<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="160.223.29.9" dst_ip="202.235.196.158" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981753"/>
        <to usec="0" sec="1456981956"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="46.192.185.254"/>
        </slice>
        <from usec="0" sec="1456981617"/>
        <to usec="0" sec="1456981632"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="222.113.70.198" dst_ip="150.189.245.29" src_port="25258" dst_port="7273" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981336"/>
        <to usec="0" sec="1456981811"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="202.255.48.197" dst_ip="202.235.199.149" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981304"/>
        <to usec="0" sec="1456981306"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="220.174.153.5" dst_ip="203.94.107.177" dst_port="123" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981701"/>
        <to usec="0" sec="1456981702"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="91.58.210.137" dst_ip="157.33.57.114" src_port="80" dst_port="45584" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981478"/>
        <to usec="0" sec="1456981672"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="91.58.210.132" dst_ip="150.189.81.82" src_port="80" dst_port="58463" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981203"/>
        <to usec="0" sec="1456982097"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.136.162.200" dst_ip="65.83.229.101" src_port="61704" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981374"/>
        <to usec="0" sec="1456981376"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="17.137.217.119" dst_ip="150.189.216.129" src_port="993" dst_port="50033" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981689"/>
        <to usec="0" sec="1456982029"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="72.9.178.244" dst_ip="203.94.125.90" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981894"/>
        <to usec="0" sec="1456981895"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="39.247.154.136" dst_ip="150.189.82.58" src_port="50911" dst_port="52791" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981449"/>
        <to usec="0" sec="1456981523"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.136.28.116" dst_ip="17.180.35.78" src_port="44104" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981425"/>
        <to usec="0" sec="1456981427"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="103.6.53.114" dst_ip="150.189.173.40" src_port="80" dst_port="57798" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981318"/>
        <to usec="0" sec="1456981371"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="31.179.82.204" dst_ip="163.43.131.36" src_port="443" dst_port="55740" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981527"/>
        <to usec="0" sec="1456981529"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="54.224.229.178" dst_ip="163.43.190.63" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981801"/>
        <to usec="0" sec="1456981802"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACKt">
        <slice>
            <filter src_ip="163.43.77.62"/>
        </slice>
        <from usec="0" sec="1456981523"/>
        <to usec="0" sec="1456981525"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="103.58.85.14" dst_ip="150.189.80.171" src_port="80" dst_port="52683" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981682"/>
        <to usec="0" sec="1456981684"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="71.57.40.177" dst_ip="203.94.125.87" src_port="53497" dst_port="13617" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981343"/>
        <to usec="0" sec="1456982087"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="192.255.64.149" dst_ip="202.235.38.161" src_port="62349" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981331"/>
        <to usec="0" sec="1456981334"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.43.77.43"/>
        </slice>
        <from usec="0" sec="1456981472"/>
        <to usec="0" sec="1456981475"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="23.125.133.40" dst_ip="202.228.201.156" src_port="80" dst_port="59855" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981678"/>
        <to usec="0" sec="1456981991"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.43.79.25"/>
        </slice>
        <from usec="0" sec="1456981628"/>
        <to usec="0" sec="1456981630"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="204.44.104.101" dst_ip="131.224.202.250" src_port="80" dst_port="61521" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981772"/>
        <to usec="0" sec="1456981779"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="209.206.48.227" dst_ip="163.43.131.181" src_port="443" dst_port="52787" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981416"/>
        <to usec="0" sec="1456981417"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="74.50.168.220" dst_ip="133.136.178.165" src_port="443" dst_port="52321" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981653"/>
        <to usec="0" sec="1456981957"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="99.242.185.93" dst_ip="150.189.82.58" src_port="63584" dst_port="52791" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981412"/>
        <to usec="0" sec="1456981444"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="211.182.229.25" dst_ip="163.43.27.90" src_port="80" dst_port="56899" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981684"/>
        <to usec="0" sec="1456981685"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="210.139.193.101"/>
        </slice>
        <from usec="0" sec="1456981240"/>
        <to usec="0" sec="1456981835"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.43.235.146"/>
        </slice>
        <from usec="0" sec="1456982090"/>
        <to usec="0" sec="1456982092"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="157.33.255.125"/>
        </slice>
        <from usec="0" sec="1456981352"/>
        <to usec="0" sec="1456981360"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.43.77.28" dst_ip="62.221.136.86" src_port="62875" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981312"/>
        <to usec="0" sec="1456981317"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.43.228.148" dst_ip="202.229.45.164" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981727"/>
        <to usec="0" sec="1456981729"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.43.233.183" dst_ip="207.241.23.197" src_port="63753" dst_port="993" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981209"/>
        <to usec="0" sec="1456982096"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="46.79.178.154" dst_ip="163.43.233.170" src_port="443" dst_port="65055" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981663"/>
        <to usec="0" sec="1456981664"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="14.105.178.135" dst_ip="150.189.245.29" src_port="5816" dst_port="7273" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981430"/>
        <to usec="0" sec="1456981997"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="192.13.130.169" dst_ip="150.189.81.209" src_port="80" dst_port="58725" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981663"/>
        <to usec="0" sec="1456981685"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="171.163.45.2" dst_ip="150.189.245.29" src_port="13762" dst_port="7273" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981243"/>
        <to usec="0" sec="1456981678"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="17.237.154.131" dst_ip="163.43.130.226" src_port="443" dst_port="61034" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981238"/>
        <to usec="0" sec="1456981243"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.136.124.16" dst_ip="31.179.90.124" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981956"/>
