249.198.38" dst_ip="163.44.131.50" src_port="80" dst_port="51490" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389616"/>
        <to usec="0" sec="1454389618"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.44.29.216" dst_ip="167.252.231.134" src_port="51616" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389497"/>
        <to usec="0" sec="1454389500"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="103.130.247.34" dst_ip="202.34.182.23" src_port="80" dst_port="59392" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454390015"/>
        <to usec="0" sec="1454390016"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.44.129.220" dst_ip="111.49.51.223" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389332"/>
        <to usec="0" sec="1454389566"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="88.214.63.35" dst_ip="192.88.30.50" src_port="80" dst_port="54969" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389312"/>
        <to usec="0" sec="1454389316"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.44.180.32"/>
        </slice>
        <from usec="0" sec="1454389206"/>
        <to usec="0" sec="1454389209"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="62.26.106.32" dst_ip="150.5.179.182" src_port="443" dst_port="58634" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389977"/>
        <to usec="0" sec="1454389979"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="202.34.182.32" dst_ip="89.49.234.45" src_port="56147" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389206"/>
        <to usec="0" sec="1454390069"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="49.62.153.255" dst_ip="202.34.56.9" src_port="993" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389929"/>
        <to usec="0" sec="1454389993"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="72.38.162.9" dst_ip="202.34.56.9" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389894"/>
        <to usec="0" sec="1454389897"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="210.74.74.20" dst_ip="163.44.175.213" src_port="80" dst_port="58790" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389913"/>
        <to usec="0" sec="1454389914"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="106.154.169.237" dst_ip="150.5.49.119" src_port="5114" dst_port="54919" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389865"/>
        <to usec="0" sec="1454390099"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="210.117.254.21" dst_ip="163.44.247.225" src_port="48056" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389855"/>
        <to usec="0" sec="1454389857"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="43.6.136.238" dst_ip="202.34.180.50" src_port="80" dst_port="57763" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389266"/>
        <to usec="0" sec="1454389268"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="183.79.84.16" dst_ip="163.44.8.12" src_port="993" dst_port="52745" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389420"/>
        <to usec="0" sec="1454389425"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="121.250.252.15" dst_ip="163.44.243.2" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389772"/>
        <to usec="0" sec="1454389774"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="202.34.174.250" dst_ip="31.242.245.15" src_port="59964" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389776"/>
        <to usec="0" sec="1454389777"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="124.148.4.7" dst_ip="163.44.232.151" src_port="80" dst_port="56598" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389419"/>
        <to usec="0" sec="1454389784"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="107.185.245.249" dst_ip="202.34.179.95" src_port="80" dst_port="49900" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389207"/>
        <to usec="0" sec="1454389212"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.152.231.254" dst_ip="92.216.114.209" src_port="13030" dst_port="34914" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389703"/>
        <to usec="0" sec="1454389707"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.34.174.254" dst_ip="31.242.245.15" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454390009"/>
        <to usec="0" sec="1454390070"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="163.44.128.48" dst_port="443"/>
            <filter dst_ip="199.80.25.54" dst_port="443"/>
        </slice>
        <from usec="0" sec="1454389293"/>
        <to usec="0" sec="1454390006"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="17.131.209.10" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389461"/>
        <to usec="0" sec="1454390062"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,504,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="31.242.253.62" dst_port="443"/>
        </slice>
        <from usec="0" sec="1454389206"/>
        <to usec="0" sec="1454390083"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="130.194.224.41" dst_port="25"/>
        </slice>
        <from usec="0" sec="1454389203"/>
        <to usec="0" sec="1454389553"/>
    </anomaly>
    <anomaly type="notice" value="0.617239,1.719120,503,1 1 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="163.44.8.85" dst_port="80"/>
            <filter src_ip="163.44.14.251" dst_ip="198.237.127.26"/>
            <filter src_ip="163.44.14.251" dst_port="80"/>
            <filter dst_ip="198.237.127.26" dst_port="80"/>
        </slice>
        <from usec="0" sec="1454389208"/>
        <to usec="0" sec="1454389765"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="91.219.65.25" dst_port="80"/>
        </slice>
        <from usec="0" sec="1454389756"/>
        <to usec="0" sec="1454390075"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="199.80.25.2" dst_ip="199.80.25.2" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389828"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="150.5.45.141" dst_ip="150.5.45.141" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389362"/>
        <to usec="0" sec="1454389944"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.44.168.241"/>
        </slice>
        <from usec="0" sec="1454389562"/>
        <to usec="0" sec="1454389564"/>
    </anomaly>
    <anomaly type="notice" value="0.577153,1.728400,503,1 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="31.242.245.51" dst_port="80"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454390058"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.44.47.32" dst_port="80"/>
        </slice>
        <from usec="0" sec="1454389283"/>
        <to usec="0" sec="1454390003"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="203.81.134.167"/>
        </slice>
        <from usec="0" sec="1454389413"/>
        <to usec="0" sec="1454389415"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="157.166.14.229" dst_ip="65.99.241.66" dst_port="80"/>
        </slice>
        <from usec="0" sec="1454389350"/>
        <to usec="0" sec="1454390035"/>
    </anomaly>
    <anomaly type="notice" value="0.577153,1.728400,503,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="124.148.24.4" src_port="80"/>
            <filter dst_ip="202.43.85.2" src_port="80"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454390069"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,504,1 1 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="133.139.152.66" dst_ip="113.108.246.220" dst_port="443"/>
            <filter src_ip="157.166.178.119" dst_ip="113.108.246.220" dst_port="443"/>
            <filter src_ip="133.139.101.73" dst_ip="113.108.246.220" dst_port="443"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454390086"/>
    </anomaly>
    <anomaly type="notice" value="0.739937,1.747200,504,1 1 1 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_port="443"/>
            <filter src_ip="163.44.129.46" src_port="47581"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389810"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="202.43.85.69" dst_port="80"/>
            <filter src_ip="110.70.3.147" dst_ip="202.43.85.69" dst_port="443"/>
        </slice>
        <from usec="0" sec="1454389326"/>
        <to usec="0" sec="1454389689"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="157.166.245.53" dst_ip="17.181.154.39" dst_port="993"/>
            <filter src_ip="133.139.28.253" dst_ip="17.181.154.39" dst_port="993"/>
        </slice>
        <from usec="0" sec="1454389282"/>
        <to usec="0" sec="1454390097"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.115.126.26" dst_ip="202.43.85.95" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389272"/>
        <to usec="0" sec="1454389290"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="203.81.138.242" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389539"/>
        <to usec="0" sec="1454389543"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="178.63.46.64" dst_ip="202.34.62.145" dst_port="80"/>
        </slice>
        <from usec="0" sec="1454389298"/>
        <to usec="0" sec="1454389624"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="31.242.253.52" dst_ip="202.43.116.13" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454390095"/>
        <to usec="0" sec="1454390096"/>
    </anomaly>
    <anomaly type="notice" value="0.577153,1.728400,503,1 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.152.86.162" dst_port="80"/>
            <filter src_ip="133.152.86.162" dst_port="443"/>
        </slice>
        <from usec="0" sec="1454389205"/>
        <to usec="0" sec="1454390018"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,503,1 1 1 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.44.128.121" src_port="80"/>
        </slice>
        <from usec="0" sec="1454389414"/>
        <to usec="0" sec="1454389454"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.152.123.23" dst_port="80"/>
        </slice>
        <from usec="0" sec="1454389242"/>
        <to usec="0" sec="1454390095"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.44.99.84" dst_ip="23.55.47.192" dst_port="80"/>
        </slice>
        <from usec="0" sec="1454389377"/>
        <to usec="0" sec="1454390052"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="204.207.202.54" dst_ip="204.207.202.54" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389461"/>
        <to usec="0" sec="1454389967"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="17.173.47.56" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389218"/>
        <to usec="0" sec="1454389241"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="207.81.123.198" dst_port="993"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389738"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="31.242.245.51" dst_ip="163.44.128.29" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454390024"/>
        <to usec="0" sec="1454390026"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="124.210.24.27" dst_ip="150.5.109.237" dst_port="993"/>
        </slice>
        <from usec="0" sec="1454389217"/>
        <to usec="0" sec="1454389848"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="124.213.75.80" dst_ip="133.152.68.16" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389635"/>
        <to usec="0" sec="1454390093"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="104.126.109.28" dst_ip="163.44.209.34" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389635"/>
        <to usec="0" sec="1454389637"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="180.57.89.30" dst_ip="163.44.24.232" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389497"/>
        <to usec="0" sec="1454389907"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="52.147.190.175" dst_ip="163.44.128.128" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389289"/>
        <to usec="0" sec="1454389291"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="160.238.129.88" dst_ip="163.44.8.112" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389380"/>
        <to usec="0" sec="1454389946"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="104.113.249.11"/>
        </slice>
        <from usec="0" sec="1454389879"/>
        <to usec="0" sec="1454389881"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="117.101.231.189" dst_ip="202.43.116.13" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389809"/>
        <to usec="0" sec="1454389811"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="217.7.87.185" dst_ip="203.81.136.116" src_port="3303" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389272"/>
        <to usec="0" sec="1454390098"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.166.233.47" dst_ip="17.151.30.145" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389294"/>
        <to usec="0" sec="1454389296"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.34.182.214" dst_ip="17.151.239.7" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389451"/>
        <to usec="0" sec="1454389453"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.139.83.151"/>
        </slice>
        <from usec="0" sec="1454389480"/>
        <to usec="0" sec="1454390001"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.166.45.73"/>
        </slice>
        <from usec="0" sec="1454389364"/>
        <to usec="0" sec="1454389368"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.139.33.25" dst_ip="17.151.231.10" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389329"/>
        <to usec="0" sec="1454390033"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.152.215.197"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454390100"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.139.35.118" dst_ip="17.167.252.109" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389664"/>
        <to usec="0" sec="1454389673"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.34.187.137" dst_ip="216.30.250.132" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389296"/>
        <to usec="0" sec="1454389299"/>
    </anomaly>
    <anomaly type="notice" value="0.617239,1.719120,504,1 1 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="163.44.129.231" dst_port="443"/>
            <filter dst_ip="204.207.202.42" dst_port="443"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454390028"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.152.145.105"/>
        </slice>
        <from usec="0" sec="1454389568"/>
        <to usec="0" sec="1454389570"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="130.194.232.14" dst_ip="17.151.237.16" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389647"/>
        <to usec="0" sec="1454389649"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.44.12.230"/>
        </slice>
        <from usec="0" sec="1454389394"/>
        <to usec="0" sec="1454390045"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="202.34.183.248"/>
        </slice>
        <from usec="0" sec="1454389942"/>
        <to usec="0" sec="1454389944"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.44.96.189" dst_ip="40.189.103.70" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389517"/>
        <to usec="0" sec="1454389532"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.34.178.213" dst_ip="123.214.172.97" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389328"/>
        <to usec="0" sec="1454389997"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="157.166.14.211" dst_ip="112.236.110.207" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389217"/>
        <to usec="0" sec="1454389603"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.44.129.81"/>
        </slice>
        <from usec="0" sec="1454389316"/>
        <to usec="0" sec="1454389318"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.44.130.167" dst_ip="125.35.54.218" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389575"/>
        <to usec="0" sec="1454389577"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.44.97.92" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389684"/>
        <to usec="0" sec="1454389986"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.152.207.24" dst_ip="17.167.252.44" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389778"/>
        <to usec="0" sec="1454389792"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.139.62.232" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389853"/>
        <to usec="0" sec="1454389957"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.44.8.103" dst_ip="104.42.84.174" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389647"/>
        <to usec="0" sec="1454389653"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.44.24.232" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389869"/>
        <to usec="0" sec="1454390000"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.81.136.116" dst_ip="217.7.87.185" dst_port="3303" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389255"/>
        <to usec="0" sec="1454390008"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.34.186.149"/>
        </slice>
        <from usec="0" sec="1454389759"/>
        <to usec="0" sec="1454389761"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.44.96.145"/>
        </slice>
        <from usec="0" sec="1454389446"/>
        <to usec="0" sec="1454389448"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,054,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.139.141.97" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389215"/>
        <to usec="0" sec="1454389840"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.44.128.121" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389223"/>
        <to usec="0" sec="1454389625"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="219.123.187.143" dst_ip="163.44.247.209" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389682"/>
        <to usec="0" sec="1454389684"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.44.131.139" dst_ip="17.46.49.68" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389657"/>
        <to usec="0" sec="1454389658"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="1.79.52.73"/>
        </slice>
        <from usec="0" sec="1454389721"/>
        <to usec="0" sec="1454389723"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="103.131.143.66"/>
        </slice>
        <from usec="0" sec="1454389339"/>
        <to usec="0" sec="1454389340"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="157.166.97.179" dst_ip="17.167.138.162" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389321"/>
        <to usec="0" sec="1454389322"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.135.176.105" dst_ip="202.43.85.28" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389547"/>
        <to usec="0" sec="1454389573"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="210.126.179.146" dst_ip="163.44.245.85" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389424"/>
        <to usec="0" sec="1454389458"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.81.150.109"/>
        </slice>
        <from usec="0" sec="1454389218"/>
        <to usec="0" sec="1454389439"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.44.31.145"/>
        </slice>
        <from usec="0" sec="1454389463"/>
        <to usec="0" sec="1454389513"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.152.221.160" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389550"/>
        <to usec="0" sec="1454389559"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.44.223.172" dst_ip="216.162.174.92" src_port="54737" dst_port="3690" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389650"/>
        <to usec="0" sec="1454389651"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,054,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.139.36.109"/>
        </slice>
        <from usec="0" sec="1454389371"/>
        <to usec="0" sec="1454389374"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.44.66.107"/>
        </slice>
        <from usec="0" sec="1454389597"/>
        <to usec="0" sec="1454390060"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.44.21.157"/>
        </slice>
        <from usec="0" sec="1454389272"/>
        <to usec="0" sec="1454389274"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="210.117.255.100"/>
        </slice>
        <from usec="0" sec="1454389377"/>
        <to usec="0" sec="1454389379"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.34.183.92" dst_ip="17.129.32.249" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389920"/>
        <to usec="0" sec="1454389922"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,502,1 0 0 0 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="211.59.74.207" dst_ip="202.34.58.10" dst_port="22" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454390041"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.200.54.57" dst_ip="203.81.135.62" dst_port="123" proto="udp"/>
        </slice>
        <from usec="0" sec="1454390098"/>
        <to usec="0" sec="1454390099"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="190.252.208.198"/>
        </slice>
        <from usec="0" sec="1454390008"/>
        <to usec="0" sec="1454390010"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="219.103.27.215"/>
        </slice>
        <from usec="0" sec="1454389388"/>
        <to usec="0" sec="1454389390"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.44.175.213" dst_port="80"/>
            <filter src_ip="163.44.175.213" dst_port="443"/>
        </slice>
        <from usec="0" sec="1454389478"/>
        <to usec="0" sec="1454390022"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.44.7.208" dst_ip="185.181.26.92" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389417"/>
        <to usec="0" sec="1454389420"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.152.45.219"/>
        </slice>
        <from usec="0" sec="1454389407"/>
        <to usec="0" sec="1454389409"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.44.62.34" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389696"/>
        <to usec="0" sec="1454389977"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.81.132.0" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389959"/>
        <to usec="0" sec="1454389969"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.34.166.24"/>
        </slice>
        <from usec="0" sec="1454389405"/>
        <to usec="0" sec="1454389407"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.54.31.24"/>
        </slice>
        <from usec="0" sec="1454389210"/>
        <to usec="0" sec="1454389952"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.44.128.24" dst_ip="50.27.80.32" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389399"/>
        <to usec="0" sec="1454389401"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="31.242.240.125" dst_port="443"/>
            <filter src_ip="157.166.101.14" dst_ip="31.242.248.240" dst_port="443"/>
        </slice>
        <from usec="0" sec="1454389922"/>
        <to usec="0" sec="1454389980"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="202.34.174.249"/>
        </slice>
        <from usec="0" sec="1454389591"/>
        <to usec="0" sec="1454389724"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="31.242.245.15" dst_ip="31.242.245.15" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389204"/>
        <to usec="0" sec="1454390070"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="131.230.191.251"/>
        </slice>
        <from usec="0" sec="1454389208"/>
        <to usec="0" sec="1454389574"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.44.245.85"/>
        </slice>
        <from usec="0" sec="1454389548"/>
        <to usec="0" sec="1454389580"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="68.0.189.98" dst_ip="163.44.245.86" dst_port="80"/>
        </slice>
        <from usec="0" sec="1454389378"/>
        <to usec="0" sec="1454389436"/>
    </anomaly>
    <anomaly type="notice" value="0.577153,1.728400,504,1 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.44.243.2" dst_port="443"/>
            <filter dst_ip="163.44.243.2" dst_port="80"/>
        </slice>
        <from usec="0" sec="1454389332"/>
        <to usec="0" sec="1454389603"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.158.40.21"/>
        </slice>
        <from usec="0" sec="1454389601"/>
        <to usec="0" sec="1454389603"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="157.166.129.14" dst_ip="17.51.205.205" dst_port="443"/>
        </slice>
        <from usec="0" sec="1454389297"/>
        <to usec="0" sec="1454390083"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="202.42.73.12" dst_ip="163.44.22.246" dst_port="80"/>
        </slice>
        <from usec="0" sec="1454389484"/>
        <to usec="0" sec="1454389973"/>
    </anomaly>
    <anomaly type="notice" value="0.577153,1.728400,504,1 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="198.192.229.109" dst_port="443"/>
        </slice>
        <from usec="0" sec="1454389283"/>
        <to usec="0" sec="1454390042"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.167.255.64"/>
        </slice>
        <from usec="0" sec="1454390007"/>
        <to usec="0" sec="1454390009"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.129.66.40"/>
        </slice>
        <from usec="0" sec="1454389938"/>
        <to usec="0" sec="1454389940"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="77.155.160.67" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389710"/>
        <to usec="0" sec="1454389722"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="179.159.33.200" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389272"/>
        <to usec="0" sec="1454389283"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.248.103.201" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389739"/>
        <to usec="0" sec="1454389762"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="139.177.249.5" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389673"/>
        <to usec="0" sec="1454389684"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="90.72.227.246" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389244"/>
        <to usec="0" sec="1454389255"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.137.88.56" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389424"/>
        <to usec="0" sec="1454389437"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.168.205.254" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389857"/>
        <to usec="0" sec="1454389876"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="151.57.87.149" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454390061"/>
        <to usec="0" sec="1454390066"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.169.1.100" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389457"/>
        <to usec="0" sec="1454389469"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.220.13.39" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389478"/>
        <to usec="0" sec="1454389481"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.230.19.155" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389706"/>
        <to usec="0" sec="1454389718"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.59.16.93" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389979"/>
        <to usec="0" sec="1454389989"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.66.64.243" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389979"/>
        <to usec="0" sec="1454389989"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.2.12.207" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454390090"/>
        <to usec="0" sec="1454390094"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="220.127.3.75" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389639"/>
        <to usec="0" sec="1454389652"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="212.99.41.105" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389777"/>
        <to usec="0" sec="1454389795"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="103.13.89.63" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389326"/>
        <to usec="0" sec="1454389332"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.240.58.77" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389615"/>
        <to usec="0" sec="1454389626"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.205.95.55" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389514"/>
        <to usec="0" sec="1454389518"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="103.37.91.78"/>
        </slice>
        <from usec="0" sec="1454389787"/>
        <to usec="0" sec="1454389790"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.162.60.65"/>
        </slice>
        <from usec="0" sec="1454389818"/>
        <to usec="0" sec="1454389841"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.241.97.55" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389373"/>
        <to usec="0" sec="1454389386"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="42.119.43.73" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454390091"/>
        <to usec="0" sec="1454390098"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="218.157.185.73" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389443"/>
        <to usec="0" sec="1454389455"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="111.155.174.195" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389467"/>
        <to usec="0" sec="1454389479"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="124.247.130.170"/>
        </slice>
        <from usec="0" sec="1454389367"/>
        <to usec="0" sec="1454389387"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.177.188.174" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389716"/>
        <to usec="0" sec="1454389722"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.6.229.81" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454390084"/>
        <to usec="0" sec="1454390095"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.29.45.208"/>
        </slice>
        <from usec="0" sec="1454389436"/>
        <to usec="0" sec="1454389447"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="81.25.93.84" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389712"/>
        <to usec="0" sec="1454389719"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="190.96.136.85" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454390005"/>
        <to usec="0" sec="1454390007"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.186.15.85" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389903"/>
        <to usec="0" sec="1454389920"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="125.243.226.174" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389459"/>
        <to usec="0" sec="1454389935"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.218.19.215" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454390086"/>
        <to usec="0" sec="1454390088"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="125.181.154.221" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454389202"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.163.35.94" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389739"/>
        <to usec="0" sec="1454389746"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="70.107.34.33" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389289"/>
        <to usec="0" sec="1454389307"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.86.160.139" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389445"/>
        <to usec="0" sec="1454389451"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="92.205.160.157" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389472"/>
        <to usec="0" sec="1454389485"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.190.148.149" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389776"/>
        <to usec="0" sec="1454389777"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="221.100.85.155" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389295"/>
        <to usec="0" sec="1454389297"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.97.230.132" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389960"/>
        <to usec="0" sec="1454389976"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="190.254.219.121" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389412"/>
        <to usec="0" sec="1454389419"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.78.2.244" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389309"/>
        <to usec="0" sec="1454389317"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="62.137.66.237" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389221"/>
        <to usec="0" sec="1454389227"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.147.31.107" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389381"/>
        <to usec="0" sec="1454389395"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.175.91.250" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454390094"/>
        <to usec="0" sec="1454390101"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="221.35.162.230" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389339"/>
        <to usec="0" sec="1454389349"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="218.254.214.154" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389550"/>
        <to usec="0" sec="1454389567"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="220.113.237.24" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389582"/>
        <to usec="0" sec="1454389587"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.193.144.155"/>
        </slice>
        <from usec="0" sec="1454389599"/>
        <to usec="0" sec="1454389621"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.199.245.100" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454390030"/>
        <to usec="0" sec="1454390043"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.117.64.29" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454390007"/>
        <to usec="0" sec="1454390013"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="60.94.96.99" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389393"/>
        <to usec="0" sec="1454389406"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.215.40.185" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389280"/>
        <to usec="0" sec="1454389301"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.103.129.119" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389653"/>
        <to usec="0" sec="1454389658"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.28.122.71" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389565"/>
        <to usec="0" sec="1454389578"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="171.236.3.121" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389383"/>
        <to usec="0" sec="1454389401"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.13.33.182" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389747"/>
        <to usec="0" sec="1454389754"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.231.43.149" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389281"/>
        <to usec="0" sec="1454389284"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="218.254.218.110" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389316"/>
        <to usec="0" sec="1454389323"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="120.130.205.170" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389745"/>
        <to usec="0" sec="1454389747"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.63.100.168" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454390098"/>
        <to usec="0" sec="1454390099"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.162.242.153"/>
        </slice>
        <from usec="0" sec="1454389756"/>
        <to usec="0" sec="1454389767"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="115.129.222.88" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389206"/>
        <to usec="0" sec="1454389216"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="87.129.154.92"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454389203"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.6.22.99" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389293"/>
        <to usec="0" sec="1454389302"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.222.39.148" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389319"/>
        <to usec="0" sec="1454389341"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.86.116.92" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389291"/>
        <to usec="0" sec="1454389300"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="76.158.254.96" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389781"/>
        <to usec="0" sec="1454389795"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="46.214.227.178" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389271"/>
        <to usec="0" sec="1454389292"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.11.8.97" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389474"/>
        <to usec="0" sec="1454389477"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="82.45.156.112" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389816"/>
        <to usec="0" sec="1454389820"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="62.137.73.183"/>
        </slice>
        <from usec="0" sec="1454389603"/>
        <to usec="0" sec="1454389609"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="186.252.87.147" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389859"/>
        <to usec="0" sec="1454389871"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="59.59.148.113" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389476"/>
        <to usec="0" sec="1454389503"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="103.37.90.68" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389894"/>
        <to usec="0" sec="1454389913"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.11.233.159" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389393"/>
        <to usec="0" sec="1454389399"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.163.37.200"/>
        </slice>
        <from usec="0" sec="1454389326"/>
        <to usec="0" sec="1454389337"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="106.177.214.54" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389735"/>
        <to usec="0" sec="1454389746"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.235.110.51" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389943"/>
        <to usec="0" sec="1454389954"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.44.130.51" dst_port="80"/>
        </slice>
        <from usec="0" sec="1454389642"/>
        <to usec="0" sec="1454389913"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="120.138.26.62" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389643"/>
        <to usec="0" sec="1454389652"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.200.118.48" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389362"/>
        <to usec="0" sec="1454389372"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="91.222.225.211" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389941"/>
        <to usec="0" sec="1454389950"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.127.93.45" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389313"/>
        <to usec="0" sec="1454389315"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="121.66.67.212" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389957"/>
        <to usec="0" sec="1454389964"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.128.134.45" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389375"/>
        <to usec="0" sec="1454389405"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="187.57.171.44" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389337"/>
        <to usec="0" sec="1454389345"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="5.8.115.36" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389558"/>
        <to usec="0" sec="1454389568"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.113.106.39" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389399"/>
        <to usec="0" sec="1454389412"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.140.39.39" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389576"/>
        <to usec="0" sec="1454389586"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="111.95.87.35" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454390097"/>
        <to usec="0" sec="1454390101"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.114.194.34"/>
        </slice>
        <from usec="0" sec="1454389516"/>
        <to usec="0" sec="1454389518"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.128.95.35" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389779"/>
        <to usec="0" sec="1454389808"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="212.34.228.35" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389358"/>
        <to usec="0" sec="1454389386"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.163.13.229" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389408"/>
        <to usec="0" sec="1454389419"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="189.166.184.248" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454390091"/>
        <to usec="0" sec="1454390099"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="27.167.207.251" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389395"/>
        <to usec="0" sec="1454389404"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="1.161.136.7" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389685"/>
        <to usec="0" sec="1454389690"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="152.243.108.250" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389207"/>
        <to usec="0" sec="1454389231"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="120.209.176.236" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389903"/>
        <to usec="0" sec="1454389917"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="152.243.127.25" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389922"/>
        <to usec="0" sec="1454389926"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="203.192.115.229" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389401"/>
        <to usec="0" sec="1454389404"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.209.93.250" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389703"/>
        <to usec="0" sec="1454389724"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="208.164.185.251" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389415"/>
        <to usec="0" sec="1454389420"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.34.204.29" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389417"/>
        <to usec="0" sec="1454389421"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="23.43.104.30" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389246"/>
        <to usec="0" sec="1454389250"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.71.141.255" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454390077"/>
        <to usec="0" sec="1454390098"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="202.34.56.209"/>
        </slice>
        <from usec="0" sec="1454389427"/>
        <to usec="0" sec="1454389429"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,011,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="178.30.127.165" src_port="23"/>
        </slice>
        <from usec="0" sec="1454389238"/>
        <to usec="0" sec="1454389250"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="1.79.115.88"/>
        </slice>
        <from usec="0" sec="1454389271"/>
        <to usec="0" sec="1454389273"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.44.31.51"/>
        </slice>
        <from usec="0" sec="1454390022"/>
        <to usec="0" sec="1454390023"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.44.128.180" dst_ip="54.78.167.236" src_port="50316" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389496"/>
        <to usec="0" sec="1454389498"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="133.139.127.194"/>
        </slice>
        <from usec="0" sec="1454389421"/>
        <to usec="0" sec="1454389423"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.129.32.252"/>
        </slice>
        <from usec="0" sec="1454390016"/>
        <to usec="0" sec="1454390019"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.152.44.62"/>
        </slice>
        <from usec="0" sec="1454389393"/>
        <to usec="0" sec="1454389395"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.152.44.49"/>
        </slice>
        <from usec="0" sec="1454389666"/>
        <to usec="0" sec="1454389668"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.166.178.209"/>
        </slice>
        <from usec="0" sec="1454389643"/>
        <to usec="0" sec="1454389645"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.44.14.152"/>
        </slice>
        <from usec="0" sec="1454389976"/>
        <to usec="0" sec="1454389978"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.219.31.70"/>
        </slice>
        <from usec="0" sec="1454389985"/>
        <to usec="0" sec="1454389993"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="101.177.252.205"/>
        </slice>
        <from usec="0" sec="1454389462"/>
        <to usec="0" sec="1454389464"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.44.22.219"/>
        </slice>
        <from usec="0" sec="1454389958"/>
        <to usec="0" sec="1454389960"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.139.175.36"/>
        </slice>
        <from usec="0" sec="1454389626"/>
        <to usec="0" sec="1454389628"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="5.118.128.94"/>
        </slice>
        <from usec="0" sec="1454389480"/>
        <to usec="0" sec="1454389494"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.166.138.141"/>
        </slice>
        <from usec="0" sec="1454389238"/>
        <to usec="0" sec="1454389240"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.44.28.242"/>
        </slice>
        <from usec="0" sec="1454389645"/>
        <to usec="0" sec="1454389647"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.152.135.19"/>
        </slice>
        <from usec="0" sec="1454390027"/>
        <to usec="0" sec="1454390029"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="109.59.220.144"/>
        </slice>
        <from usec="0" sec="1454389934"/>
        <to usec="0" sec="1454389935"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.34.174.138"/>
        </slice>
        <from usec="0" sec="1454389755"/>
        <to usec="0" sec="1454389757"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.152.189.175"/>
        </slice>
        <from usec="0" sec="1454389224"/>
        <to usec="0" sec="1454389226"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.130.9.175"/>
        </slice>
        <from usec="0" sec="1454389354"/>
        <to usec="0" sec="1454389356"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.153.195.79"/>
        </slice>
        <from usec="0" sec="1454389806"/>
        <to usec="0" sec="1454389808"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.81.132.186"/>
        </slice>
        <from usec="0" sec="1454390073"/>
        <to usec="0" sec="1454390075"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="17.167.137.88"/>
        </slice>
        <from usec="0" sec="1454390052"/>
        <to usec="0" sec="1454390054"/>
    </anomaly>
    <anomaly type="notice" value="0.439343,1.737770,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="202.42.113.122"/>
        </slice>
        <from usec="0" sec="1454389643"/>
        <to usec="0" sec="1454389645"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="185.128.38.255" dst_ip="131.230.165.44" src_port="80"/>
        </slice>
        <from usec="0" sec="1454389824"/>
        <to usec="0" sec="1454389828"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.139.101.73" dst_ip="113.108.246.220" dst_port="443"/>
        </slice>
        <from usec="0" sec="1454389203"/>
        <to usec="0" sec="1454390098"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.9.19.54" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389554"/>
        <to usec="0" sec="1454389565"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,504,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="31.242.253.52" dst_ip="202.154.146.118" src_port="443"/>
        </slice>
        <from usec="0" sec="1454389282"/>
        <to usec="0" sec="1454390101"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,503,1 1 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="173.17.214.247" dst_ip="157.166.99.74" src_port="80" dst_port="58522"/>
        </slice>
        <from usec="0" sec="1454389928"/>
        <to usec="0" sec="1454389929"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="202.43.103.197" dst_ip="87.233.57.58" src_port="39908" dst_port="80"/>
        </slice>
        <from usec="0" sec="1454389269"/>
        <to usec="0" sec="1454389274"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,503,1 1 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="72.38.162.182" dst_ip="202.34.59.211" src_port="80" dst_port="49798"/>
        </slice>
        <from usec="0" sec="1454389944"/>
        <to usec="0" sec="1454389945"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.44.130.202" dst_ip="65.99.241.18" src_port="55420" dst_port="80"/>
        </slice>
        <from usec="0" sec="1454389493"/>
        <to usec="0" sec="1454389526"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="61.210.109.73" dst_ip="163.44.204.72" src_port="80" dst_port="59217"/>
        </slice>
        <from usec="0" sec="1454389851"/>
        <to usec="0" sec="1454389858"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="205.86.24.57" dst_ip="202.34.177.106" src_port="80" dst_port="50459"/>
        </slice>
        <from usec="0" sec="1454389245"/>
        <to usec="0" sec="1454389616"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="1.193.45.47" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389237"/>
        <to usec="0" sec="1454389244"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.167.43.81" dst_ip="202.43.85.31" src_port="19285" dst_port="80"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389202"/>
    </anomaly>
    <anomaly type="notice" value="0.617239,1.719120,504,1 1 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.139.29.199" dst_ip="31.242.250.55"/>
            <filter src_ip="133.139.29.199" dst_port="443"/>
            <filter dst_ip="31.242.250.54" dst_port="443"/>
            <filter dst_ip="31.242.250.55" dst_port="443"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454390064"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="95.23.113.103" dst_ip="157.166.146.159" src_port="80" dst_port="50961"/>
        </slice>
        <from usec="0" sec="1454389301"/>
        <to usec="0" sec="1454390027"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="198.237.127.26" dst_ip="163.44.14.251" src_port="80" dst_port="54747"/>
        </slice>
        <from usec="0" sec="1454389446"/>
        <to usec="0" sec="1454389765"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,503,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="208.22.156.217" dst_ip="133.139.145.5" src_port="80"/>
        </slice>
        <from usec="0" sec="1454389666"/>
        <to usec="0" sec="1454389669"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="60.29.180.166" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389479"/>
        <to usec="0" sec="1454389489"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,504,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.152.45.24" dst_port="443"/>
        </slice>
        <from usec="0" sec="1454389212"/>
        <to usec="0" sec="1454389690"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="124.122.217.35" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389289"/>
        <to usec="0" sec="1454389300"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="152.243.72.35" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389729"/>
        <to usec="0" sec="1454389755"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.123.160.222" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390065"/>
        <to usec="0" sec="1454390088"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="61.143.246.32" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389278"/>
        <to usec="0" sec="1454389289"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="82.164.227.66" dst_ip="157.166.99.18" src_port="80" dst_port="45276"/>
        </slice>
        <from usec="0" sec="1454389858"/>
        <to usec="0" sec="1454389859"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,901,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="104.113.243.181" dst_ip="202.34.178.100" src_port="80"/>
            <filter src_ip="104.113.243.181" dst_ip="163.44.232.153" src_port="80"/>
        </slice>
        <from usec="0" sec="1454389727"/>
        <to usec="0" sec="1454389733"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.139.144.34" dst_ip="31.242.250.21" dst_port="80"/>
        </slice>
        <from usec="0" sec="1454389599"/>
        <to usec="0" sec="1454389703"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="114.209.108.122" dst_ip="133.132.79.200" src_port="1670" dst_port="50241"/>
        </slice>
        <from usec="0" sec="1454390085"/>
        <to usec="0" sec="1454390087"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="163.44.245.126" dst_ip="157.223.58.204" src_port="3210" dst_port="7747"/>
        </slice>
        <from usec="0" sec="1454390037"/>
        <to usec="0" sec="1454390040"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="103.133.86.143" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389769"/>
        <to usec="0" sec="1454389779"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.190.215.137" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389568"/>
        <to usec="0" sec="1454389580"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,504,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="46.56.30.218" dst_ip="163.44.7.208" src_port="443"/>
        </slice>
        <from usec="0" sec="1454389438"/>
        <to usec="0" sec="1454389481"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="69.57.12.198" dst_ip="150.5.76.61" src_port="80" dst_port="40913"/>
        </slice>
        <from usec="0" sec="1454389890"/>
        <to usec="0" sec="1454389892"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.45.48.85" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389351"/>
        <to usec="0" sec="1454389363"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.236.163.197" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389413"/>
        <to usec="0" sec="1454389424"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="69.238.178.217" dst_ip="163.44.123.31" src_port="80" dst_port="57747"/>
        </slice>
        <from usec="0" sec="1454389511"/>
        <to usec="0" sec="1454389876"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="42.90.134.237" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389874"/>
        <to usec="0" sec="1454389885"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.150.65.110" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389312"/>
        <to usec="0" sec="1454389323"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="123.51.88.78" dst_ip="133.132.72.198" src_port="7253" dst_port="52299"/>
        </slice>
        <from usec="0" sec="1454389477"/>
        <to usec="0" sec="1454389479"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="94.69.195.241" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389686"/>
        <to usec="0" sec="1454389699"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.139.55.204" dst_ip="31.242.253.62" src_port="62653" dst_port="443"/>
        </slice>
        <from usec="0" sec="1454389651"/>
        <to usec="0" sec="1454389653"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="83.244.217.116" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389268"/>
        <to usec="0" sec="1454389281"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="209.159.93.105" dst_ip="202.34.179.95" src_port="80" dst_port="50077"/>
        </slice>
        <from usec="0" sec="1454389224"/>
        <to usec="0" sec="1454389234"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="52.151.145.86" dst_ip="157.166.96.184" src_port="49704" dst_port="80"/>
            <filter src_ip="52.151.145.86" dst_ip="157.166.96.184" src_port="48603" dst_port="80"/>
            <filter src_ip="52.151.145.86" dst_ip="163.44.92.175" src_port="50781" dst_port="80"/>
        </slice>
        <from usec="0" sec="1454389347"/>
        <to usec="0" sec="1454389388"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="203.81.134.166" dst_ip="191.203.135.180" src_port="80" dst_port="5955"/>
        </slice>
        <from usec="0" sec="1454390088"/>
        <to usec="0" sec="1454390097"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,503,1 1 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="69.57.12.216" dst_ip="202.34.56.9" src_port="80" dst_port="50350"/>
        </slice>
        <from usec="0" sec="1454389409"/>
        <to usec="0" sec="1454389414"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.162.211.224" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389370"/>
        <to usec="0" sec="1454389380"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,503,1 1 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="163.44.129.74" dst_ip="31.242.245.51" dst_port="80"/>
            <filter src_ip="202.34.182.121" dst_ip="31.242.245.51" dst_port="80"/>
            <filter src_ip="202.34.181.60" dst_ip="31.242.245.51" dst_port="80"/>
        </slice>
        <from usec="0" sec="1454389210"/>
        <to usec="0" sec="1454389899"/>
    </anomaly>
    <anomaly type="notice" value="0.599620,1.765550,999,1 0 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="109.57.109.55" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389298"/>
        <to usec="0" sec="1454389302"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.139.16.205" dst_ip="31.242.245.1" src_port="49691" dst_port="443"/>
        </slice>
        <from usec="0" sec="1454389228"/>
        <to usec="0" sec="1454389570"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.156.11.52" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389423"/>
        <to usec="0" sec="1454389434"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="202.34.181.60" dst_ip="31.242.245.51" src_port="59615" dst_port="80"/>
            <filter src_ip="202.34.181.60" dst_ip="31.242.245.51" src_port="59601" dst_port="80"/>
            <filter src_ip="202.34.181.60" dst_ip="31.242.245.51" src_port="59600" dst_port="80"/>
            <filter src_ip="202.34.181.60" dst_ip="31.242.245.51" src_port="59599" dst_port="80"/>
            <filter src_ip="202.34.181.60" dst_ip="31.242.245.51" src_port="59598" dst_port="80"/>
        </slice>
        <from usec="0" sec="1454389224"/>
        <to usec="0" sec="1454389362"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="198.247.250.201" dst_ip="133.139.242.237" src_port="80"/>
        </slice>
        <from usec="0" sec="1454389442"/>
        <to usec="0" sec="1454389443"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="37.72.139.56" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389694"/>
        <to usec="0" sec="1454390037"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.154.44.52" dst_ip="202.34.56.209" dst_port="443"/>
        </slice>
        <from usec="0" sec="1454389841"/>
        <to usec="0" sec="1454389872"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="183.79.146.180" dst_ip="202.34.161.123" src_port="24335" dst_port="25"/>
            <filter src_ip="124.137.49.18" dst_ip="202.34.161.123" src_port="56092" dst_port="25"/>
            <filter src_ip="202.140.157.101" dst_ip="202.34.161.123" src_port="53" dst_port="43998"/>
            <filter src_ip="192.67.108.80" dst_ip="202.34.161.123" src_port="53" dst_port="13362"/>
            <filter src_ip="203.247.100.241" dst_ip="202.34.161.123" src_port="53" dst_port="57840"/>
        </slice>
        <from usec="0" sec="1454389662"/>
        <to usec="0" sec="1454389688"/>
    </anomaly>
    <anomaly type="notice" value="0.617239,1.719120,503,1 1 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="157.166.46.186" dst_ip="113.108.246.221" dst_port="80"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454390092"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="204.71.172.59" dst_ip="150.5.132.233" src_port="443" dst_port="53555"/>
        </slice>
        <from usec="0" sec="1454390093"/>
        <to usec="0" sec="1454390099"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="157.166.112.199" dst_ip="31.242.253.62" src_port="60694" dst_port="443"/>
        </slice>
        <from usec="0" sec="1454389405"/>
        <to usec="0" sec="1454389434"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="216.45.35.60" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389205"/>
        <to usec="0" sec="1454389215"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="217.103.150.205" dst_ip="133.152.116.158" src_port="443" dst_port="53097"/>
        </slice>
        <from usec="0" sec="1454389482"/>
        <to usec="0" sec="1454389863"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="42.216.182.213" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389226"/>
        <to usec="0" sec="1454389235"/>
    </anomaly>
    <anomaly type="notice" value="0.739937,1.747200,999,1 1 1 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.41.1.46" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389950"/>
        <to usec="0" sec="1454389963"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,504,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="60.255.180.84" dst_ip="203.81.137.119" dst_port="443"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454390089"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.4.151.43" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389829"/>
        <to usec="0" sec="1454389837"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.44.97.81" dst_ip="81.84.175.180" src_port="59406" dst_port="80"/>
            <filter src_ip="163.44.97.81" dst_ip="91.253.78.154" src_port="59384" dst_port="80"/>
            <filter src_ip="163.44.97.81" dst_ip="188.126.47.67" src_port="59393" dst_port="80"/>
            <filter src_ip="163.44.97.81" dst_ip="91.219.66.195" src_port="60919" dst_port="80"/>
            <filter src_ip="163.44.97.81" dst_ip="91.219.66.199" src_port="60939" dst_port="80"/>
        </slice>
        <from usec="0" sec="1454389202"/>
        <to usec="0" sec="1454390086"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.29.219.88" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389525"/>
        <to usec="0" sec="1454389537"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.164.92.166" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389233"/>
        <to usec="0" sec="1454389243"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,504,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.44.5.38" dst_ip="31.242.245.1" src_port="53913" dst_port="443"/>
        </slice>
        <from usec="0" sec="1454389811"/>
        <to usec="0" sec="1454389919"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="39.4.198.228" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389388"/>
        <to usec="0" sec="1454389400"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.29.90.152" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389441"/>
        <to usec="0" sec="1454389453"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="81.26.98.147" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389402"/>
        <to usec="0" sec="1454389412"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="72.38.162.237" dst_ip="202.34.56.9" src_port="1935" dst_port="50331"/>
        </slice>
        <from usec="0" sec="1454389679"/>
        <to usec="0" sec="1454389976"/>
    </anomaly>
    <anomaly type="notice" value="0.617239,1.719120,503,1 1 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.139.245.27" dst_ip="17.142.97.150" src_port="80" dst_port="37128"/>
            <filter src_ip="133.139.245.27" dst_ip="17.142.97.150" src_port="80" dst_port="36544"/>
            <filter src_ip="133.139.245.27" dst_ip="17.142.96.137" src_port="80" dst_port="52031"/>
            <filter src_ip="133.139.245.27" dst_ip="17.142.97.171" src_port="80" dst_port="53977"/>
        </slice>
        <from usec="0" sec="1454389213"/>
        <to usec="0" sec="1454389476"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.50.152.26" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389782"/>
        <to usec="0" sec="1454389794"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.44.8.108" dst_ip="54.63.110.155" dst_port="443"/>
            <filter src_ip="163.44.8.108" dst_ip="52.132.198.170" dst_port="443"/>
        </slice>
        <from usec="0" sec="1454389211"/>
        <to usec="0" sec="1454389329"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="27.127.150.151" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389385"/>
        <to usec="0" sec="1454389395"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="139.231.79.110" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389830"/>
        <to usec="0" sec="1454389839"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="202.43.85.121" src_port="25"/>
        </slice>
        <from usec="0" sec="1454389315"/>
        <to usec="0" sec="1454389834"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="202.34.183.132" dst_ip="173.50.88.210" src_port="34724" dst_port="80"/>
        </slice>
        <from usec="0" sec="1454389477"/>
        <to usec="0" sec="1454390042"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="213.151.153.101" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389667"/>
        <to usec="0" sec="1454389676"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,503,1 1 1 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="210.112.231.129" dst_ip="133.139.178.122" src_port="80" dst_port="49376"/>
        </slice>
        <from usec="0" sec="1454389810"/>
        <to usec="0" sec="1454389811"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="186.181.213.126" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389291"/>
        <to usec="0" sec="1454389303"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.36.11.71" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390007"/>
        <to usec="0" sec="1454390045"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.180.186.79" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389385"/>
        <to usec="0" sec="1454389396"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.41.98.131" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389660"/>
        <to usec="0" sec="1454389672"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="118.166.96.123" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389529"/>
        <to usec="0" sec="1454389541"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.20.146.70" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389342"/>
        <to usec="0" sec="1454389365"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="186.177.162.65" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389452"/>
        <to usec="0" sec="1454389464"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.152.222.123" dst_ip="118.15.132.88" src_port="9909" dst_port="9909"/>
            <filter src_ip="133.152.222.123" dst_ip="24.15.237.191" src_port="9909" dst_port="9909"/>
            <filter src_ip="133.152.222.123" dst_ip="111.68.59.112" src_port="9909" dst_port="9909"/>
            <filter src_ip="133.152.222.123" dst_ip="99.248.239.43" src_port="9909" dst_port="9909"/>
            <filter src_ip="133.152.222.123" dst_ip="60.129.14.69" src_port="9909" dst_port="9909"/>
        </slice>
        <from usec="0" sec="1454389430"/>
        <to usec="0" sec="1454389861"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.82.173.132" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389764"/>
        <to usec="0" sec="1454389775"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="182.56.58.178" dst_ip="163.44.129.15" src_port="5820" dst_port="7273"/>
        </slice>
        <from usec="0" sec="1454389686"/>
        <to usec="0" sec="1454390099"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.44.160.176" dst_ip="165.209.170.77" src_port="42330" dst_port="80"/>
        </slice>
        <from usec="0" sec="1454389947"/>
        <to usec="0" sec="1454390087"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="58.153.154.172" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389869"/>
        <to usec="0" sec="1454389880"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="61.210.81.147" dst_ip="163.44.223.227" src_port="80"/>
        </slice>
        <from usec="0" sec="1454389250"/>
        <to usec="0" sec="1454389257"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="61.196.22.80" dst_ip="163.44.128.106" src_port="46105" dst_port="39318"/>
        </slice>
        <from usec="0" sec="1454389250"/>
        <to usec="0" sec="1454389261"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="77.172.143.152" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389484"/>
        <to usec="0" sec="1454389496"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.152.222.102" src_port="33617"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389958"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.133.226.101" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389905"/>
        <to usec="0" sec="1454389915"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="140.171.253.132" dst_ip="163.44.130.167" src_port="80"/>
        </slice>
        <from usec="0" sec="1454389347"/>
        <to usec="0" sec="1454389356"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.235.127.164" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389782"/>
        <to usec="0" sec="1454389792"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.44.130.101" dst_ip="66.220.96.75" src_port="50101" dst_port="443"/>
            <filter src_ip="163.44.130.101" dst_ip="131.244.185.62" src_port="50125" dst_port="80"/>
        </slice>
        <from usec="0" sec="1454389209"/>
        <to usec="0" sec="1454389211"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.54.41.173" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389962"/>
        <to usec="0" sec="1454389973"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="103.130.246.66" dst_ip="131.230.27.161" src_port="80" dst_port="61975"/>
        </slice>
        <from usec="0" sec="1454389244"/>
        <to usec="0" sec="1454389247"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="74.32.66.65" dst_ip="133.139.67.13" src_port="80"/>
        </slice>
        <from usec="0" sec="1454389261"/>
        <to usec="0" sec="1454389271"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="74.125.211.150" dst_ip="150.5.39.209" src_port="443" dst_port="52546"/>
        </slice>
        <from usec="0" sec="1454389416"/>
        <to usec="0" sec="1454389417"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="222.132.243.169" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389896"/>
        <to usec="0" sec="1454389906"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="181.35.54.70" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389206"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,504,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="104.113.247.187" dst_ip="163.44.130.185" src_port="443"/>
        </slice>
        <from usec="0" sec="1454389793"/>
        <to usec="0" sec="1454390050"/>
    </anomaly>
    <anomaly type="notice" value="0.617239,1.719120,503,1 1 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="220.170.31.149" dst_ip="202.34.161.80" dst_port="80"/>
        </slice>
        <from usec="0" sec="1454389228"/>
        <to usec="0" sec="1454389749"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.44.129.190" dst_ip="52.255.37.210" src_port="39097" dst_port="443"/>
            <filter src_ip="163.44.129.190" dst_ip="52.255.37.210" src_port="39094" dst_port="443"/>
            <filter src_ip="163.44.129.190" dst_ip="52.255.37.210" src_port="39089" dst_port="443"/>
        </slice>
        <from usec="0" sec="1454389601"/>
        <to usec="0" sec="1454389666"/>
    </anomaly>
    <anomaly type="notice" value="0.628439,1.763900,504,0 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.55.47.196" dst_ip="157.166.131.138" src_port="443" dst_port="57399" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389909"/>
        <to usec="0" sec="1454389911"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="60.142.212.54" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390044"/>
        <to usec="0" sec="1454390055"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="17.220.198.50" dst_ip="202.43.85.2" src_port="80" dst_port="51897"/>
        </slice>
        <from usec="0" sec="1454390055"/>
        <to usec="0" sec="1454390063"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="108.154.219.51" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389228"/>
        <to usec="0" sec="1454389239"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="180.190.169.193" dst_ip="133.152.222.158" src_port="16434" dst_port="62439"/>
        </slice>
        <from usec="0" sec="1454389875"/>
        <to usec="0" sec="1454389877"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="17.220.198.42" dst_ip="202.34.181.112" src_port="80" dst_port="63417"/>
        </slice>
        <from usec="0" sec="1454389500"/>
        <to usec="0" sec="1454389837"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.152.116.43" dst_ip="149.82.99.141" dst_port="80"/>
        </slice>
        <from usec="0" sec="1454389308"/>
        <to usec="0" sec="1454389343"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.48.61.210" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389836"/>
        <to usec="0" sec="1454389847"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.34.183.41" src_port="43611"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389987"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,504,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.44.116.36" dst_port="443"/>
        </slice>
        <from usec="0" sec="1454389317"/>
        <to usec="0" sec="1454390062"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.56.151.35" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389312"/>
        <to usec="0" sec="1454389324"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.44.130.16" dst_ip="134.86.141.72" src_port="47930" dst_port="443"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454390085"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.90.69.229" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389258"/>
        <to usec="0" sec="1454389271"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.139.77.237" dst_ip="17.158.7.225" src_port="35086" dst_port="25"/>
        </slice>
        <from usec="0" sec="1454389621"/>
        <to usec="0" sec="1454389629"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="93.109.135.233" dst_ip="133.139.133.17" src_port="443"/>
        </slice>
        <from usec="0" sec="1454389957"/>
        <to usec="0" sec="1454389958"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.44.47.11" dst_ip="199.80.25.74" src_port="60095" dst_port="443"/>
            <filter src_ip="163.44.47.11" dst_ip="199.80.25.74" src_port="60094" dst_port="443"/>
            <filter src_ip="163.44.47.11" dst_ip="199.80.25.74" src_port="60093" dst_port="443"/>
        </slice>
        <from usec="0" sec="1454389401"/>
        <to usec="0" sec="1454389406"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.81.132.13" dst_ip="192.97.192.131" src_port="37292" dst_port="443"/>
        </slice>
        <from usec="0" sec="1454389218"/>
        <to usec="0" sec="1454389644"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="61.153.207.227" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389948"/>
        <to usec="0" sec="1454389957"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="133.132.88.243" dst_ip="173.136.255.41" src_port="40972" dst_port="6355"/>
        </slice>
        <from usec="0" sec="1454389212"/>
        <to usec="0" sec="1454389215"/>
    </anomaly>
    <anomaly type="notice" value="0.599620,1.765550,503,1 0 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="104.78.248.15" dst_ip="202.34.183.220" src_port="80" dst_port="64076"/>
        </slice>
        <from usec="0" sec="1454389499"/>
        <to usec="0" sec="1454389508"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.140.24.235" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389259"/>
        <to usec="0" sec="1454389271"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.44.209.21" dst_ip="199.80.25.2" src_port="51531" dst_port="443"/>
            <filter src_ip="163.44.209.21" dst_ip="199.80.25.2" src_port="51530" dst_port="443"/>
            <filter src_ip="163.44.209.21" dst_ip="199.80.25.2" src_port="51529" dst_port="443"/>
            <filter src_ip="163.44.209.21" dst_ip="199.80.25.2" src_port="51528" dst_port="443"/>
        </slice>
        <from usec="0" sec="1454389203"/>
        <to usec="0" sec="1454389880"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="202.226.189.229" dst_ip="202.43.65.140" src_port="80" dst_port="53646"/>
        </slice>
        <from usec="0" sec="1454389902"/>
        <to usec="0" sec="1454389907"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.58.201.250" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389277"/>
        <to usec="0" sec="1454389288"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.104.228.3" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389238"/>
        <to usec="0" sec="1454389269"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="68.245.79.28" dst_ip="202.43.85.2" src_port="80"/>
        </slice>
        <from usec="0" sec="1454389414"/>
        <to usec="0" sec="1454389416"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="220.127.128.252" dst_port="53413"/>
            <filter src_ip="220.127.128.252" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389260"/>
        <to usec="0" sec="1454390098"/>
    </anomaly>
    <anomaly type="notice" value="0.628439,1.763900,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="150.5.45.141" dst_ip="150.5.45.141" proto="tcp"/>
        </slice>
        <from usec="0" sec="1454389362"/>
        <to usec="0" sec="1454389944"/>
    </anomaly>
    <anomaly type="notice" value="0.617239,1.719120,504,1 1 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="157.166.14.207" dst_port="443"/>
            <filter src_ip="133.139.16.184" dst_ip="31.242.253.11" dst_port="443"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454390100"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="1.79.106.69" dst_ip="202.43.85.189" src_port="27794" dst_port="443"/>
        </slice>
        <from usec="0" sec="1454389585"/>
        <to usec="0" sec="1454389587"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="203.81.138.47" dst_ip="199.120.210.108" dst_port="53"/>
            <filter src_ip="203.81.138.248" dst_ip="199.120.210.108" dst_port="53"/>
            <filter src_ip="203.81.138.246" dst_ip="199.120.210.108" dst_port="53"/>
            <filter src_ip="203.81.138.242" dst_ip="199.120.210.108" dst_port="53"/>
            <filter dst_ip="199.120.210.108" src_port="53" dst_port="53"/>
        </slice>
        <from usec="0" sec="1454389534"/>
        <to usec="0" sec="1454389539"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,503,1 1 1 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="182.187.70.222" src_port="80"/>
            <filter src_ip="202.42.227.61" src_port="80"/>
        </slice>
        <from usec="0" sec="1454389794"/>
        <to usec="0" sec="1454390047"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="202.34.181.122" dst_ip="107.185.246.45" dst_port="80"/>
        </slice>
        <from usec="0" sec="1454389344"/>
        <to usec="0" sec="1454390060"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="74.138.174.250" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389937"/>
        <to usec="0" sec="1454389955"/>
    </anomaly>
    <anomaly type="notice" value="0.617239,1.719120,503,1 1 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.152.45.14" dst_ip="85.97.230.255" dst_port="80"/>
        </slice>
        <from usec="0" sec="1454389230"/>
        <to usec="0" sec="1454389289"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="124.213.87.175" dst_ip="131.230.120.79" dst_port="25"/>
        </slice>
        <from usec="0" sec="1454389922"/>
        <to usec="0" sec="1454389927"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.244.152.210" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389879"/>
        <to usec="0" sec="1454389881"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="42.210.175.22" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390000"/>
        <to usec="0" sec="1454390011"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="60.129.77.41" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389582"/>
        <to usec="0" sec="1454389593"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.125.245.151" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389456"/>
        <to usec="0" sec="1454389468"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.0.146.151" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389250"/>
        <to usec="0" sec="1454389260"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="219.138.210.167" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390025"/>
        <to usec="0" sec="1454390027"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="159.158.156.93" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389708"/>
        <to usec="0" sec="1454389719"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="117.195.72.226" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389809"/>
        <to usec="0" sec="1454389821"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="101.226.194.184" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389208"/>
        <to usec="0" sec="1454389220"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.234.249.87" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389379"/>
        <to usec="0" sec="1454389387"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="118.173.137.109" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389294"/>
        <to usec="0" sec="1454389317"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.98.22.200" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389368"/>
        <to usec="0" sec="1454389378"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="222.204.88.61" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389248"/>
        <to usec="0" sec="1454389259"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.69.114.164" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389875"/>
        <to usec="0" sec="1454389887"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="89.216.124.167" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389774"/>
        <to usec="0" sec="1454389785"/>
    </anomaly>
    <anomaly type="notice" value="0.706843,1.756320,999,1 0 1 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="110.35.156.136" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389225"/>
        <to usec="0" sec="1454389237"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.231.180.7" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389876"/>
        <to usec="0" sec="1454389887"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="60.156.160.210" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389379"/>
        <to usec="0" sec="1454389389"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.191.55.137" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389637"/>
        <to usec="0" sec="1454389648"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="192.183.164.125" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389211"/>
        <to usec="0" sec="1454389222"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="110.23.40.195" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389927"/>
        <to usec="0" sec="1454389937"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="1.198.48.252" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389844"/>
        <to usec="0" sec="1454389851"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="133.152.99.54" dst_ip="192.73.173.97" dst_port="53"/>
        </slice>
        <from usec="0" sec="1454389345"/>
        <to usec="0" sec="1454389346"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.180.129.74" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389889"/>
        <to usec="0" sec="1454389900"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="31.73.113.61" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389346"/>
        <to usec="0" sec="1454389356"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.209.164.180" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389454"/>
        <to usec="0" sec="1454389462"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="89.242.188.183" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390021"/>
        <to usec="0" sec="1454390044"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="49.122.253.58" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389313"/>
        <to usec="0" sec="1454389322"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.152.2.214" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389699"/>
        <to usec="0" sec="1454389701"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="178.141.168.213" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390084"/>
        <to usec="0" sec="1454390097"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.233.57.46" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389345"/>
        <to usec="0" sec="1454389355"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="89.243.22.164" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389917"/>
        <to usec="0" sec="1454389930"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.161.96.217" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389556"/>
        <to usec="0" sec="1454389567"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.192.24.90" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389203"/>
        <to usec="0" sec="1454389210"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="87.129.18.90" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389875"/>
        <to usec="0" sec="1454389892"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.194.242.164" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389489"/>
        <to usec="0" sec="1454389492"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="124.157.16.91" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390035"/>
        <to usec="0" sec="1454390038"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.176.219.101" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389939"/>
        <to usec="0" sec="1454389945"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="5.116.107.109" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389437"/>
        <to usec="0" sec="1454389449"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="218.246.194.244" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390024"/>
        <to usec="0" sec="1454390033"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.56.111.10" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389839"/>
        <to usec="0" sec="1454389841"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="188.50.14.130" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389218"/>
        <to usec="0" sec="1454389234"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="154.176.87.30" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389917"/>
        <to usec="0" sec="1454389929"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="190.73.37.110" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389354"/>
        <to usec="0" sec="1454389366"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.161.82.143" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389914"/>
        <to usec="0" sec="1454389925"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="37.5.39.20" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389303"/>
        <to usec="0" sec="1454389315"/>
    </anomaly>
    <anomaly type="notice" value="0.617239,1.719120,503,1 1 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.44.7.109" dst_ip="130.232.205.63" dst_port="80"/>
        </slice>
        <from usec="0" sec="1454389794"/>
        <to usec="0" sec="1454390022"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="49.0.181.148" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389245"/>
        <to usec="0" sec="1454389256"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.136.53.104" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389675"/>
        <to usec="0" sec="1454389686"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.8.152.130" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389834"/>
        <to usec="0" sec="1454389845"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="79.89.56.131" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389332"/>
        <to usec="0" sec="1454389340"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="89.55.39.67" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389402"/>
        <to usec="0" sec="1454389412"/>
    </anomaly>
    <anomaly type="notice" value="0.739937,1.747200,999,1 1 1 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="42.57.212.120" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389311"/>
        <to usec="0" sec="1454389323"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="202.43.114.121" dst_ip="40.172.66.185" src_port="500" dst_port="500"/>
            <filter src_ip="202.43.114.121" dst_ip="40.172.66.185"/>
        </slice>
        <from usec="0" sec="1454389529"/>
        <to usec="0" sec="1454390059"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.163.35.139" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390084"/>
        <to usec="0" sec="1454390088"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.125.62.67" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389896"/>
        <to usec="0" sec="1454389908"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.5.20.144" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389268"/>
        <to usec="0" sec="1454389282"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.234.234.100" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389962"/>
        <to usec="0" sec="1454389974"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="110.1.204.92" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389956"/>
        <to usec="0" sec="1454389967"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.127.85.158" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389798"/>
        <to usec="0" sec="1454389809"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="181.32.68.97" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389803"/>
        <to usec="0" sec="1454389815"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.165.205.172" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389221"/>
        <to usec="0" sec="1454389229"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.9.13.163" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389242"/>
        <to usec="0" sec="1454389249"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="178.183.89.137" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389277"/>
        <to usec="0" sec="1454389287"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="75.83.64.111" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389994"/>
        <to usec="0" sec="1454390005"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="220.125.174.103" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389850"/>
        <to usec="0" sec="1454389861"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="77.205.190.92" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389976"/>
        <to usec="0" sec="1454389988"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.220.219.129" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389301"/>
        <to usec="0" sec="1454389312"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="200.105.202.48" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389356"/>
        <to usec="0" sec="1454389367"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.231.229.58" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389807"/>
        <to usec="0" sec="1454389818"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.30.112.201" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389810"/>
        <to usec="0" sec="1454389821"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="218.38.40.201" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389928"/>
        <to usec="0" sec="1454389939"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="79.188.30.47" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389282"/>
        <to usec="0" sec="1454389293"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="79.74.26.40" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389646"/>
        <to usec="0" sec="1454389658"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.44.73.220" dst_ip="54.52.32.169" dst_port="443"/>
        </slice>
        <from usec="0" sec="1454389699"/>
        <to usec="0" sec="1454389701"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.247.163.32" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390036"/>
        <to usec="0" sec="1454390039"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="117.220.245.232" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389979"/>
        <to usec="0" sec="1454389988"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="117.5.96.30" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389942"/>
        <to usec="0" sec="1454389954"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.191.123.234" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389860"/>
        <to usec="0" sec="1454389871"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.62.235.246" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390078"/>
        <to usec="0" sec="1454390089"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="116.192.185.246" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389402"/>
        <to usec="0" sec="1454389413"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="80.211.94.8" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389216"/>
        <to usec="0" sec="1454389226"/>
    </anomaly>
    <anomaly type="notice" value="0.628439,1.763900,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="202.34.56.26" dst_ip="202.34.56.26" dst_port="123" proto="udp"/>
        </slice>
        <from usec="0" sec="1454389215"/>
        <to usec="0" sec="1454389483"/>
    </anomaly>
    <anomaly type="notice" value="0.599620,1.765550,999,1 0 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="115.1.174.224" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390020"/>
        <to usec="0" sec="1454390031"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.248.12.52" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389407"/>
        <to usec="0" sec="1454389415"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="155.130.176.44" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389549"/>
        <to usec="0" sec="1454389560"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="62.37.21.124" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389325"/>
        <to usec="0" sec="1454389339"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="41.0.178.137" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389829"/>
        <to usec="0" sec="1454389841"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="1.28.52.199" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389671"/>
        <to usec="0" sec="1454389682"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="61.238.8.133" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390084"/>
        <to usec="0" sec="1454390095"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="5.147.145.72" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389740"/>
        <to usec="0" sec="1454389749"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="181.162.63.76" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389414"/>
        <to usec="0" sec="1454389426"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.243.252.199" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389604"/>
        <to usec="0" sec="1454389617"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="92.157.201.74" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389894"/>
        <to usec="0" sec="1454389904"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.3.25.114" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390087"/>
        <to usec="0" sec="1454390097"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="118.173.133.194" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389528"/>
        <to usec="0" sec="1454389553"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="1.11.181.12" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389737"/>
        <to usec="0" sec="1454389747"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="92.234.170.196" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389570"/>
        <to usec="0" sec="1454389573"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.247.85.52" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390003"/>
        <to usec="0" sec="1454390014"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.183.155.124" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389742"/>
        <to usec="0" sec="1454389754"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="46.48.25.66" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389486"/>
        <to usec="0" sec="1454389494"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.148.140.246" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389644"/>
        <to usec="0" sec="1454389656"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="49.143.90.14" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389726"/>
        <to usec="0" sec="1454389736"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="82.49.218.198" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389841"/>
        <to usec="0" sec="1454389853"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="118.171.66.191" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389973"/>
        <to usec="0" sec="1454389978"/>
    </anomaly>
    <anomaly type="notice" value="0.617239,1.719120,010,1 1 0 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.163.47.72" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389259"/>
        <to usec="0" sec="1454389284"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="171.236.225.79" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389702"/>
        <to usec="0" sec="1454389936"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="151.14.5.198" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390059"/>
        <to usec="0" sec="1454390069"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.163.21.73" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389358"/>
        <to usec="0" sec="1454389372"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="203.209.170.134" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389617"/>
        <to usec="0" sec="1454389939"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.46.157.182" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389489"/>
        <to usec="0" sec="1454389498"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.198.178.180" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389769"/>
        <to usec="0" sec="1454389781"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.250.51.7" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390000"/>
        <to usec="0" sec="1454390014"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="192.168.0.10" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389591"/>
        <to usec="0" sec="1454389600"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="49.142.171.54" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389764"/>
        <to usec="0" sec="1454389777"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.63.68.250" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389847"/>
        <to usec="0" sec="1454389858"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.95.64.200" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389444"/>
        <to usec="0" sec="1454389448"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="62.146.148.206" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389452"/>
        <to usec="0" sec="1454389479"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.155.131.177" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389354"/>
        <to usec="0" sec="1454389379"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="120.189.35.78" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389386"/>
        <to usec="0" sec="1454389391"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="118.9.38.143" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389861"/>
        <to usec="0" sec="1454389871"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="217.75.54.240" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389499"/>
        <to usec="0" sec="1454389511"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="92.48.160.64" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389657"/>
        <to usec="0" sec="1454389663"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.169.107.104" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390082"/>
        <to usec="0" sec="1454390087"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.222.1.108" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389356"/>
        <to usec="0" sec="1454389366"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.58.238.215" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389514"/>
        <to usec="0" sec="1454389518"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="81.37.83.43" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389973"/>
        <to usec="0" sec="1454389993"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="42.86.224.215" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389609"/>
        <to usec="0" sec="1454389620"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.236.134.146" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389596"/>
        <to usec="0" sec="1454389601"/>
    </anomaly>
    <anomaly type="notice" value="0.739937,1.747200,010,1 1 1 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.207.224.149" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389377"/>
        <to usec="0" sec="1454389391"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.217.2.174" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389263"/>
        <to usec="0" sec="1454389274"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.43.100.17" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389474"/>
        <to usec="0" sec="1454389476"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.119.132.214" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389532"/>
        <to usec="0" sec="1454389558"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="5.81.131.210" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389247"/>
        <to usec="0" sec="1454389262"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.51.5.104" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389676"/>
        <to usec="0" sec="1454389687"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="155.130.176.212" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389516"/>
        <to usec="0" sec="1454389527"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="80.152.65.111" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390033"/>
        <to usec="0" sec="1454390043"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.195.199.23" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389507"/>
        <to usec="0" sec="1454389513"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.161.154.236" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389579"/>
        <to usec="0" sec="1454389590"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="101.227.249.18" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389202"/>
        <to usec="0" sec="1454389204"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="77.205.162.42" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389351"/>
        <to usec="0" sec="1454389360"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="41.218.91.44" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389710"/>
        <to usec="0" sec="1454389722"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="118.48.54.210" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389796"/>
        <to usec="0" sec="1454389804"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.136.237.211" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389781"/>
        <to usec="0" sec="1454389805"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="220.124.155.40" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389704"/>
        <to usec="0" sec="1454389734"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.152.160.231" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389431"/>
        <to usec="0" sec="1454389442"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="115.169.142.155" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389403"/>
        <to usec="0" sec="1454389415"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="125.159.135.38" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389859"/>
        <to usec="0" sec="1454389869"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.174.118.165" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389864"/>
        <to usec="0" sec="1454389884"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="118.66.234.219" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389276"/>
        <to usec="0" sec="1454389286"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.229.210.229" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389583"/>
        <to usec="0" sec="1454389595"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="180.137.8.164" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389901"/>
        <to usec="0" sec="1454389913"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="42.245.143.88" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389755"/>
        <to usec="0" sec="1454389766"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.193.2.165" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389663"/>
        <to usec="0" sec="1454389679"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="59.87.174.154" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389328"/>
        <to usec="0" sec="1454389340"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="115.169.94.152" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389748"/>
        <to usec="0" sec="1454389755"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.109.15.24" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389240"/>
        <to usec="0" sec="1454389252"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.73.11.27" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389424"/>
        <to usec="0" sec="1454389436"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.136.12.231" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390023"/>
        <to usec="0" sec="1454390032"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="187.148.142.220" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389916"/>
        <to usec="0" sec="1454389923"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.213.50.227" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389632"/>
        <to usec="0" sec="1454389645"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.104.221.157" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389523"/>
        <to usec="0" sec="1454389534"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.215.206.227" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389238"/>
        <to usec="0" sec="1454389263"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="128.123.199.220" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390025"/>
        <to usec="0" sec="1454390038"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="49.0.175.28" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389528"/>
        <to usec="0" sec="1454389539"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.17.180.93" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389951"/>
        <to usec="0" sec="1454389962"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="62.137.78.221" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389950"/>
        <to usec="0" sec="1454389956"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="221.244.105.93" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389839"/>
        <to usec="0" sec="1454389847"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.19.31.30" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390084"/>
        <to usec="0" sec="1454390094"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.88.220.97" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389753"/>
        <to usec="0" sec="1454389766"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="60.26.112.158" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389744"/>
        <to usec="0" sec="1454389749"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="124.182.78.222" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389494"/>
        <to usec="0" sec="1454389503"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="41.0.172.161" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390027"/>
        <to usec="0" sec="1454390038"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="108.75.67.94" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389868"/>
        <to usec="0" sec="1454389876"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="61.119.223.30" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389736"/>
        <to usec="0" sec="1454389747"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.136.62.161" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389362"/>
        <to usec="0" sec="1454389371"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="46.194.122.160" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389650"/>
        <to usec="0" sec="1454389661"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.157.122.159" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390064"/>
        <to usec="0" sec="1454390087"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.172.19.31" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390066"/>
        <to usec="0" sec="1454390078"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="221.99.85.98" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389270"/>
        <to usec="0" sec="1454389281"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="218.155.57.36" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389861"/>
        <to usec="0" sec="1454389873"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="31.73.74.10" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389392"/>
        <to usec="0" sec="1454389403"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="1.11.102.176" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390024"/>
        <to usec="0" sec="1454390033"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="141.120.107.246" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389608"/>
        <to usec="0" sec="1454389632"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.212.187.10" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389858"/>
        <to usec="0" sec="1454389873"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.178.208.38" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389498"/>
        <to usec="0" sec="1454389509"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="66.25.176.211" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390071"/>
        <to usec="0" sec="1454390085"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="107.163.39.148"/>
        </slice>
        <from usec="0" sec="1454389716"/>
        <to usec="0" sec="1454389717"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="115.215.79.36" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389679"/>
        <to usec="0" sec="1454389691"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="61.230.15.244" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389729"/>
        <to usec="0" sec="1454389732"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.65.23.132" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389699"/>
        <to usec="0" sec="1454389713"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.73.231.179" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389656"/>
        <to usec="0" sec="1454389666"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="79.170.234.213" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390077"/>
        <to usec="0" sec="1454390087"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="98.36.8.5" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389726"/>
        <to usec="0" sec="1454389737"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.128.60.13" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389989"/>
        <to usec="0" sec="1454390014"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.163.9.118" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389483"/>
        <to usec="0" sec="1454389494"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.150.171.70" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389683"/>
        <to usec="0" sec="1454389695"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.20.205.105" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390033"/>
        <to usec="0" sec="1454390046"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="37.232.247.80" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389638"/>
        <to usec="0" sec="1454389643"/>
    </anomaly>
    <anomaly type="notice" value="0.617239,1.719120,999,1 1 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.202.138.167" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389313"/>
        <to usec="0" sec="1454389324"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="175.114.173.248" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389546"/>
        <to usec="0" sec="1454389557"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="190.119.215.144" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389846"/>
        <to usec="0" sec="1454389857"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="111.93.227.152" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389798"/>
        <to usec="0" sec="1454389810"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="186.44.248.37" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389975"/>
        <to usec="0" sec="1454389982"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.46.143.164" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390088"/>
        <to usec="0" sec="1454390098"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="152.182.196.74" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389228"/>
        <to usec="0" sec="1454389239"/>
    </anomaly>
    <anomaly type="notice" value="0.739937,1.747200,999,1 1 1 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="118.223.123.71" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389881"/>
        <to usec="0" sec="1454389897"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.3.186.230" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389484"/>
        <to usec="0" sec="1454389495"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="61.115.189.4" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390022"/>
        <to usec="0" sec="1454390033"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="179.231.110.213" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389269"/>
        <to usec="0" sec="1454389279"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.230.166.214" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390096"/>
        <to usec="0" sec="1454390100"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="118.166.187.9" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389589"/>
        <to usec="0" sec="1454389599"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.111.221.21" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389607"/>
        <to usec="0" sec="1454389623"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="181.35.244.169" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389506"/>
        <to usec="0" sec="1454389517"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="202.69.162.244" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389882"/>
        <to usec="0" sec="1454389892"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="38.249.130.188" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389566"/>
        <to usec="0" sec="1454389579"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="94.70.167.61" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389914"/>
        <to usec="0" sec="1454389925"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="87.129.147.92" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389657"/>
        <to usec="0" sec="1454389669"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.38.72.77" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389961"/>
        <to usec="0" sec="1454389973"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.134.242.146" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389256"/>
        <to usec="0" sec="1454389269"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.252.26.178" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389210"/>
        <to usec="0" sec="1454389221"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="213.199.252.242" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389446"/>
        <to usec="0" sec="1454389452"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="153.133.100.222" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389984"/>
        <to usec="0" sec="1454389998"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="187.10.194.158" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454389207"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.163.191.113" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389863"/>
        <to usec="0" sec="1454389874"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.126.190.158" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389814"/>
        <to usec="0" sec="1454389822"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.80.20.240" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389976"/>
        <to usec="0" sec="1454389988"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="68.129.47.143" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389804"/>
        <to usec="0" sec="1454389816"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="77.212.213.14" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389294"/>
        <to usec="0" sec="1454389324"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="108.241.85.170" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389929"/>
        <to usec="0" sec="1454389939"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="189.224.50.205" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389218"/>
        <to usec="0" sec="1454389228"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="49.144.135.178" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389469"/>
        <to usec="0" sec="1454389480"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,011,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="104.189.162.241" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389216"/>
        <to usec="0" sec="1454389217"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="186.177.33.42" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390098"/>
        <to usec="0" sec="1454390101"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="222.121.236.149" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389904"/>
        <to usec="0" sec="1454389918"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.220.151.104" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389940"/>
        <to usec="0" sec="1454389950"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.234.212.212" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389396"/>
        <to usec="0" sec="1454389417"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="110.221.113.19" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389523"/>
        <to usec="0" sec="1454389534"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="181.252.67.215" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389658"/>
        <to usec="0" sec="1454389670"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.89.56.151" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389651"/>
        <to usec="0" sec="1454389661"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="118.164.48.50" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389675"/>
        <to usec="0" sec="1454389689"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="200.72.133.113" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389224"/>
        <to usec="0" sec="1454389234"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="118.158.168.14" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389967"/>
        <to usec="0" sec="1454389978"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="5.66.77.206" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389819"/>
        <to usec="0" sec="1454389830"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="36.18.254.145" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390031"/>
        <to usec="0" sec="1454390042"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="61.98.180.239" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389590"/>
        <to usec="0" sec="1454389603"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="58.177.107.208" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389836"/>
        <to usec="0" sec="1454389846"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.136.154.164" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389482"/>
        <to usec="0" sec="1454389493"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.36.8.218" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389512"/>
        <to usec="0" sec="1454389516"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.122.244.186" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389739"/>
        <to usec="0" sec="1454389753"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="178.30.127.165" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389238"/>
        <to usec="0" sec="1454389257"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="194.106.26.219" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389797"/>
        <to usec="0" sec="1454389807"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="109.171.110.217" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389376"/>
        <to usec="0" sec="1454389385"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.21.76.165" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389845"/>
        <to usec="0" sec="1454389857"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.198.101.165" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389708"/>
        <to usec="0" sec="1454389722"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="218.217.48.184" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389805"/>
        <to usec="0" sec="1454389816"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.220.189.7" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389409"/>
        <to usec="0" sec="1454389419"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="116.29.94.163" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389286"/>
        <to usec="0" sec="1454389296"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.44.21.125" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389975"/>
        <to usec="0" sec="1454389985"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.249.248.252" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389215"/>
        <to usec="0" sec="1454389224"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="101.227.5.253" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389514"/>
        <to usec="0" sec="1454389537"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.45.136.1" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389690"/>
        <to usec="0" sec="1454389700"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.183.170.31" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389373"/>
        <to usec="0" sec="1454389398"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="101.225.212.196" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389835"/>
        <to usec="0" sec="1454389858"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="94.198.202.193" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389907"/>
        <to usec="0" sec="1454389929"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="37.238.114.206" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389626"/>
        <to usec="0" sec="1454389633"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.71.207.55" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389684"/>
        <to usec="0" sec="1454389697"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="181.59.112.57" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389366"/>
        <to usec="0" sec="1454389377"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.46.134.202" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389935"/>
        <to usec="0" sec="1454389946"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="77.24.35.52" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389610"/>
        <to usec="0" sec="1454389635"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.135.38.204" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389900"/>
        <to usec="0" sec="1454389910"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.178.7.77" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389648"/>
        <to usec="0" sec="1454389666"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="62.137.74.177" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389431"/>
        <to usec="0" sec="1454389443"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="87.157.233.49" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389719"/>
        <to usec="0" sec="1454389730"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.98.118.191" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389226"/>
        <to usec="0" sec="1454389239"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="190.8.199.197" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389835"/>
        <to usec="0" sec="1454389846"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.22.14.75" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389482"/>
        <to usec="0" sec="1454389490"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="117.84.51.74" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389823"/>
        <to usec="0" sec="1454389872"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.206.221.74" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389592"/>
        <to usec="0" sec="1454389603"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="180.176.38.184" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390009"/>
        <to usec="0" sec="1454390020"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.9.15.58" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389608"/>
        <to usec="0" sec="1454389619"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="80.194.138.185" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389390"/>
        <to usec="0" sec="1454389401"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="190.132.142.196" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389538"/>
        <to usec="0" sec="1454389547"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="81.25.132.203" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389909"/>
        <to usec="0" sec="1454389920"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.233.67.196" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390091"/>
        <to usec="0" sec="1454390099"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="37.142.253.72" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389588"/>
        <to usec="0" sec="1454389600"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.102.23.180" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389405"/>
        <to usec="0" sec="1454389434"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.162.139.60" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389301"/>
        <to usec="0" sec="1454389309"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.249.213.67" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389743"/>
        <to usec="0" sec="1454389745"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="148.242.103.195" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389498"/>
        <to usec="0" sec="1454389509"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="115.14.240.76" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389494"/>
        <to usec="0" sec="1454389504"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.155.60.191" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389938"/>
        <to usec="0" sec="1454389949"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.137.215.192" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389213"/>
        <to usec="0" sec="1454389226"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="104.38.204.168" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389933"/>
        <to usec="0" sec="1454389937"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.233.20.46" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389849"/>
        <to usec="0" sec="1454389860"/>
    </anomaly>
    <anomaly type="notice" value="0.617239,1.719120,999,1 1 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="60.75.240.211" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389744"/>
        <to usec="0" sec="1454389757"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="84.224.133.81" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389874"/>
        <to usec="0" sec="1454389885"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="84.168.11.81" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390043"/>
        <to usec="0" sec="1454390054"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="77.212.236.209" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389633"/>
        <to usec="0" sec="1454389645"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.163.56.174" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389224"/>
        <to usec="0" sec="1454389235"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="223.199.166.168" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389742"/>
        <to usec="0" sec="1454389755"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="120.160.55.168" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389480"/>
        <to usec="0" sec="1454389488"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="222.117.123.83" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389267"/>
        <to usec="0" sec="1454389280"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="209.211.8.172" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389492"/>
        <to usec="0" sec="1454389494"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.3.78.83" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389686"/>
        <to usec="0" sec="1454389691"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.231.104.85" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389862"/>
        <to usec="0" sec="1454389875"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.137.79.173" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389281"/>
        <to usec="0" sec="1454389294"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.159.135.45" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389920"/>
        <to usec="0" sec="1454389942"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="212.228.34.171" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389712"/>
        <to usec="0" sec="1454389720"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="37.237.253.81" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390056"/>
        <to usec="0" sec="1454390069"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="116.195.86.209" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389979"/>
        <to usec="0" sec="1454389988"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="27.103.137.81" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389594"/>
        <to usec="0" sec="1454389603"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="105.197.176.214" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389929"/>
        <to usec="0" sec="1454389948"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.198.233.41" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389710"/>
        <to usec="0" sec="1454389719"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="193.251.54.174" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389871"/>
        <to usec="0" sec="1454389879"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="42.90.123.90" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389490"/>
        <to usec="0" sec="1454389496"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.234.196.167" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389202"/>
        <to usec="0" sec="1454389212"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="209.183.105.39" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389952"/>
        <to usec="0" sec="1454389968"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="200.110.130.36" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389694"/>
        <to usec="0" sec="1454389706"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="101.130.107.91" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390038"/>
        <to usec="0" sec="1454390044"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.232.183.91" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390038"/>
        <to usec="0" sec="1454390051"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.158.209.164" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389927"/>
        <to usec="0" sec="1454389937"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.136.137.93" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389628"/>
        <to usec="0" sec="1454389639"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.41.151.163" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389366"/>
        <to usec="0" sec="1454389376"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="179.158.77.35" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389991"/>
        <to usec="0" sec="1454390002"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.125.46.35" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389992"/>
        <to usec="0" sec="1454390004"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.109.44.222" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389231"/>
        <to usec="0" sec="1454389244"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.47.212.161" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389775"/>
        <to usec="0" sec="1454389786"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.93.144.161" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389896"/>
        <to usec="0" sec="1454389908"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="64.22.103.222" dst_ip="157.166.99.68" src_port="80" dst_port="50964"/>
        </slice>
        <from usec="0" sec="1454389740"/>
        <to usec="0" sec="1454389742"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.23.173.32" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390092"/>
        <to usec="0" sec="1454390101"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.63.239.160" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389898"/>
        <to usec="0" sec="1454389910"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="190.229.137.26" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389212"/>
        <to usec="0" sec="1454389222"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="110.216.55.3" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389513"/>
        <to usec="0" sec="1454389520"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.204.209.9" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390065"/>
        <to usec="0" sec="1454390079"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.125.207.114" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389256"/>
        <to usec="0" sec="1454389283"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.200.79.109" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389443"/>
        <to usec="0" sec="1454389448"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="71.231.166.252" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389203"/>
        <to usec="0" sec="1454389215"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.85.119.114" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389696"/>
        <to usec="0" sec="1454389707"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.59.102.133" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389724"/>
        <to usec="0" sec="1454389735"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.228.97.5" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389571"/>
        <to usec="0" sec="1454389582"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="220.6.205.98" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389940"/>
        <to usec="0" sec="1454389943"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="49.154.58.19" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389832"/>
        <to usec="0" sec="1454389843"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="185.217.89.109" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389843"/>
        <to usec="0" sec="1454389849"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.44.29.2" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390036"/>
        <to usec="0" sec="1454390045"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="178.244.173.116" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389415"/>
        <to usec="0" sec="1454389425"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.221.181.142" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389858"/>
        <to usec="0" sec="1454389871"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.229.46.128" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389635"/>
        <to usec="0" sec="1454389644"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="49.236.102.224" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389866"/>
        <to usec="0" sec="1454389877"/>
    </anomaly>
    <anomaly type="notice" value="0.739937,1.747200,999,1 1 1 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.23.173.8" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389398"/>
        <to usec="0" sec="1454389496"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.225.36.22" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389702"/>
        <to usec="0" sec="1454389727"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="49.236.174.152" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389235"/>
        <to usec="0" sec="1454389246"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="93.175.62.250" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389406"/>
        <to usec="0" sec="1454389414"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.59.177.21" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389954"/>
        <to usec="0" sec="1454389965"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.222.96.101" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389644"/>
        <to usec="0" sec="1454389653"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.136.77.120" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389586"/>
        <to usec="0" sec="1454389597"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.70.91.102" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389493"/>
        <to usec="0" sec="1454389502"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.165.38.153" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389739"/>
        <to usec="0" sec="1454389746"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="101.71.185.117" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389589"/>
        <to usec="0" sec="1454389594"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="176.62.84.102" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389808"/>
        <to usec="0" sec="1454389813"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="218.170.26.26" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389275"/>
        <to usec="0" sec="1454389297"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="62.137.73.24" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389735"/>
        <to usec="0" sec="1454389746"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="186.12.139.28" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389627"/>
        <to usec="0" sec="1454389639"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="118.228.218.130" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389907"/>
        <to usec="0" sec="1454389917"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.164.254.253" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389973"/>
        <to usec="0" sec="1454389980"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="173.199.116.13" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389945"/>
        <to usec="0" sec="1454389954"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="79.185.129.115" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389572"/>
        <to usec="0" sec="1454389582"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="61.45.188.225" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390012"/>
        <to usec="0" sec="1454390039"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="180.37.35.0" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389353"/>
        <to usec="0" sec="1454389360"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="60.82.214.243" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389502"/>
        <to usec="0" sec="1454389514"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.236.101.116" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389853"/>
        <to usec="0" sec="1454389863"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.76.196.241" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390011"/>
        <to usec="0" sec="1454390024"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.199.123.238" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389418"/>
        <to usec="0" sec="1454389425"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.231.25.113" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389467"/>
        <to usec="0" sec="1454389479"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.145.180.145" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390096"/>
        <to usec="0" sec="1454390101"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.76.81.241" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389487"/>
        <to usec="0" sec="1454389498"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="60.135.201.17" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389914"/>
        <to usec="0" sec="1454389925"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="87.135.30.232" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389622"/>
        <to usec="0" sec="1454389634"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="176.52.19.23" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389774"/>
        <to usec="0" sec="1454389784"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.244.20.18" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390021"/>
        <to usec="0" sec="1454390041"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.186.223.237" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389855"/>
        <to usec="0" sec="1454389868"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.163.54.234" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389786"/>
        <to usec="0" sec="1454389797"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.191.163.11" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389348"/>
        <to usec="0" sec="1454389367"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="92.224.253.9" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390018"/>
        <to usec="0" sec="1454390029"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="60.147.90.246" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389555"/>
        <to usec="0" sec="1454389567"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.157.3.137" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389646"/>
        <to usec="0" sec="1454389658"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="105.199.144.9" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389718"/>
        <to usec="0" sec="1454389738"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.162.14.233" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389370"/>
        <to usec="0" sec="1454389381"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="222.205.2.230" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390080"/>
        <to usec="0" sec="1454390091"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.119.82.230" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389824"/>
        <to usec="0" sec="1454389835"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="106.177.30.26" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389996"/>
        <to usec="0" sec="1454390005"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.49.121.121" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389417"/>
        <to usec="0" sec="1454389428"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="1.34.59.100" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389646"/>
        <to usec="0" sec="1454389657"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.162.147.121" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389290"/>
        <to usec="0" sec="1454389301"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="115.203.87.153" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389682"/>
        <to usec="0" sec="1454389690"/>
    </anomaly>
    <anomaly type="notice" value="0.739937,1.747200,999,1 1 1 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.247.201.101" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389687"/>
        <to usec="0" sec="1454389701"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.60.159.5" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389719"/>
        <to usec="0" sec="1454389730"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="196.8.202.102" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389877"/>
        <to usec="0" sec="1454389887"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="82.47.67.102" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389852"/>
        <to usec="0" sec="1454389861"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="109.183.35.133" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389973"/>
        <to usec="0" sec="1454389984"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.234.78.134" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389861"/>
        <to usec="0" sec="1454389874"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.105.51.100" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389363"/>
        <to usec="0" sec="1454389374"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.194.26.155" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389634"/>
        <to usec="0" sec="1454389646"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="58.69.53.120" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389739"/>
        <to usec="0" sec="1454389750"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="190.4.113.27" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389364"/>
        <to usec="0" sec="1454389372"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.162.38.228" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389702"/>
        <to usec="0" sec="1454389714"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="111.10.41.98" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389676"/>
        <to usec="0" sec="1454389686"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="68.117.44.2" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389915"/>
        <to usec="0" sec="1454389934"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.232.226.227" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390083"/>
        <to usec="0" sec="1454390099"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.56.53.125" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389926"/>
        <to usec="0" sec="1454389939"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="219.148.213.29" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389653"/>
        <to usec="0" sec="1454389664"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="87.131.161.124" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389424"/>
        <to usec="0" sec="1454389435"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="202.64.20.254" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389809"/>
        <to usec="0" sec="1454389811"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="106.222.80.30" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389563"/>
        <to usec="0" sec="1454389572"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.87.128.254" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389497"/>
        <to usec="0" sec="1454389508"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="189.102.46.254" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389841"/>
        <to usec="0" sec="1454389852"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="196.8.194.128" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389570"/>
        <to usec="0" sec="1454389582"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.176.25.127" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389681"/>
        <to usec="0" sec="1454389692"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="118.164.180.69" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389961"/>
        <to usec="0" sec="1454389971"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.224.123.132" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389735"/>
        <to usec="0" sec="1454389746"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.136.53.182" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389620"/>
        <to usec="0" sec="1454389632"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="179.236.8.69" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389618"/>
        <to usec="0" sec="1454389626"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.234.215.121" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389462"/>
        <to usec="0" sec="1454389474"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.231.141.185" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389652"/>
        <to usec="0" sec="1454389665"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="86.128.104.66" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389741"/>
        <to usec="0" sec="1454389745"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.231.148.118" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389841"/>
        <to usec="0" sec="1454389855"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="218.247.23.78" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389540"/>
        <to usec="0" sec="1454389550"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.60.214.117" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389287"/>
        <to usec="0" sec="1454389295"/>
    </anomaly>
    <anomaly type="notice" value="0.739937,1.747200,999,1 1 1 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.136.30.118" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389203"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.122.227.72" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389346"/>
        <to usec="0" sec="1454389356"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.128.86.116" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390013"/>
        <to usec="0" sec="1454390025"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.238.126.74" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389430"/>
        <to usec="0" sec="1454389432"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.79.171.139" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389439"/>
        <to usec="0" sec="1454389441"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.198.73.133" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389682"/>
        <to usec="0" sec="1454389692"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.230.210.122" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389546"/>
        <to usec="0" sec="1454389559"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="87.232.197.187" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389602"/>
        <to usec="0" sec="1454389603"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.102.246.113" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390072"/>
        <to usec="0" sec="1454390083"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.231.216.73" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389910"/>
        <to usec="0" sec="1454389920"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="191.213.173.128" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389922"/>
        <to usec="0" sec="1454389934"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="189.250.80.128" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389850"/>
        <to usec="0" sec="1454389860"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.160.42.120" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389317"/>
        <to usec="0" sec="1454389358"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.125.36.64" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389726"/>
        <to usec="0" sec="1454389739"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="27.63.112.119" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389631"/>
        <to usec="0" sec="1454389643"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="118.220.4.122" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389529"/>
        <to usec="0" sec="1454389540"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.220.39.133" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389781"/>
        <to usec="0" sec="1454389792"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.189.96.180" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389759"/>
        <to usec="0" sec="1454389770"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.152.125.187" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389759"/>
        <to usec="0" sec="1454389783"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.227.162.123" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389836"/>
        <to usec="0" sec="1454389861"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="181.163.234.77" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389689"/>
        <to usec="0" sec="1454389700"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="62.137.64.140" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390043"/>
        <to usec="0" sec="1454390054"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.128.79.66" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389367"/>
        <to usec="0" sec="1454389381"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="153.133.38.66" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389900"/>
        <to usec="0" sec="1454389911"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.233.183.191" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389347"/>
        <to usec="0" sec="1454389359"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="81.25.115.143" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389958"/>
        <to usec="0" sec="1454389971"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.222.85.176" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389483"/>
        <to usec="0" sec="1454389491"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.102.59.143" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389318"/>
        <to usec="0" sec="1454389340"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.44.210.85" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389436"/>
        <to usec="0" sec="1454389441"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="116.154.217.149" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389418"/>
        <to usec="0" sec="1454389426"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="27.109.129.85" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389578"/>
        <to usec="0" sec="1454389596"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.229.15.172" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389257"/>
        <to usec="0" sec="1454389267"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.127.64.85" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389904"/>
        <to usec="0" sec="1454389916"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="83.21.214.109" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389794"/>
        <to usec="0" sec="1454389806"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="219.144.245.151" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390049"/>
        <to usec="0" sec="1454390079"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="87.134.86.84" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389250"/>
        <to usec="0" sec="1454389261"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.109.49.175" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389521"/>
        <to usec="0" sec="1454389532"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="189.176.17.104" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389657"/>
        <to usec="0" sec="1454389668"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.230.113.146" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389241"/>
        <to usec="0" sec="1454389251"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="46.99.157.148" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390084"/>
        <to usec="0" sec="1454390095"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="176.70.8.171" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389234"/>
        <to usec="0" sec="1454389247"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.230.59.173" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389426"/>
        <to usec="0" sec="1454389432"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.112.237.173" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389477"/>
        <to usec="0" sec="1454389500"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.38.147.172" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389880"/>
        <to usec="0" sec="1454389892"/>
    </anomaly>
    <anomaly type="notice" value="0.617239,1.719120,999,1 1 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="76.170.203.172" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389357"/>
        <to usec="0" sec="1454389368"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.214.55.149" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389372"/>
        <to usec="0" sec="1454389383"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="62.137.74.105" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389276"/>
        <to usec="0" sec="1454389287"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="36.230.102.81" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389302"/>
        <to usec="0" sec="1454389311"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="118.68.169.144" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389635"/>
        <to usec="0" sec="1454389648"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="41.89.140.144" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389742"/>
        <to usec="0" sec="1454389754"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="188.131.72.151" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389636"/>
        <to usec="0" sec="1454389647"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.163.70.104" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389225"/>
        <to usec="0" sec="1454389235"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="59.124.218.87" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389901"/>
        <to usec="0" sec="1454389921"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="27.82.123.144" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389731"/>
        <to usec="0" sec="1454389741"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.0.68.104" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389381"/>
        <to usec="0" sec="1454389392"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="37.118.89.144" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389240"/>
        <to usec="0" sec="1454389254"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.188.185.167" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389206"/>
        <to usec="0" sec="1454389214"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.127.146.101" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389349"/>
        <to usec="0" sec="1454389359"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="46.200.150.89" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389547"/>
        <to usec="0" sec="1454389558"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="186.97.254.102" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389981"/>
        <to usec="0" sec="1454389992"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="80.72.255.167" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389652"/>
        <to usec="0" sec="1454389663"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="61.108.75.88" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389929"/>
        <to usec="0" sec="1454389942"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="216.175.81.163" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389677"/>
        <to usec="0" sec="1454389716"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="115.215.228.93" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389660"/>
        <to usec="0" sec="1454389670"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.113.124.157" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389428"/>
        <to usec="0" sec="1454389449"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="77.205.184.98" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389953"/>
        <to usec="0" sec="1454389965"/>
    </anomaly>
    <anomaly type="notice" value="0.617239,1.719120,010,1 1 0 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="61.218.250.94" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389245"/>
        <to usec="0" sec="1454389254"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="186.1.193.158" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389859"/>
        <to usec="0" sec="1454389870"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="1.191.110.97" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389584"/>
        <to usec="0" sec="1454389595"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="190.151.155.97" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389713"/>
        <to usec="0" sec="1454389725"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.90.233.161" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390048"/>
        <to usec="0" sec="1454390059"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.110.29.160" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389755"/>
        <to usec="0" sec="1454389764"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="1.176.97.159" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389412"/>
        <to usec="0" sec="1454389422"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="39.24.249.175" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389428"/>
        <to usec="0" sec="1454389438"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="60.43.42.112" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389809"/>
        <to usec="0" sec="1454389820"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="80.234.193.187" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389664"/>
        <to usec="0" sec="1454389671"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="61.216.102.100" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389573"/>
        <to usec="0" sec="1454389582"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.126.246.119" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389850"/>
        <to usec="0" sec="1454389862"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="187.195.246.120" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389806"/>
        <to usec="0" sec="1454389816"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.209.252.133" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390031"/>
        <to usec="0" sec="1454390038"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.163.116.65" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389526"/>
        <to usec="0" sec="1454389538"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.148.242.98" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389404"/>
        <to usec="0" sec="1454389414"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.122.12.97" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389301"/>
        <to usec="0" sec="1454389323"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="176.223.45.147" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389293"/>
        <to usec="0" sec="1454389305"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.244.132.179" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389985"/>
        <to usec="0" sec="1454390001"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="80.242.93.135" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389503"/>
        <to usec="0" sec="1454389514"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.59.68.147" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390091"/>
        <to usec="0" sec="1454390099"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="68.195.199.71" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389799"/>
        <to usec="0" sec="1454389810"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.77.205.188" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389347"/>
        <to usec="0" sec="1454389356"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.3.55.92" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389697"/>
        <to usec="0" sec="1454389723"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.74.250.90" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389661"/>
        <to usec="0" sec="1454389699"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="83.242.176.162" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389267"/>
        <to usec="0" sec="1454389274"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.223.131.114" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390051"/>
        <to usec="0" sec="1454390054"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="171.39.136.85" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389992"/>
        <to usec="0" sec="1454390003"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="221.106.75.187" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389678"/>
        <to usec="0" sec="1454389688"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="181.144.2.125" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389206"/>
        <to usec="0" sec="1454389211"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.45.222.92" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389938"/>
        <to usec="0" sec="1454389948"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="110.63.237.147" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389955"/>
        <to usec="0" sec="1454389957"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.209.227.73" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389767"/>
        <to usec="0" sec="1454389784"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="120.108.119.104" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389664"/>
        <to usec="0" sec="1454389678"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="193.196.115.180" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389202"/>
        <to usec="0" sec="1454389217"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.124.33.150" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389360"/>
        <to usec="0" sec="1454389371"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.182.18.90" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389327"/>
        <to usec="0" sec="1454389335"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="37.94.16.104" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389901"/>
        <to usec="0" sec="1454389913"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.161.191.181" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389643"/>
        <to usec="0" sec="1454389655"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="181.59.21.186" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389306"/>
        <to usec="0" sec="1454389316"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="42.244.229.182" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389987"/>
        <to usec="0" sec="1454389998"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="181.35.54.85" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389733"/>
        <to usec="0" sec="1454389744"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="117.199.29.107" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390091"/>
        <to usec="0" sec="1454390099"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="92.48.103.87" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389369"/>
        <to usec="0" sec="1454389380"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="196.8.202.189" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389312"/>
        <to usec="0" sec="1454389316"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="83.238.102.109" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389438"/>
        <to usec="0" sec="1454389491"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="39.12.101.108" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389486"/>
        <to usec="0" sec="1454389496"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.129.168.115" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389831"/>
        <to usec="0" sec="1454389842"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="2.89.49.140" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389909"/>
        <to usec="0" sec="1454389917"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.200.191.130" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389457"/>
        <to usec="0" sec="1454389469"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.136.40.147" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389538"/>
        <to usec="0" sec="1454389549"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="92.220.24.78" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389306"/>
        <to usec="0" sec="1454389317"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="124.18.5.145" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389266"/>
        <to usec="0" sec="1454389295"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="117.74.207.177" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389896"/>
        <to usec="0" sec="1454389906"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.235.165.78" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389258"/>
        <to usec="0" sec="1454389269"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.78.14.110" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389365"/>
        <to usec="0" sec="1454389376"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.246.86.95" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389928"/>
        <to usec="0" sec="1454389938"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.63.97.144" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389774"/>
        <to usec="0" sec="1454389782"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.167.36.95" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390050"/>
        <to usec="0" sec="1454390052"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="222.213.29.72" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389400"/>
        <to usec="0" sec="1454389408"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="5.129.30.83" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389936"/>
        <to usec="0" sec="1454389948"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.136.61.77" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389644"/>
        <to usec="0" sec="1454389649"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.27.16.77" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389579"/>
        <to usec="0" sec="1454389590"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="140.248.186.109" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389868"/>
        <to usec="0" sec="1454389880"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.136.130.74" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389982"/>
        <to usec="0" sec="1454389993"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="210.227.109.138" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389811"/>
        <to usec="0" sec="1454389822"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="195.172.107.169" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389256"/>
        <to usec="0" sec="1454389283"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="212.99.83.181" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389982"/>
        <to usec="0" sec="1454389991"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.70.247.141" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389395"/>
        <to usec="0" sec="1454389424"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="31.103.251.78" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389819"/>
        <to usec="0" sec="1454389831"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="37.232.247.143" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389886"/>
        <to usec="0" sec="1454389892"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="94.33.164.116" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389597"/>
        <to usec="0" sec="1454389608"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.131.183.149" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389821"/>
        <to usec="0" sec="1454389823"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.231.118.77" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389480"/>
        <to usec="0" sec="1454389491"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.76.187.107" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389464"/>
        <to usec="0" sec="1454389475"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="181.35.79.137" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390089"/>
        <to usec="0" sec="1454390099"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="211.155.171.174" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389301"/>
        <to usec="0" sec="1454389336"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="192.123.13.145" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389858"/>
        <to usec="0" sec="1454389869"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="67.85.58.169" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389949"/>
        <to usec="0" sec="1454389974"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.116.119.144" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389823"/>
        <to usec="0" sec="1454389827"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="220.238.130.112" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389306"/>
        <to usec="0" sec="1454389321"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.226.203.175" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390016"/>
        <to usec="0" sec="1454390047"/>
    </anomaly>
    <anomaly type="notice" value="0.739937,1.747200,503,1 1 1 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="124.148.17.131" src_port="80"/>
            <filter src_ip="182.105.245.35" src_port="80"/>
            <filter src_ip="116.224.230.69" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389987"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.171.6.123" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389960"/>
        <to usec="0" sec="1454389970"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="153.133.111.155" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389969"/>
        <to usec="0" sec="1454389979"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.246.181.164" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389704"/>
        <to usec="0" sec="1454389713"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.162.71.155" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389351"/>
        <to usec="0" sec="1454389363"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="42.217.133.135" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389212"/>
        <to usec="0" sec="1454389214"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="117.109.71.123" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389658"/>
        <to usec="0" sec="1454389668"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="222.83.203.123" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389473"/>
        <to usec="0" sec="1454389485"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="171.232.36.121" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390053"/>
        <to usec="0" sec="1454390063"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.233.186.102" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390079"/>
        <to usec="0" sec="1454390091"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="39.5.63.166" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389548"/>
        <to usec="0" sec="1454389558"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="213.117.66.90" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389283"/>
        <to usec="0" sec="1454389295"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="220.125.111.185" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390073"/>
        <to usec="0" sec="1454390085"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.220.101.186" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389217"/>
        <to usec="0" sec="1454389228"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="61.111.81.134" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389223"/>
        <to usec="0" sec="1454389240"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="220.127.166.70" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390051"/>
        <to usec="0" sec="1454390073"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="87.137.84.166" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389936"/>
        <to usec="0" sec="1454389950"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="24.162.68.90" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389567"/>
        <to usec="0" sec="1454389577"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.181.163.134" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389961"/>
        <to usec="0" sec="1454389968"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.169.49.132" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389599"/>
        <to usec="0" sec="1454389610"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.164.12.71" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389525"/>
        <to usec="0" sec="1454389542"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.193.232.68" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389380"/>
        <to usec="0" sec="1454389391"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="176.12.237.156" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389907"/>
        <to usec="0" sec="1454389920"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="120.128.98.93" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389355"/>
        <to usec="0" sec="1454389384"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.254.83.188" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389294"/>
        <to usec="0" sec="1454389304"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.164.0.130" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389338"/>
        <to usec="0" sec="1454389362"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.64.249.129" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389657"/>
        <to usec="0" sec="1454389668"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.162.167.126" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389506"/>
        <to usec="0" sec="1454390075"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="180.35.182.94" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389835"/>
        <to usec="0" sec="1454389845"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.137.114.127" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389750"/>
        <to usec="0" sec="1454389760"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="106.167.230.64" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389959"/>
        <to usec="0" sec="1454389969"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="92.212.253.160" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389355"/>
        <to usec="0" sec="1454389364"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.159.139.96" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389360"/>
        <to usec="0" sec="1454389373"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.63.180.64" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389652"/>
        <to usec="0" sec="1454389665"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="189.152.163.159" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389776"/>
        <to usec="0" sec="1454389784"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.163.250.95" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390052"/>
        <to usec="0" sec="1454390065"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.236.42.127" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389659"/>
        <to usec="0" sec="1454389670"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="222.237.5.193" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389581"/>
        <to usec="0" sec="1454389592"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.63.102.54" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389759"/>
        <to usec="0" sec="1454389768"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="31.84.169.197" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389416"/>
        <to usec="0" sec="1454389427"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="185.141.6.61" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390005"/>
        <to usec="0" sec="1454390016"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.73.253.207" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389489"/>
        <to usec="0" sec="1454389493"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="124.71.108.53" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389429"/>
        <to usec="0" sec="1454389440"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="179.185.5.59" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389853"/>
        <to usec="0" sec="1454389868"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.179.89.197" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389933"/>
        <to usec="0" sec="1454389943"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="61.238.222.49" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389977"/>
        <to usec="0" sec="1454389985"/>
    </anomaly>
    <anomaly type="notice" value="0.617239,1.719120,010,1 1 0 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.83.79.193" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389397"/>
        <to usec="0" sec="1454389428"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.131.185.198" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389274"/>
        <to usec="0" sec="1454389285"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.140.150.48" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389736"/>
        <to usec="0" sec="1454389748"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.200.209.196" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389714"/>
        <to usec="0" sec="1454389728"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.233.127.56" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389505"/>
        <to usec="0" sec="1454389519"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.252.84.200" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389980"/>
        <to usec="0" sec="1454389993"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="179.238.70.55" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389418"/>
        <to usec="0" sec="1454389429"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.75.178.56" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389343"/>
        <to usec="0" sec="1454389353"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.216.82.63" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389639"/>
        <to usec="0" sec="1454389649"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="180.174.199.196" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390043"/>
        <to usec="0" sec="1454390047"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="41.237.101.195" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389901"/>
        <to usec="0" sec="1454389911"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="176.43.75.195" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389866"/>
        <to usec="0" sec="1454389875"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="125.208.171.197" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389268"/>
        <to usec="0" sec="1454389279"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.121.81.205" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389383"/>
        <to usec="0" sec="1454389385"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.90.87.193" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389880"/>
        <to usec="0" sec="1454389892"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="81.232.100.49" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389353"/>
        <to usec="0" sec="1454389373"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="93.209.12.56" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389366"/>
        <to usec="0" sec="1454389368"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="187.95.75.192" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389473"/>
        <to usec="0" sec="1454389482"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.36.82.192" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389558"/>
        <to usec="0" sec="1454389570"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.37.133.52" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389740"/>
        <to usec="0" sec="1454389749"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.152.13.201" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389358"/>
        <to usec="0" sec="1454389368"/>
    </anomaly>
    <anomaly type="notice" value="0.739937,1.747200,010,1 1 1 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="124.71.49.198" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390008"/>
        <to usec="0" sec="1454390023"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="181.59.22.57" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389608"/>
        <to usec="0" sec="1454389618"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.212.203.197" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389399"/>
        <to usec="0" sec="1454389409"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.63.117.198" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389994"/>
        <to usec="0" sec="1454390002"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="200.83.227.198" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389738"/>
        <to usec="0" sec="1454389748"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="116.159.239.202" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389967"/>
        <to usec="0" sec="1454389976"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="62.37.20.196" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390092"/>
        <to usec="0" sec="1454390100"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="31.73.114.52" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390058"/>
        <to usec="0" sec="1454390070"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.13.246.56" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390070"/>
        <to usec="0" sec="1454390082"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.132.23.203" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389392"/>
        <to usec="0" sec="1454389403"/>
    </anomaly>
    <anomaly type="notice" value="0.617239,1.719120,999,1 1 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="191.170.88.50" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389936"/>
        <to usec="0" sec="1454389946"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="222.235.169.205" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389543"/>
        <to usec="0" sec="1454389555"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="120.139.41.205" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389472"/>
        <to usec="0" sec="1454389483"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="101.233.203.195" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390052"/>
        <to usec="0" sec="1454390062"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.194.228.51" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389722"/>
        <to usec="0" sec="1454389737"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.170.221.193" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389874"/>
        <to usec="0" sec="1454389880"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="60.24.75.206" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389345"/>
        <to usec="0" sec="1454389356"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.139.205.193" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389902"/>
        <to usec="0" sec="1454389915"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.158.13.193" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389206"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.235.138.207" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389843"/>
        <to usec="0" sec="1454389853"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.186.2.207" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389527"/>
        <to usec="0" sec="1454389538"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="187.18.213.48" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389523"/>
        <to usec="0" sec="1454389535"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.222.116.43" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390028"/>
        <to usec="0" sec="1454390039"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="191.59.245.215" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389439"/>
        <to usec="0" sec="1454389451"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.165.85.208" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389220"/>
        <to usec="0" sec="1454389231"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.129.77.212" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389846"/>
        <to usec="0" sec="1454389856"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="61.70.245.46" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389815"/>
        <to usec="0" sec="1454389822"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.224.16.214" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389993"/>
        <to usec="0" sec="1454390003"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="180.172.45.208" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389721"/>
        <to usec="0" sec="1454389732"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="222.165.82.42" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389511"/>
        <to usec="0" sec="1454389524"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.118.197.213" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389519"/>
        <to usec="0" sec="1454389546"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="211.150.107.42" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389960"/>
        <to usec="0" sec="1454389969"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="178.81.246.45" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389367"/>
        <to usec="0" sec="1454389378"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.242.122.43" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389613"/>
        <to usec="0" sec="1454389625"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.128.134.40" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389537"/>
        <to usec="0" sec="1454389548"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="39.9.79.213" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390011"/>
        <to usec="0" sec="1454390022"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.137.59.212" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389773"/>
        <to usec="0" sec="1454389784"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.136.171.212" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389955"/>
        <to usec="0" sec="1454389966"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="41.236.2.42" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389340"/>
        <to usec="0" sec="1454389351"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="212.34.113.211" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389835"/>
        <to usec="0" sec="1454389842"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.136.112.45" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389652"/>
        <to usec="0" sec="1454389675"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.238.129.213" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389871"/>
        <to usec="0" sec="1454389881"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.234.224.46" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389270"/>
        <to usec="0" sec="1454389275"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="219.85.111.209" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389595"/>
        <to usec="0" sec="1454389607"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.160.61.41" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389279"/>
        <to usec="0" sec="1454389288"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.161.146.40" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389613"/>
        <to usec="0" sec="1454389616"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="176.42.247.47" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389981"/>
        <to usec="0" sec="1454389993"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="222.124.150.37" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389574"/>
        <to usec="0" sec="1454389576"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.21.110.218" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389748"/>
        <to usec="0" sec="1454389771"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="27.243.108.39" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389976"/>
        <to usec="0" sec="1454389986"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="189.108.240.38" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389639"/>
        <to usec="0" sec="1454389649"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="88.234.163.37" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389339"/>
        <to usec="0" sec="1454389363"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="164.50.205.38" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389208"/>
        <to usec="0" sec="1454389220"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.120.37.217" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389841"/>
        <to usec="0" sec="1454389849"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.206.86.38" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389436"/>
        <to usec="0" sec="1454389439"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="176.43.92.38" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389603"/>
        <to usec="0" sec="1454389615"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.131.80.38" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389592"/>
        <to usec="0" sec="1454389606"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="1.34.203.216" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389905"/>
        <to usec="0" sec="1454389916"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="2.63.61.221" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389644"/>
        <to usec="0" sec="1454389652"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="116.159.150.34" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389816"/>
        <to usec="0" sec="1454389826"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.38.156.221" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389537"/>
        <to usec="0" sec="1454389548"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.255.3.35" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389804"/>
        <to usec="0" sec="1454389815"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.82.236.35" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390018"/>
        <to usec="0" sec="1454390053"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="190.165.183.222" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389349"/>
        <to usec="0" sec="1454389359"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.23.143.33" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389495"/>
        <to usec="0" sec="1454389504"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="42.49.146.32"/>
        </slice>
        <from usec="0" sec="1454389334"/>
        <to usec="0" sec="1454389667"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="60.95.172.32" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389977"/>
        <to usec="0" sec="1454389988"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.94.41.223" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389625"/>
        <to usec="0" sec="1454389635"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.162.5.32" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389347"/>
        <to usec="0" sec="1454389357"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.160.128.25" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390014"/>
        <to usec="0" sec="1454390025"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.242.145.234" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389636"/>
        <to usec="0" sec="1454389648"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="138.164.97.251" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389273"/>
        <to usec="0" sec="1454389285"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.221.33.233" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389800"/>
        <to usec="0" sec="1454389807"/>
    </anomaly>
    <anomaly type="notice" value="0.739937,1.747200,999,1 1 1 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="39.22.19.246" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389895"/>
        <to usec="0" sec="1454389907"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="211.155.140.29" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390050"/>
        <to usec="0" sec="1454390059"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.157.66.21" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389221"/>
        <to usec="0" sec="1454389240"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="116.4.8.237" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389987"/>
        <to usec="0" sec="1454389997"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="118.164.37.254" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389730"/>
        <to usec="0" sec="1454389739"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="39.18.137.23" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389352"/>
        <to usec="0" sec="1454389362"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.132.51.255" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389624"/>
        <to usec="0" sec="1454389635"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="106.227.107.20" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389677"/>
        <to usec="0" sec="1454389686"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.171.107.12" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389456"/>
        <to usec="0" sec="1454389467"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="60.74.61.251" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389439"/>
        <to usec="0" sec="1454389450"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="89.188.87.17" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389820"/>
        <to usec="0" sec="1454389832"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.129.114.233" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389313"/>
        <to usec="0" sec="1454389323"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.200.108.233" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389947"/>
        <to usec="0" sec="1454389958"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.138.209.249" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389391"/>
        <to usec="0" sec="1454389403"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.82.204.6" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390064"/>
        <to usec="0" sec="1454390082"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.136.242.232" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389422"/>
        <to usec="0" sec="1454389948"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="193.103.20.15" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389939"/>
        <to usec="0" sec="1454389969"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.10.232.247" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390002"/>
        <to usec="0" sec="1454390013"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="115.218.15.250" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389776"/>
        <to usec="0" sec="1454389787"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.63.182.25" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389560"/>
        <to usec="0" sec="1454389570"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.218.254.6" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389541"/>
        <to usec="0" sec="1454389552"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.193.15.10" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389421"/>
        <to usec="0" sec="1454389430"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.206.119.229" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390038"/>
        <to usec="0" sec="1454390048"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.165.119.19" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454389211"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.71.74.28" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389300"/>
        <to usec="0" sec="1454389302"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="39.18.250.28" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389716"/>
        <to usec="0" sec="1454389727"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.235.179.13" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389927"/>
        <to usec="0" sec="1454389936"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="139.225.174.2" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389534"/>
        <to usec="0" sec="1454389563"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.231.19.237" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390074"/>
        <to usec="0" sec="1454390086"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.168.153.237" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390019"/>
        <to usec="0" sec="1454390034"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="188.225.220.28" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389599"/>
        <to usec="0" sec="1454389621"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="179.127.208.19" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389212"/>
        <to usec="0" sec="1454389224"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="179.228.100.30" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390032"/>
        <to usec="0" sec="1454390043"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="197.56.9.241" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389548"/>
        <to usec="0" sec="1454389561"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.115.7.239" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389312"/>
        <to usec="0" sec="1454389337"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.151.124.239" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389619"/>
        <to usec="0" sec="1454389630"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.222.220.239" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389492"/>
        <to usec="0" sec="1454389503"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="222.96.133.224" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389987"/>
        <to usec="0" sec="1454389998"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.185.236.240" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389972"/>
        <to usec="0" sec="1454389984"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.197.185.236" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389790"/>
        <to usec="0" sec="1454389801"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="186.163.174.10" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389505"/>
        <to usec="0" sec="1454389515"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="111.90.253.245" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389388"/>
        <to usec="0" sec="1454389390"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.223.197.242" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389555"/>
        <to usec="0" sec="1454389566"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="62.23.198.13" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389744"/>
        <to usec="0" sec="1454389753"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="117.92.132.13" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389304"/>
        <to usec="0" sec="1454389315"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.46.144.234" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389500"/>
        <to usec="0" sec="1454389513"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="175.175.138.242" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389496"/>
        <to usec="0" sec="1454389526"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="181.35.187.238" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389972"/>
        <to usec="0" sec="1454389982"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.152.150.19" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389634"/>
        <to usec="0" sec="1454389672"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="39.13.68.12" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389499"/>
        <to usec="0" sec="1454389507"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="46.6.107.236" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389807"/>
        <to usec="0" sec="1454389819"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.177.103.8" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389523"/>
        <to usec="0" sec="1454389552"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.196.1.247" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389287"/>
        <to usec="0" sec="1454389303"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="221.38.77.242" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389547"/>
        <to usec="0" sec="1454389558"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.167.241.245" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389420"/>
        <to usec="0" sec="1454389432"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.164.140.22" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389746"/>
        <to usec="0" sec="1454389752"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="111.12.88.22" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389958"/>
        <to usec="0" sec="1454389969"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="84.193.86.17" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389797"/>
        <to usec="0" sec="1454389808"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.136.46.17" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389577"/>
        <to usec="0" sec="1454389588"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="211.129.190.8" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389253"/>
        <to usec="0" sec="1454389265"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.223.177.247" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389700"/>
        <to usec="0" sec="1454389712"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="187.250.197.232" dst_port="53413"/>
            <filter src_ip="187.250.197.232" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389416"/>
        <to usec="0" sec="1454389680"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="218.240.138.25" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389797"/>
        <to usec="0" sec="1454389807"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.96.156.249" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389870"/>
        <to usec="0" sec="1454389873"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="213.28.141.251" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389493"/>
        <to usec="0" sec="1454389504"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="5.55.222.26" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389901"/>
        <to usec="0" sec="1454389914"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="81.25.94.7" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389417"/>
        <to usec="0" sec="1454389431"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.163.230.5" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390069"/>
        <to usec="0" sec="1454390080"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="93.95.203.231" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389776"/>
        <to usec="0" sec="1454389785"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="39.4.41.251" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389506"/>
        <to usec="0" sec="1454389518"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.3.19.5" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389207"/>
        <to usec="0" sec="1454389212"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="109.226.234.7" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389567"/>
        <to usec="0" sec="1454389575"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="181.146.152.2" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389301"/>
        <to usec="0" sec="1454389314"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="117.221.202.29" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389958"/>
        <to usec="0" sec="1454389967"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="62.137.79.3" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389658"/>
        <to usec="0" sec="1454389669"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.65.86.29" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389291"/>
        <to usec="0" sec="1454389300"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.145.35.3" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389472"/>
        <to usec="0" sec="1454389483"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.162.41.226" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389600"/>
        <to usec="0" sec="1454389611"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.90.94.29" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389552"/>
        <to usec="0" sec="1454389563"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="124.224.124.226" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389414"/>
        <to usec="0" sec="1454389425"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.30.9.1" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389355"/>
        <to usec="0" sec="1454389367"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.98.184.225" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389478"/>
        <to usec="0" sec="1454389487"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="115.221.126.30" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389452"/>
        <to usec="0" sec="1454389464"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.133.189.254" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389212"/>
        <to usec="0" sec="1454389220"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="58.174.222.31" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389419"/>
        <to usec="0" sec="1454389429"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.16.169.224" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389596"/>
        <to usec="0" sec="1454389609"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="31.224.70.0" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389689"/>
        <to usec="0" sec="1454389698"/>
    </anomaly>
    <anomaly type="notice" value="0.490816,1.728550,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="124.121.63.134" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389688"/>
        <to usec="0" sec="1454389697"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.242.205.115" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389208"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="75.85.28.73" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389496"/>
        <to usec="0" sec="1454389507"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.187.178.241" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389999"/>
        <to usec="0" sec="1454390008"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.82.165.21" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389478"/>
        <to usec="0" sec="1454389489"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="203.122.86.169" dst_ip="150.5.51.222" src_port="80" dst_port="55671"/>
        </slice>
        <from usec="0" sec="1454389644"/>
        <to usec="0" sec="1454390010"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,503,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="165.209.170.36" dst_ip="202.34.182.111" src_port="80" dst_port="62873"/>
        </slice>
        <from usec="0" sec="1454389744"/>
        <to usec="0" sec="1454389748"/>
    </anomaly>
    <anomaly type="notice" value="0.628439,1.763900,999,0 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="109.57.109.55" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389300"/>
        <to usec="0" sec="1454389302"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="79.73.250.173" dst_ip="203.81.132.32" src_port="8999" dst_port="55839"/>
        </slice>
        <from usec="0" sec="1454389716"/>
        <to usec="0" sec="1454389807"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.124.65.87" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390080"/>
        <to usec="0" sec="1454390091"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.170.161.173" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389298"/>
        <to usec="0" sec="1454389309"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.165.207.184" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389214"/>
        <to usec="0" sec="1454389225"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.63.75.172" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389248"/>
        <to usec="0" sec="1454389259"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="111.9.18.87" src_port="12200" dst_port="3128"/>
            <filter src_ip="111.9.18.87" src_port="12200" dst_port="443"/>
            <filter src_ip="111.9.18.87" src_port="12200" dst_port="80"/>
        </slice>
        <from usec="0" sec="1454389934"/>
        <to usec="0" sec="1454389939"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="17.220.197.194" dst_ip="202.34.56.9" src_port="80" dst_port="64391"/>
            <filter src_ip="17.220.197.194" dst_ip="202.34.56.9" src_port="80" dst_port="64374"/>
            <filter src_ip="17.220.197.194" dst_ip="202.34.56.9" src_port="80" dst_port="64370"/>
        </slice>
        <from usec="0" sec="1454389544"/>
        <to usec="0" sec="1454389955"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.152.136.44" dst_ip="220.93.15.196"/>
            <filter src_ip="133.152.136.44" dst_port="25"/>
            <filter dst_ip="220.93.15.196" dst_port="25"/>
        </slice>
        <from usec="0" sec="1454389236"/>
        <to usec="0" sec="1454389395"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="46.214.157.222" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389883"/>
        <to usec="0" sec="1454389894"/>
    </anomaly>
    <anomaly type="notice" value="0.749305,1.791280,999,0 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="106.57.17.239" dst_ip="150.5.124.122" src_port="46318" dst_port="55222"/>
        </slice>
        <from usec="0" sec="1454389493"/>
        <to usec="0" sec="1454389503"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="187.131.155.21" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390075"/>
        <to usec="0" sec="1454390088"/>
    </anomaly>
    <anomaly type="notice" value="0.628439,1.763900,503,0 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="104.78.248.15" dst_ip="202.34.183.220" src_port="80" dst_port="64076"/>
        </slice>
        <from usec="0" sec="1454389503"/>
        <to usec="0" sec="1454389507"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.44.168.185" dst_port="25"/>
        </slice>
        <from usec="0" sec="1454389555"/>
        <to usec="0" sec="1454389557"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.229.116.190" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389978"/>
        <to usec="0" sec="1454389980"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.198.170.227" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389878"/>
        <to usec="0" sec="1454389889"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.72.121.127" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389579"/>
        <to usec="0" sec="1454389590"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="152.182.253.135" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389207"/>
        <to usec="0" sec="1454389218"/>
    </anomaly>
    <anomaly type="notice" value="0.739937,1.747200,999,1 1 1 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="221.54.5.128" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389361"/>
        <to usec="0" sec="1454389372"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="24.158.210.80" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390009"/>
        <to usec="0" sec="1454390011"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.88.32.152" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389599"/>
        <to usec="0" sec="1454389610"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="123.145.187.188" dst_port="53413"/>
            <filter src_ip="123.145.187.188" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389279"/>
        <to usec="0" sec="1454389310"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.174.132.44" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390015"/>
        <to usec="0" sec="1454390028"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="188.118.54.137" src_port="5082" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1454389444"/>
        <to usec="0" sec="1454389446"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="46.104.94.151" src_port="40092" dst_port="123"/>
        </slice>
        <from usec="0" sec="1454389735"/>
        <to usec="0" sec="1454389782"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="83.3.125.94" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389793"/>
        <to usec="0" sec="1454389805"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="139.166.22.19"/>
        </slice>
        <from usec="0" sec="1454389647"/>
        <to usec="0" sec="1454390059"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.240.173.60" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389713"/>
        <to usec="0" sec="1454389725"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.200.137.113" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390067"/>
        <to usec="0" sec="1454390078"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="49.46.201.122" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389665"/>
        <to usec="0" sec="1454389674"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="171.136.92.65" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389924"/>
        <to usec="0" sec="1454389935"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.90.91.120" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389390"/>
        <to usec="0" sec="1454389401"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="111.89.199.235" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389984"/>
        <to usec="0" sec="1454389996"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.235.175.17" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389966"/>
        <to usec="0" sec="1454389977"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="71.189.70.151" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389906"/>
        <to usec="0" sec="1454389915"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="120.128.204.64" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390090"/>
        <to usec="0" sec="1454390100"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="159.158.156.57" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454390010"/>
        <to usec="0" sec="1454390022"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.8.212.174" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389596"/>
        <to usec="0" sec="1454389606"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="192.11.186.143" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389393"/>
        <to usec="0" sec="1454389404"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="62.137.80.121" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389702"/>
        <to usec="0" sec="1454389716"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="42.48.110.248" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389526"/>
        <to usec="0" sec="1454389538"/>
    </anomaly>
    <anomaly type="notice" value="0.628439,1.763900,999,0 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="115.1.174.224" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390020"/>
        <to usec="0" sec="1454390031"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="79.201.127.190" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389870"/>
        <to usec="0" sec="1454389877"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="43.26.26.101" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389349"/>
        <to usec="0" sec="1454389359"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.13.177.189" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389978"/>
        <to usec="0" sec="1454390015"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.49.132.79" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389639"/>
        <to usec="0" sec="1454389651"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.66.219.151" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389746"/>
        <to usec="0" sec="1454389770"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="62.52.5.196" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389327"/>
        <to usec="0" sec="1454389344"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="41.94.116.30" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389508"/>
        <to usec="0" sec="1454389517"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="49.174.7.225" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454390058"/>
        <to usec="0" sec="1454390068"/>
    </anomaly>
    <anomaly type="notice" value="0.638297,1.756470,011,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="119.244.152.210" src_port="23"/>
        </slice>
        <from usec="0" sec="1454389879"/>
        <to usec="0" sec="1454389881"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454390028"/>
    </anomaly>
    <anomaly type="notice" value="0.577153,1.728400,999,1 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="41.185.69.113" dst_ip="202.34.183.41" src_port="53778" dst_port="43611"/>
            <filter src_ip="41.185.69.113" dst_ip="202.34.183.41" src_port="500" dst_port="500"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389375"/>
    </anomaly>
    <anomaly type="notice" value="0.577153,1.728400,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="202.34.161.80" dst_ip="204.43.238.123" src_port="80"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389308"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="46.2.230.45"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389308"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="124.230.183.43"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389305"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.34.183.122"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389398"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="126.138.255.183"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389308"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="208.28.214.198"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389308"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="139.166.172.193"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389308"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="50.6.196.217"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389307"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="52.235.152.156"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389308"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="104.131.73.24"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389308"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="36.225.198.217"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389308"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="123.59.149.217"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389308"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="200.104.4.198"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454389308"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="58.153.182.153"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454389305"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="46.115.240.47"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454389308"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.34.56.195"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454389304"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.44.92.243"/>
        </slice>
        <from usec="0" sec="1454389202"/>
        <to usec="0" sec="1454389308"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="173.204.224.8"/>
        </slice>
        <from usec="0" sec="1454389202"/>
        <to usec="0" sec="1454389303"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.44.128.109"/>
        </slice>
        <from usec="0" sec="1454389207"/>
        <to usec="0" sec="1454389307"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="178.243.175.197"/>
        </slice>
        <from usec="0" sec="1454389220"/>
        <to usec="0" sec="1454389283"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="50.255.213.94"/>
        </slice>
        <from usec="0" sec="1454389223"/>
        <to usec="0" sec="1454389275"/>
    </anomaly>
    <anomaly type="notice" value="0.628439,1.763900,999,0 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="110.35.156.136" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389229"/>
        <to usec="0" sec="1454389237"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="40.160.63.189"/>
        </slice>
        <from usec="0" sec="1454389226"/>
        <to usec="0" sec="1454389288"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="61.103.105.17"/>
        </slice>
        <from usec="0" sec="1454389264"/>
        <to usec="0" sec="1454389271"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="175.30.143.38"/>
        </slice>
        <from usec="0" sec="1454389287"/>
        <to usec="0" sec="1454389308"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="119.86.102.50"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389847"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.166.198.223"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389314"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.44.39.93"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389398"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="52.148.38.168"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389397"/>
    </anomaly>
    <anomaly type="notice" value="0.577153,1.728400,999,1 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="192.60.187.57" dst_ip="150.5.50.161" src_port="5107" dst_port="64039"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454390101"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="202.43.107.225"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389398"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="192.249.108.88"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389398"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="191.204.27.224" src_port="443"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389487"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="185.225.212.131"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454390027"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="74.98.195.165"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389398"/>
    </anomaly>
    <anomaly type="notice" value="0.577153,1.728400,503,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.44.128.83" dst_ip="175.180.85.218" dst_port="80"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389397"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="180.57.37.170"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389398"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="5.167.227.253"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389398"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="52.152.43.128"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389397"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="198.211.122.228"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389384"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="203.81.139.180"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389488"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="163.44.254.211"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389391"/>
    </anomaly>
    <anomaly type="notice" value="0.577153,1.728400,503,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="68.173.228.222" dst_ip="203.81.134.15" dst_port="80"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454390028"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="66.244.99.136" dst_ip="133.152.68.16" src_port="80"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389397"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="108.64.95.144"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454390027"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="65.160.90.246"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454390028"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="133.18.93.252"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389397"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.81.140.222"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389365"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="183.79.193.229"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389322"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.44.116.162"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389389"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="17.172.195.132"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454389398"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="66.250.32.143" src_port="80"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454389387"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="122.197.85.160"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454389397"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="74.234.107.148" src_port="80"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454389386"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.44.130.251"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454389376"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,502,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="119.9.206.199"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454389246"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="114.167.229.136"/>
        </slice>
        <from usec="0" sec="1454389203"/>
        <to usec="0" sec="1454389758"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.44.129.179"/>
        </slice>
        <from usec="0" sec="1454389204"/>
        <to usec="0" sec="1454389387"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.152.211.112"/>
        </slice>
        <from usec="0" sec="1454389204"/>
        <to usec="0" sec="1454389654"/>
    </anomaly>
    <anomaly type="notice" value="0.577153,1.728400,504,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.34.181.20" dst_ip="125.128.130.36" dst_port="443"/>
        </slice>
        <from usec="0" sec="1454389205"/>
        <to usec="0" sec="1454389393"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.44.20.109"/>
        </slice>
        <from usec="0" sec="1454389206"/>
        <to usec="0" sec="1454389384"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="104.131.11.150"/>
        </slice>
        <from usec="0" sec="1454389207"/>
        <to usec="0" sec="1454389389"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.34.183.158"/>
        </slice>
        <from usec="0" sec="1454389207"/>
        <to usec="0" sec="1454389398"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.34.180.52"/>
        </slice>
        <from usec="0" sec="1454389212"/>
        <to usec="0" sec="1454389396"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.34.182.76"/>
        </slice>
        <from usec="0" sec="1454389212"/>
        <to usec="0" sec="1454389398"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="109.239.35.154"/>
        </slice>
        <from usec="0" sec="1454389214"/>
        <to usec="0" sec="1454389397"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.139.152.99"/>
        </slice>
        <from usec="0" sec="1454389215"/>
        <to usec="0" sec="1454389370"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.166.86.31"/>
        </slice>
        <from usec="0" sec="1454389216"/>
        <to usec="0" sec="1454389388"/>
    </anomaly>
    <anomaly type="notice" value="0.577153,1.728400,504,1 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="192.196.110.152" dst_ip="163.44.130.96" src_port="443" dst_port="57988"/>
            <filter src_ip="192.196.110.152" dst_ip="163.44.130.96" src_port="443" dst_port="57987"/>
        </slice>
        <from usec="0" sec="1454389216"/>
        <to usec="0" sec="1454389362"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.101.48.174"/>
        </slice>
        <from usec="0" sec="1454389218"/>
        <to usec="0" sec="1454389305"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="61.210.90.62"/>
        </slice>
        <from usec="0" sec="1454389220"/>
        <to usec="0" sec="1454389378"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="161.189.13.107"/>
        </slice>
        <from usec="0" sec="1454389221"/>
        <to usec="0" sec="1454389228"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.44.175.97"/>
        </slice>
        <from usec="0" sec="1454389223"/>
        <to usec="0" sec="1454389355"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="204.43.238.123"/>
        </slice>
        <from usec="0" sec="1454389225"/>
        <to usec="0" sec="1454389390"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="203.81.141.139"/>
        </slice>
        <from usec="0" sec="1454389225"/>
        <to usec="0" sec="1454389398"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.132.74.29"/>
        </slice>
        <from usec="0" sec="1454389226"/>
        <to usec="0" sec="1454389398"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.34.182.113"/>
        </slice>
        <from usec="0" sec="1454389227"/>
        <to usec="0" sec="1454389398"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="195.97.109.221"/>
        </slice>
        <from usec="0" sec="1454389227"/>
        <to usec="0" sec="1454389267"/>
    </anomaly>
    <anomaly type="notice" value="0.577153,1.728400,504,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.44.131.156" dst_ip="54.67.20.252" dst_port="443"/>
        </slice>
        <from usec="0" sec="1454389230"/>
        <to usec="0" sec="1454389397"/>
    </anomaly>
    <anomaly type="notice" value="0.577153,1.728400,503,1 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="104.78.254.235" dst_ip="163.44.7.138" src_port="80"/>
            <filter src_ip="104.78.254.235" dst_ip="202.34.181.14" src_port="80"/>
        </slice>
        <from usec="0" sec="1454389235"/>
        <to usec="0" sec="1454389580"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="79.74.39.86"/>
        </slice>
        <from usec="0" sec="1454389235"/>
        <to usec="0" sec="1454389382"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,020,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter src_ip="221.33.153.42"/>
        </slice>
        <from usec="0" sec="1454389240"/>
        <to usec="0" sec="1454389298"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.139.24.168"/>
        </slice>
        <from usec="0" sec="1454389241"/>
        <to usec="0" sec="1454389385"/>
    </anomaly>
    <anomaly type="notice" value="0.577153,1.728400,504,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.166.93.254" dst_ip="31.242.240.123" src_port="58639" dst_port="443"/>
            <filter src_ip="157.166.93.254" dst_ip="31.242.240.123" src_port="58638" dst_port="443"/>
            <filter src_ip="157.166.93.254" dst_ip="31.242.240.123" src_port="58591" dst_port="443"/>
            <filter src_ip="157.166.93.254" dst_ip="31.242.240.123" src_port="58590" dst_port="443"/>
        </slice>
        <from usec="0" sec="1454389241"/>
        <to usec="0" sec="1454389352"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="85.122.136.105"/>
        </slice>
        <from usec="0" sec="1454389246"/>
        <to usec="0" sec="1454389398"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="111.94.114.159"/>
        </slice>
        <from usec="0" sec="1454389259"/>
        <to usec="0" sec="1454389398"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="157.166.99.75"/>
        </slice>
        <from usec="0" sec="1454389261"/>
        <to usec="0" sec="1454389398"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.49.148.227"/>
        </slice>
        <from usec="0" sec="1454389271"/>
        <to usec="0" sec="1454389279"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="184.82.170.101"/>
        </slice>
        <from usec="0" sec="1454389272"/>
        <to usec="0" sec="1454389385"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.226.100.35"/>
        </slice>
        <from usec="0" sec="1454389279"/>
        <to usec="0" sec="1454389342"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.9.75.115"/>
        </slice>
        <from usec="0" sec="1454389290"/>
        <to usec="0" sec="1454389292"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="74.226.101.22"/>
        </slice>
        <from usec="0" sec="1454389299"/>
        <to usec="0" sec="1454389374"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="52.132.198.170"/>
        </slice>
        <from usec="0" sec="1454389315"/>
        <to usec="0" sec="1454389377"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.158.252.239"/>
        </slice>
        <from usec="0" sec="1454389317"/>
        <to usec="0" sec="1454389379"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="192.163.200.162"/>
        </slice>
        <from usec="0" sec="1454389325"/>
        <to usec="0" sec="1454389347"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="59.41.195.140"/>
        </slice>
        <from usec="0" sec="1454389339"/>
        <to usec="0" sec="1454389363"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.166.136.149"/>
        </slice>
        <from usec="0" sec="1454389357"/>
        <to usec="0" sec="1454389398"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="198.150.40.91"/>
        </slice>
        <from usec="0" sec="1454389361"/>
        <to usec="0" sec="1454389369"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.43.85.31"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389383"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="128.86.147.74"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389485"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="181.61.7.126"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389488"/>
    </anomaly>
    <anomaly type="notice" value="0.577153,1.728400,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="110.50.11.214" dst_ip="202.43.85.2" src_port="80"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454390039"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.81.135.16"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389488"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="120.168.147.115"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389488"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="133.139.3.179"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389488"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="173.62.33.149"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389487"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="17.143.183.147"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389464"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="101.39.113.46"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389487"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="177.211.51.26"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389486"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="54.63.140.174"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389357"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="61.59.50.225"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389488"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="61.151.225.199"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389458"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="36.225.51.183"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389488"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="104.78.176.218"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389485"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="124.159.168.190"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389938"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="124.66.136.56"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389457"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.44.128.181"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389486"/>
    </anomaly>
    <anomaly type="notice" value="0.617239,1.719120,504,1 1 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="31.242.250.55" dst_port="443"/>
            <filter src_ip="202.154.146.118" dst_ip="173.18.100.180" dst_port="443"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454390101"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="66.121.43.30"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454389488"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="168.23.78.117"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454389459"/>
    </anomaly>
    <anomaly type="notice" value="0.577153,1.728400,504,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="163.44.10.128" dst_ip="54.32.59.189"/>
            <filter src_ip="163.44.10.128" dst_port="443"/>
            <filter dst_ip="54.32.59.189" dst_port="443"/>
            <filter src_ip="163.44.10.128" dst_ip="54.32.56.178" dst_port="80"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454389993"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="195.154.119.185"/>
        </slice>
        <from usec="0" sec="1454389202"/>
        <to usec="0" sec="1454389487"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.34.180.96"/>
        </slice>
        <from usec="0" sec="1454389203"/>
        <to usec="0" sec="1454389474"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="54.243.127.239"/>
        </slice>
        <from usec="0" sec="1454389203"/>
        <to usec="0" sec="1454389482"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="192.70.226.193"/>
        </slice>
        <from usec="0" sec="1454389203"/>
        <to usec="0" sec="1454389480"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="185.167.92.82"/>
        </slice>
        <from usec="0" sec="1454389204"/>
        <to usec="0" sec="1454389487"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.34.183.123"/>
        </slice>
        <from usec="0" sec="1454389205"/>
        <to usec="0" sec="1454389479"/>
    </anomaly>
    <anomaly type="notice" value="0.577153,1.728400,999,1 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="49.62.153.232" src_port="993"/>
        </slice>
        <from usec="0" sec="1454389205"/>
        <to usec="0" sec="1454390092"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="91.161.24.27"/>
        </slice>
        <from usec="0" sec="1454389207"/>
        <to usec="0" sec="1454389487"/>
    </anomaly>
    <anomaly type="notice" value="0.617239,1.719120,503,1 1 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="202.34.56.159" dst_port="80"/>
            <filter dst_ip="202.42.227.61" dst_port="80"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454390095"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="74.124.248.210"/>
        </slice>
        <from usec="0" sec="1454389209"/>
        <to usec="0" sec="1454389350"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.152.68.23"/>
        </slice>
        <from usec="0" sec="1454389210"/>
        <to usec="0" sec="1454389381"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="17.151.28.204"/>
        </slice>
        <from usec="0" sec="1454389211"/>
        <to usec="0" sec="1454389486"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="17.167.155.122"/>
        </slice>
        <from usec="0" sec="1454389211"/>
        <to usec="0" sec="1454389325"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="54.106.125.209"/>
        </slice>
        <from usec="0" sec="1454389213"/>
        <to usec="0" sec="1454389472"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="198.227.125.70" src_port="20012" dst_port="443"/>
            <filter src_ip="198.227.125.70" src_port="20012" dst_port="8443"/>
            <filter src_ip="198.227.125.70" src_port="34680" dst_port="80"/>
            <filter src_ip="198.227.125.70" src_port="34680" dst_port="8080"/>
        </slice>
        <from usec="0" sec="1454389213"/>
        <to usec="0" sec="1454389488"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.34.179.75"/>
        </slice>
        <from usec="0" sec="1454389215"/>
        <to usec="0" sec="1454389488"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.44.160.176"/>
        </slice>
        <from usec="0" sec="1454389221"/>
        <to usec="0" sec="1454389488"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.25.85.103"/>
        </slice>
        <from usec="0" sec="1454389226"/>
        <to usec="0" sec="1454389410"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="103.130.246.192"/>
        </slice>
        <from usec="0" sec="1454389230"/>
        <to usec="0" sec="1454389415"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="80.47.163.153"/>
        </slice>
        <from usec="0" sec="1454389234"/>
        <to usec="0" sec="1454389476"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="67.233.5.205"/>
        </slice>
        <from usec="0" sec="1454389240"/>
        <to usec="0" sec="1454389407"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="180.201.137.19"/>
        </slice>
        <from usec="0" sec="1454389241"/>
        <to usec="0" sec="1454389370"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="67.250.228.239"/>
        </slice>
        <from usec="0" sec="1454389245"/>
        <to usec="0" sec="1454389447"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="52.129.146.167"/>
        </slice>
        <from usec="0" sec="1454389248"/>
        <to usec="0" sec="1454389365"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="220.93.167.200"/>
        </slice>
        <from usec="0" sec="1454389254"/>
        <to usec="0" sec="1454389484"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="198.218.210.44"/>
        </slice>
        <from usec="0" sec="1454389289"/>
        <to usec="0" sec="1454389472"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="216.30.240.214"/>
        </slice>
        <from usec="0" sec="1454389296"/>
        <to usec="0" sec="1454389482"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.152.149.83"/>
        </slice>
        <from usec="0" sec="1454389317"/>
        <to usec="0" sec="1454389484"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.34.180.47"/>
        </slice>
        <from usec="0" sec="1454389337"/>
        <to usec="0" sec="1454389488"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="104.78.181.239"/>
        </slice>
        <from usec="0" sec="1454389372"/>
        <to usec="0" sec="1454389488"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="217.160.95.114"/>
        </slice>
        <from usec="0" sec="1454389376"/>
        <to usec="0" sec="1454389398"/>
    </anomaly>
    <anomaly type="notice" value="0.577153,1.728400,010,1 0 0 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.137.12.81" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389402"/>
        <to usec="0" sec="1454389418"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="162.227.16.114"/>
        </slice>
        <from usec="0" sec="1454389435"/>
        <to usec="0" sec="1454389440"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.152.45.95"/>
        </slice>
        <from usec="0" sec="1454389463"/>
        <to usec="0" sec="1454389474"/>
    </anomaly>
    <anomaly type="notice" value="0.739937,1.747200,010,1 1 1 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.107.147.174" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389473"/>
        <to usec="0" sec="1454389488"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="134.248.199.254"/>
        </slice>
        <from usec="0" sec="1454389474"/>
        <to usec="0" sec="1454389485"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="72.148.20.235"/>
        </slice>
        <from usec="0" sec="1454389481"/>
        <to usec="0" sec="1454389488"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.34.179.51"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389567"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.81.154.91"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389578"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.139.208.183"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389518"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.139.226.227"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389578"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="173.18.88.177" src_port="443"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389578"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,011,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="54.25.203.191" src_port="8443"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389578"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.44.20.173"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389577"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="63.61.112.38"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389578"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="203.81.138.184"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389578"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.81.140.232"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389575"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.139.143.37"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389576"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="183.137.123.160"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389818"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="70.54.81.238"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389565"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="131.230.121.213"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389577"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="185.167.92.131"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389564"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="54.21.218.14"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454389578"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="218.221.25.159"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454389577"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="52.234.173.240"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454389578"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="61.151.245.159"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454389578"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="42.120.219.59"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454389577"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="185.167.92.188"/>
        </slice>
        <from usec="0" sec="1454389203"/>
        <to usec="0" sec="1454389570"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.152.45.119"/>
        </slice>
        <from usec="0" sec="1454389203"/>
        <to usec="0" sec="1454389575"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.34.182.101"/>
        </slice>
        <from usec="0" sec="1454389204"/>
        <to usec="0" sec="1454389560"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="64.109.84.197"/>
        </slice>
        <from usec="0" sec="1454389204"/>
        <to usec="0" sec="1454389577"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="104.157.41.206"/>
        </slice>
        <from usec="0" sec="1454389205"/>
        <to usec="0" sec="1454389577"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="192.97.192.153"/>
        </slice>
        <from usec="0" sec="1454389206"/>
        <to usec="0" sec="1454389576"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.34.179.141"/>
        </slice>
        <from usec="0" sec="1454389206"/>
        <to usec="0" sec="1454389575"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="184.239.37.31"/>
        </slice>
        <from usec="0" sec="1454389207"/>
        <to usec="0" sec="1454389440"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.152.44.107"/>
        </slice>
        <from usec="0" sec="1454389208"/>
        <to usec="0" sec="1454389560"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="185.254.211.236"/>
        </slice>
        <from usec="0" sec="1454389209"/>
        <to usec="0" sec="1454389577"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="104.78.166.243"/>
        </slice>
        <from usec="0" sec="1454389237"/>
        <to usec="0" sec="1454389573"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.44.130.252"/>
        </slice>
        <from usec="0" sec="1454389253"/>
        <to usec="0" sec="1454389574"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="27.59.147.53"/>
        </slice>
        <from usec="0" sec="1454389271"/>
        <to usec="0" sec="1454389549"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.81.128.98"/>
        </slice>
        <from usec="0" sec="1454389306"/>
        <to usec="0" sec="1454389578"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="54.72.179.91"/>
        </slice>
        <from usec="0" sec="1454389313"/>
        <to usec="0" sec="1454389531"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.44.23.184"/>
        </slice>
        <from usec="0" sec="1454389376"/>
        <to usec="0" sec="1454389572"/>
    </anomaly>
    <anomaly type="notice" value="0.577153,1.728400,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="107.185.246.43" dst_ip="202.34.181.122" src_port="80"/>
        </slice>
        <from usec="0" sec="1454389378"/>
        <to usec="0" sec="1454389543"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="177.193.85.24"/>
        </slice>
        <from usec="0" sec="1454389383"/>
        <to usec="0" sec="1454389492"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="138.34.142.30"/>
        </slice>
        <from usec="0" sec="1454389413"/>
        <to usec="0" sec="1454389578"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="54.32.231.122"/>
        </slice>
        <from usec="0" sec="1454389430"/>
        <to usec="0" sec="1454389454"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="198.81.21.107"/>
        </slice>
        <from usec="0" sec="1454389430"/>
        <to usec="0" sec="1454389442"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter src_ip="118.213.184.2"/>
        </slice>
        <from usec="0" sec="1454389460"/>
        <to usec="0" sec="1454389577"/>
    </anomaly>
    <anomaly type="notice" value="0.628439,1.763900,502,0 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="193.200.20.169" src_port="22"/>
        </slice>
        <from usec="0" sec="1454389500"/>
        <to usec="0" sec="1454389501"/>
    </anomaly>
    <anomaly type="notice" value="0.577153,1.728400,504,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.166.93.235" dst_ip="31.242.248.213" src_port="53116" dst_port="443"/>
            <filter src_ip="157.166.93.235" dst_ip="31.242.248.213" src_port="53115" dst_port="443"/>
            <filter src_ip="157.166.93.235" dst_ip="31.242.248.213" src_port="53113" dst_port="443"/>
            <filter src_ip="157.166.93.235" dst_ip="31.242.248.213" src_port="53110" dst_port="443"/>
            <filter src_ip="157.166.93.235" dst_ip="31.242.248.213" src_port="53109" dst_port="443"/>
        </slice>
        <from usec="0" sec="1454389560"/>
        <to usec="0" sec="1454389691"/>
    </anomaly>
    <anomaly type="notice" value="0.617239,1.719120,503,1 1 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="36.68.152.75" dst_ip="203.81.142.54" dst_port="80"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454390100"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="61.201.53.116"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389644"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="185.167.92.193"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454389666"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="167.231.14.13"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454389668"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="54.36.210.123"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454389935"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="212.247.164.44"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454389668"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.139.230.223"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454389663"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="80.137.133.158"/>
        </slice>
        <from usec="0" sec="1454389202"/>
        <to usec="0" sec="1454389587"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="168.208.148.157"/>
        </slice>
        <from usec="0" sec="1454389202"/>
        <to usec="0" sec="1454389666"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.132.80.76"/>
        </slice>
        <from usec="0" sec="1454389205"/>
        <to usec="0" sec="1454389624"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.166.43.165"/>
        </slice>
        <from usec="0" sec="1454389205"/>
        <to usec="0" sec="1454389848"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.152.195.55"/>
        </slice>
        <from usec="0" sec="1454389206"/>
        <to usec="0" sec="1454389523"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.139.188.163"/>
        </slice>
        <from usec="0" sec="1454389207"/>
        <to usec="0" sec="1454389658"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="17.167.139.38"/>
        </slice>
        <from usec="0" sec="1454389207"/>
        <to usec="0" sec="1454389668"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="185.167.92.6"/>
        </slice>
        <from usec="0" sec="1454389207"/>
        <to usec="0" sec="1454389667"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="124.148.37.245"/>
        </slice>
        <from usec="0" sec="1454389209"/>
        <to usec="0" sec="1454389636"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.204.115.39"/>
        </slice>
        <from usec="0" sec="1454389209"/>
        <to usec="0" sec="1454389644"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.81.128.7"/>
        </slice>
        <from usec="0" sec="1454389236"/>
        <to usec="0" sec="1454389668"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="17.142.66.245"/>
        </slice>
        <from usec="0" sec="1454389239"/>
        <to usec="0" sec="1454389662"/>
    </anomaly>
    <anomaly type="notice" value="0.577153,1.728400,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="54.25.222.86" dst_ip="133.152.68.16" src_port="80"/>
        </slice>
        <from usec="0" sec="1454389240"/>
        <to usec="0" sec="1454389667"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="209.159.75.77"/>
        </slice>
        <from usec="0" sec="1454389241"/>
        <to usec="0" sec="1454389668"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.34.182.149"/>
        </slice>
        <from usec="0" sec="1454389243"/>
        <to usec="0" sec="1454389625"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.34.180.32"/>
        </slice>
        <from usec="0" sec="1454389332"/>
        <to usec="0" sec="1454389632"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="155.112.168.120"/>
        </slice>
        <from usec="0" sec="1454389350"/>
        <to usec="0" sec="1454389668"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="64.10.195.112"/>
        </slice>
        <from usec="0" sec="1454389410"/>
        <to usec="0" sec="1454389668"/>
    </anomaly>
    <anomaly type="notice" value="0.577153,1.728400,504,1 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.44.243.1" dst_port="443"/>
            <filter dst_ip="163.44.243.1" dst_port="80"/>
        </slice>
        <from usec="0" sec="1454389263"/>
        <to usec="0" sec="1454389516"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter src_ip="113.91.42.182"/>
        </slice>
        <from usec="0" sec="1454389466"/>
        <to usec="0" sec="1454389567"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="49.208.192.167"/>
        </slice>
        <from usec="0" sec="1454389519"/>
        <to usec="0" sec="1454389547"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.13.9.52"/>
        </slice>
        <from usec="0" sec="1454389594"/>
        <to usec="0" sec="1454389610"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter src_ip="221.50.13.233"/>
        </slice>
        <from usec="0" sec="1454389603"/>
        <to usec="0" sec="1454389668"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="119.163.183.115"/>
        </slice>
        <from usec="0" sec="1454389660"/>
        <to usec="0" sec="1454389668"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="185.167.92.12"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389758"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.152.158.222"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389751"/>
    </anomaly>
    <anomaly type="notice" value="0.617239,1.719120,999,1 1 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="202.43.65.82" dst_port="19"/>
            <filter src_ip="200.43.46.46" dst_ip="150.5.124.178" dst_port="19"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454390088"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.44.116.159"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389756"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="185.225.212.6"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389758"/>
    </anomaly>
    <anomaly type="notice" value="0.617239,1.719120,504,1 1 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="23.38.17.49" dst_ip="157.166.129.210" src_port="443"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454390041"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="59.79.119.83"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389758"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="91.219.65.132"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389685"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="61.105.56.93"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389758"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.139.254.175"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389757"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="108.64.85.208"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389758"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="185.229.179.110"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389758"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.54.44.243"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389604"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="24.22.228.16"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389758"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="185.167.92.249"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389750"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="185.225.212.130"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454389758"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="220.74.164.136"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454389757"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.44.22.104"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454389754"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.223.197.174"/>
        </slice>
        <from usec="0" sec="1454389202"/>
        <to usec="0" sec="1454389758"/>
    </anomaly>
    <anomaly type="notice" value="0.577153,1.728400,504,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.34.180.24" dst_ip="23.167.189.163" dst_port="443"/>
        </slice>
        <from usec="0" sec="1454389203"/>
        <to usec="0" sec="1454389757"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.44.128.128"/>
        </slice>
        <from usec="0" sec="1454389203"/>
        <to usec="0" sec="1454389755"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.44.84.18"/>
        </slice>
        <from usec="0" sec="1454389203"/>
        <to usec="0" sec="1454390017"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.132.87.229"/>
        </slice>
        <from usec="0" sec="1454389205"/>
        <to usec="0" sec="1454389730"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="203.81.128.228" src_port="56667"/>
        </slice>
        <from usec="0" sec="1454389206"/>
        <to usec="0" sec="1454389758"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="119.112.104.49"/>
        </slice>
        <from usec="0" sec="1454389208"/>
        <to usec="0" sec="1454389749"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="210.108.0.133"/>
        </slice>
        <from usec="0" sec="1454389209"/>
        <to usec="0" sec="1454389750"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="61.210.109.88" src_port="80"/>
        </slice>
        <from usec="0" sec="1454389213"/>
        <to usec="0" sec="1454389756"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.139.123.179"/>
        </slice>
        <from usec="0" sec="1454389221"/>
        <to usec="0" sec="1454389730"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="49.152.248.254"/>
        </slice>
        <from usec="0" sec="1454389263"/>
        <to usec="0" sec="1454389687"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.44.27.63"/>
        </slice>
        <from usec="0" sec="1454389287"/>
        <to usec="0" sec="1454389758"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.34.182.4"/>
        </slice>
        <from usec="0" sec="1454389436"/>
        <to usec="0" sec="1454389737"/>
    </anomaly>
    <anomaly type="notice" value="0.577153,1.728400,504,1 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="192.70.226.162" dst_ip="133.139.58.83" src_port="443"/>
            <filter src_ip="192.70.226.162" dst_ip="157.166.14.232" src_port="80"/>
        </slice>
        <from usec="0" sec="1454389581"/>
        <to usec="0" sec="1454389754"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="123.131.85.17"/>
        </slice>
        <from usec="0" sec="1454389591"/>
        <to usec="0" sec="1454389766"/>
    </anomaly>
    <anomaly type="notice" value="0.739937,1.747200,999,1 1 1 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="186.165.4.98" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389601"/>
        <to usec="0" sec="1454389613"/>
    </anomaly>
    <anomaly type="notice" value="0.739937,1.747200,999,1 1 1 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.188.215.75" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389654"/>
        <to usec="0" sec="1454389668"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="149.147.242.198"/>
        </slice>
        <from usec="0" sec="1454389683"/>
        <to usec="0" sec="1454389746"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.161.209.214"/>
        </slice>
        <from usec="0" sec="1454389684"/>
        <to usec="0" sec="1454389697"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="61.210.76.212"/>
        </slice>
        <from usec="0" sec="1454389696"/>
        <to usec="0" sec="1454389758"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.181.212.27"/>
        </slice>
        <from usec="0" sec="1454389729"/>
        <to usec="0" sec="1454389740"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="150.5.124.122"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389848"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="66.232.51.104"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389848"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="121.105.61.47"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389848"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="63.52.39.132" src_port="80"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389847"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="43.6.136.128"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389830"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="202.43.103.236"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389848"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.44.96.12"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389846"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.166.14.157"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389764"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="104.46.204.253"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389844"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.44.22.188"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389825"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.34.180.2"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454389846"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="114.232.202.247"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454389848"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="17.143.177.36"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454389846"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.231.171.170"/>
        </slice>
        <from usec="0" sec="1454389202"/>
        <to usec="0" sec="1454389840"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="185.167.92.58"/>
        </slice>
        <from usec="0" sec="1454389203"/>
        <to usec="0" sec="1454389847"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="203.81.129.143" src_port="53"/>
        </slice>
        <from usec="0" sec="1454389203"/>
        <to usec="0" sec="1454389848"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.44.175.181"/>
        </slice>
        <from usec="0" sec="1454389203"/>
        <to usec="0" sec="1454390025"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="185.167.92.146"/>
        </slice>
        <from usec="0" sec="1454389204"/>
        <to usec="0" sec="1454389934"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.152.40.160"/>
        </slice>
        <from usec="0" sec="1454389204"/>
        <to usec="0" sec="1454389843"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="63.114.15.195"/>
        </slice>
        <from usec="0" sec="1454389204"/>
        <to usec="0" sec="1454389846"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="130.194.226.68"/>
        </slice>
        <from usec="0" sec="1454389211"/>
        <to usec="0" sec="1454389844"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.44.125.30"/>
        </slice>
        <from usec="0" sec="1454389223"/>
        <to usec="0" sec="1454389848"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.34.178.117"/>
        </slice>
        <from usec="0" sec="1454389479"/>
        <to usec="0" sec="1454389824"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="106.185.91.6"/>
        </slice>
        <from usec="0" sec="1454389533"/>
        <to usec="0" sec="1454389836"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="203.84.24.159"/>
        </slice>
        <from usec="0" sec="1454389543"/>
        <to usec="0" sec="1454389728"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.158.28.38"/>
        </slice>
        <from usec="0" sec="1454389570"/>
        <to usec="0" sec="1454389725"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="121.48.183.107"/>
        </slice>
        <from usec="0" sec="1454389663"/>
        <to usec="0" sec="1454389848"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="219.111.216.28"/>
        </slice>
        <from usec="0" sec="1454389668"/>
        <to usec="0" sec="1454389670"/>
    </anomaly>
    <anomaly type="notice" value="0.739937,1.747200,010,1 1 1 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="220.75.236.28" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389694"/>
        <to usec="0" sec="1454389707"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.58.154.179"/>
        </slice>
        <from usec="0" sec="1454389694"/>
        <to usec="0" sec="1454389720"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.139.124.235"/>
        </slice>
        <from usec="0" sec="1454389776"/>
        <to usec="0" sec="1454389848"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="49.56.53.167"/>
        </slice>
        <from usec="0" sec="1454389810"/>
        <to usec="0" sec="1454389833"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.152.69.145"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454390028"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="64.141.236.109"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389938"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="89.136.242.61"/>
        </slice>
        <from usec="0" sec="1454389202"/>
        <to usec="0" sec="1454389938"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.152.45.150"/>
        </slice>
        <from usec="0" sec="1454389202"/>
        <to usec="0" sec="1454389916"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="185.167.92.186" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389202"/>
        <to usec="0" sec="1454389937"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="158.92.7.76"/>
        </slice>
        <from usec="0" sec="1454389202"/>
        <to usec="0" sec="1454389936"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="58.159.112.159"/>
        </slice>
        <from usec="0" sec="1454389203"/>
        <to usec="0" sec="1454389923"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="201.148.156.74"/>
        </slice>
        <from usec="0" sec="1454389206"/>
        <to usec="0" sec="1454389917"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="17.172.195.77"/>
        </slice>
        <from usec="0" sec="1454389206"/>
        <to usec="0" sec="1454389935"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.231.111.39"/>
        </slice>
        <from usec="0" sec="1454389211"/>
        <to usec="0" sec="1454390028"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.44.128.17"/>
        </slice>
        <from usec="0" sec="1454389212"/>
        <to usec="0" sec="1454389923"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="203.81.134.192"/>
        </slice>
        <from usec="0" sec="1454389214"/>
        <to usec="0" sec="1454389937"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="140.204.167.220"/>
        </slice>
        <from usec="0" sec="1454389219"/>
        <to usec="0" sec="1454389895"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.45.242.124"/>
        </slice>
        <from usec="0" sec="1454389224"/>
        <to usec="0" sec="1454389916"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="194.39.107.192"/>
        </slice>
        <from usec="0" sec="1454389343"/>
        <to usec="0" sec="1454389923"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="66.29.105.244"/>
        </slice>
        <from usec="0" sec="1454389413"/>
        <to usec="0" sec="1454389938"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="185.246.31.70"/>
        </slice>
        <from usec="0" sec="1454389663"/>
        <to usec="0" sec="1454389891"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="104.113.246.142"/>
        </slice>
        <from usec="0" sec="1454389743"/>
        <to usec="0" sec="1454389805"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="208.13.104.132"/>
        </slice>
        <from usec="0" sec="1454389874"/>
        <to usec="0" sec="1454389972"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="189.20.40.82"/>
        </slice>
        <from usec="0" sec="1454389913"/>
        <to usec="0" sec="1454389929"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="202.34.160.179"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454390028"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.81.137.16"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454390028"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="118.106.61.62"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454390026"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="125.242.13.137"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454390028"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="209.159.153.70"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454390028"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="185.167.92.235"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454390028"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="41.130.207.137"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454390028"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="54.21.5.182"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454390022"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="52.131.84.62"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454390028"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="202.197.68.95"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454389998"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="218.5.146.216"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454390028"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.45.214.188"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454390027"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="210.124.160.110"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454389989"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="175.147.121.69"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454390024"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="42.88.139.120"/>
        </slice>
        <from usec="0" sec="1454389201"/>
        <to usec="0" sec="1454389997"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="185.167.92.150"/>
        </slice>
        <from usec="0" sec="1454389202"/>
        <to usec="0" sec="1454390028"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="185.167.92.231"/>
        </slice>
        <from usec="0" sec="1454389202"/>
        <to usec="0" sec="1454390018"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="59.78.248.23"/>
        </slice>
        <from usec="0" sec="1454389202"/>
        <to usec="0" sec="1454389997"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,011,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="203.81.138.180" dst_ip="39.35.113.192" src_port="3124"/>
        </slice>
        <from usec="0" sec="1454389202"/>
        <to usec="0" sec="1454390005"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.152.84.189"/>
        </slice>
        <from usec="0" sec="1454389202"/>
        <to usec="0" sec="1454390021"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.44.243.2"/>
        </slice>
        <from usec="0" sec="1454389202"/>
        <to usec="0" sec="1454390026"/>
    </anomaly>
    <anomaly type="notice" value="0.577153,1.728400,503,1 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="202.34.183.220" dst_port="443"/>
            <filter src_ip="202.34.183.220" dst_ip="202.42.227.69" dst_port="80"/>
        </slice>
        <from usec="0" sec="1454389203"/>
        <to usec="0" sec="1454389981"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.152.194.179"/>
        </slice>
        <from usec="0" sec="1454389203"/>
        <to usec="0" sec="1454390024"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.44.160.246"/>
        </slice>
        <from usec="0" sec="1454389203"/>
        <to usec="0" sec="1454390009"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.44.96.40"/>
        </slice>
        <from usec="0" sec="1454389203"/>
        <to usec="0" sec="1454390021"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="174.112.36.181"/>
        </slice>
        <from usec="0" sec="1454389203"/>
        <to usec="0" sec="1454390028"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="149.42.103.195"/>
        </slice>
        <from usec="0" sec="1454389203"/>
        <to usec="0" sec="1454389993"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="185.167.92.71"/>
        </slice>
        <from usec="0" sec="1454389204"/>
        <to usec="0" sec="1454390028"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="58.13.124.68"/>
        </slice>
        <from usec="0" sec="1454389204"/>
        <to usec="0" sec="1454389915"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="185.167.92.61"/>
        </slice>
        <from usec="0" sec="1454389205"/>
        <to usec="0" sec="1454390026"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.152.176.206"/>
        </slice>
        <from usec="0" sec="1454389205"/>
        <to usec="0" sec="1454390028"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.44.131.110"/>
        </slice>
        <from usec="0" sec="1454389205"/>
        <to usec="0" sec="1454390028"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="46.137.185.202"/>
        </slice>
        <from usec="0" sec="1454389206"/>
        <to usec="0" sec="1454389991"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.139.110.94"/>
        </slice>
        <from usec="0" sec="1454389207"/>
        <to usec="0" sec="1454389988"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.44.12.243"/>
        </slice>
        <from usec="0" sec="1454389208"/>
        <to usec="0" sec="1454390015"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="108.64.91.5"/>
        </slice>
        <from usec="0" sec="1454389209"/>
        <to usec="0" sec="1454390025"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.44.97.166"/>
        </slice>
        <from usec="0" sec="1454389209"/>
        <to usec="0" sec="1454390026"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="67.204.113.29"/>
        </slice>
        <from usec="0" sec="1454389211"/>
        <to usec="0" sec="1454389954"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.234.179.75"/>
        </slice>
        <from usec="0" sec="1454389213"/>
        <to usec="0" sec="1454390026"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="17.151.237.16"/>
        </slice>
        <from usec="0" sec="1454389213"/>
        <to usec="0" sec="1454389908"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.132.88.51"/>
        </slice>
        <from usec="0" sec="1454389214"/>
        <to usec="0" sec="1454390027"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.34.180.146"/>
        </slice>
        <from usec="0" sec="1454389215"/>
        <to usec="0" sec="1454389999"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.44.129.246"/>
        </slice>
        <from usec="0" sec="1454389215"/>
        <to usec="0" sec="1454390024"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.44.31.156"/>
        </slice>
        <from usec="0" sec="1454389217"/>
        <to usec="0" sec="1454390024"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.44.232.124"/>
        </slice>
        <from usec="0" sec="1454389218"/>
        <to usec="0" sec="1454390011"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="104.245.239.255"/>
        </slice>
        <from usec="0" sec="1454389219"/>
        <to usec="0" sec="1454390018"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.44.129.155"/>
        </slice>
        <from usec="0" sec="1454389220"/>
        <to usec="0" sec="1454390018"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.34.180.58"/>
        </slice>
        <from usec="0" sec="1454389228"/>
        <to usec="0" sec="1454389860"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="125.225.16.140"/>
        </slice>
        <from usec="0" sec="1454389233"/>
        <to usec="0" sec="1454390013"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.152.213.70"/>
        </slice>
        <from usec="0" sec="1454389247"/>
        <to usec="0" sec="1454390028"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="52.172.241.193"/>
        </slice>
        <from usec="0" sec="1454389255"/>
        <to usec="0" sec="1454390013"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="210.127.144.96"/>
        </slice>
        <from usec="0" sec="1454389480"/>
        <to usec="0" sec="1454390026"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="61.201.103.152"/>
        </slice>
        <from usec="0" sec="1454389557"/>
        <to usec="0" sec="1454389900"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="54.6.139.148"/>
        </slice>
        <from usec="0" sec="1454389594"/>
        <to usec="0" sec="1454389983"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.166.220.168"/>
        </slice>
        <from usec="0" sec="1454389606"/>
        <to usec="0" sec="1454389997"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="198.209.210.178"/>
        </slice>
        <from usec="0" sec="1454389613"/>
        <to usec="0" sec="1454389884"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="216.30.240.158"/>
        </slice>
        <from usec="0" sec="1454389629"/>
        <to usec="0" sec="1454390003"/>
    </anomaly>
    <anomaly type="notice" value="0.577153,1.728400,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="23.252.220.173" dst_ip="163.44.16.129" src_port="80" dst_port="62417"/>
            <filter src_ip="23.252.220.173" dst_ip="163.44.16.129" src_port="80" dst_port="62416"/>
            <filter src_ip="23.252.220.173" dst_ip="163.44.16.129" src_port="80" dst_port="62415"/>
        </slice>
        <from usec="0" sec="1454389666"/>
        <to usec="0" sec="1454389961"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.139.191.148"/>
        </slice>
        <from usec="0" sec="1454389671"/>
        <to usec="0" sec="1454389897"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="78.78.60.43"/>
        </slice>
        <from usec="0" sec="1454389681"/>
        <to usec="0" sec="1454389865"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="74.77.66.179"/>
        </slice>
        <from usec="0" sec="1454389701"/>
        <to usec="0" sec="1454390028"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="73.83.110.149"/>
        </slice>
        <from usec="0" sec="1454389752"/>
        <to usec="0" sec="1454390027"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.34.182.123"/>
        </slice>
        <from usec="0" sec="1454389767"/>
        <to usec="0" sec="1454389955"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="189.20.230.218"/>
        </slice>
        <from usec="0" sec="1454389778"/>
        <to usec="0" sec="1454389883"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="58.163.93.153"/>
        </slice>
        <from usec="0" sec="1454389789"/>
        <to usec="0" sec="1454390010"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.152.187.97"/>
        </slice>
        <from usec="0" sec="1454389792"/>
        <to usec="0" sec="1454390026"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="158.92.197.175"/>
        </slice>
        <from usec="0" sec="1454389799"/>
        <to usec="0" sec="1454390006"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="119.244.37.17"/>
        </slice>
        <from usec="0" sec="1454389806"/>
        <to usec="0" sec="1454390006"/>
    </anomaly>
    <anomaly type="notice" value="0.577153,1.728400,010,1 0 0 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.34.79.66" dst_port="23"/>
        </slice>
        <from usec="0" sec="1454389832"/>
        <to usec="0" sec="1454389868"/>
    </anomaly>
    <anomaly type="notice" value="0.739937,1.747200,999,1 1 1 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.167.51.60" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1454389852"/>
        <to usec="0" sec="1454389866"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.166.162.112"/>
        </slice>
        <from usec="0" sec="1454389875"/>
        <to usec="0" sec="1454389893"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="210.75.236.193"/>
        </slice>
        <from usec="0" sec="1454389876"/>
        <to usec="0" sec="1454389981"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="207.63.255.106"/>
        </slice>
        <from usec="0" sec="1454389880"/>
        <to usec="0" sec="1454390028"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="69.216.207.105"/>
        </slice>
        <from usec="0" sec="1454389898"/>
        <to usec="0" sec="1454389995"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="165.209.170.14"/>
        </slice>
        <from usec="0" sec="1454389908"/>
        <to usec="0" sec="1454389910"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="165.209.170.76"/>
        </slice>
        <from usec="0" sec="1454389923"/>
        <to usec="0" sec="1454390011"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="54.22.208.16"/>
        </slice>
        <from usec="0" sec="1454389924"/>
        <to usec="0" sec="1454389985"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.23.8.214"/>
        </slice>
        <from usec="0" sec="1454389935"/>
        <to usec="0" sec="1454390016"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="153.14.111.26"/>
        </slice>
        <from usec="0" sec="1454389941"/>
        <to usec="0" sec="1454389947"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="37.53.90.205"/>
        </slice>
        <from usec="0" sec="1454389956"/>
        <to usec="0" sec="1454389984"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.9.168.27"/>
        </slice>
        <from usec="0" sec="1454389964"/>
        <to usec="0" sec="1454389967"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="219.111.37.148"/>
        </slice>
        <from usec="0" sec="1454389997"/>
        <to usec="0" sec="1454390019"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="90.181.199.113"/>
        </slice>
        <from usec="0" sec="1454390004"/>
        <to usec="0" sec="1454390020"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="155.123.234.143"/>
        </slice>
        <from usec="0" sec="1454390007"/>
        <to usec="0" sec="1454390025"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="52.157.242.241"/>
        </slice>
        <from usec="0" sec="1454390008"/>
        <to usec="0" sec="1454390011"/>
    </anomaly>
    <anomaly type="notice" value="0.697954,1.763760,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="14.29.87.212" src_port="53"/>
        </slice>
        <from usec="0" sec="1454389200"/>
        <to usec="0" sec="1454390028"/>
    </anomaly>
</admd:annotation>