        <to usec="0" sec="1456982089"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.118.229.95" dst_ip="131.224.47.46" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981896"/>
        <to usec="0" sec="1456982024"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="68.148.24.207" dst_ip="163.43.8.221" src_port="48725" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981755"/>
        <to usec="0" sec="1456981757"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.235.197.45" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981505"/>
        <to usec="0" sec="1456982090"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="216.249.129.111"/>
        </slice>
        <from usec="0" sec="1456981204"/>
        <to usec="0" sec="1456981213"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="117.126.37.50" dst_ip="163.43.76.128" src_port="80" dst_port="50999" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981221"/>
        <to usec="0" sec="1456981225"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.125.133.20" dst_ip="203.94.110.48" src_port="80" dst_port="16123" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981230"/>
        <to usec="0" sec="1456981685"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.43.130.246" dst_ip="75.97.99.82" src_port="50076" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981345"/>
        <to usec="0" sec="1456982013"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="61.213.171.22" dst_ip="131.224.120.50" src_port="80" dst_port="50771" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981254"/>
        <to usec="0" sec="1456981256"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="218.248.126.111"/>
        </slice>
        <from usec="0" sec="1456981591"/>
        <to usec="0" sec="1456981593"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.43.247.83" dst_ip="173.52.75.212" src_port="64973" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981584"/>
        <to usec="0" sec="1456981591"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="31.179.85.116" dst_ip="163.43.131.36" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981971"/>
        <to usec="0" sec="1456981972"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="199.175.250.171" dst_ip="133.136.24.112" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981991"/>
        <to usec="0" sec="1456981999"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="192.192.112.210" dst_ip="31.179.95.9" src_port="46304" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981434"/>
        <to usec="0" sec="1456981882"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="200.127.150.138" dst_ip="133.132.39.244" src_port="7148" dst_port="45238" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981408"/>
        <to usec="0" sec="1456981410"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="23.230.82.150" dst_ip="157.33.242.45" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981715"/>
        <to usec="0" sec="1456981999"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="110.58.121.112" dst_ip="150.189.145.45" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456982068"/>
        <to usec="0" sec="1456982069"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.43.79.37" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981292"/>
        <to usec="0" sec="1456981586"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.136.110.134" dst_ip="65.83.229.78" src_port="55633" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981723"/>
        <to usec="0" sec="1456981902"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="118.168.13.2" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981451"/>
        <to usec="0" sec="1456982072"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.136.33.162" dst_ip="65.83.229.111" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456982045"/>
        <to usec="0" sec="1456982050"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="185.150.78.255" dst_ip="163.43.104.117" src_port="45700" dst_port="993" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456982010"/>
        <to usec="0" sec="1456982013"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="174.164.237.74" dst_ip="133.136.17.167" src_port="443" dst_port="49519" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981744"/>
        <to usec="0" sec="1456981745"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="163.43.104.56" dst_ip="198.229.111.1" src_port="25" dst_port="58865" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981387"/>
        <to usec="0" sec="1456981958"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.136.150.187" dst_ip="65.83.229.87" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981306"/>
        <to usec="0" sec="1456981331"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="64.45.196.197" dst_ip="163.43.251.67" src_port="443" dst_port="52547" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981940"/>
        <to usec="0" sec="1456981941"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.43.241.56"/>
        </slice>
        <from usec="0" sec="1456981532"/>
        <to usec="0" sec="1456981534"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="182.190.170.181" dst_ip="131.224.33.53" src_port="80" dst_port="54280" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981212"/>
        <to usec="0" sec="1456982012"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="188.125.60.53" dst_ip="131.224.31.190" src_port="80" dst_port="38455" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981312"/>
        <to usec="0" sec="1456982086"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.94.104.182" dst_ip="157.72.217.11" src_port="80" dst_port="9315" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981751"/>
        <to usec="0" sec="1456981753"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="222.11.77.71" dst_ip="150.189.175.141" src_port="80" dst_port="60475" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981653"/>
        <to usec="0" sec="1456981998"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.43.245.67"/>
        </slice>
        <from usec="0" sec="1456981665"/>
        <to usec="0" sec="1456981680"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="188.125.60.50" dst_ip="157.33.170.148" src_port="80" dst_port="55358" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981770"/>
        <to usec="0" sec="1456981771"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="40.131.23.65" dst_ip="133.136.30.82" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981985"/>
        <to usec="0" sec="1456982073"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.35.214.207" dst_ip="163.43.76.249" src_port="443" dst_port="51773" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981425"/>
        <to usec="0" sec="1456981427"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.43.76.207" dst_ip="31.179.94.15" src_port="49495" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456982012"/>
        <to usec="0" sec="1456982013"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.144.253.42" dst_ip="109.192.113.32" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981601"/>
        <to usec="0" sec="1456982004"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="173.27.71.83" dst_ip="202.235.196.10" src_port="443" dst_port="54394" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981671"/>
        <to usec="0" sec="1456981678"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.132.51.215" dst_ip="60.255.183.165" src_port="58659" dst_port="8237" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981711"/>
        <to usec="0" sec="1456981712"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="69.195.2.169" dst_ip="163.43.243.10" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981364"/>
        <to usec="0" sec="1456981537"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="113.1.190.46" dst_ip="150.189.245.29" src_port="10732" dst_port="7273" proto="udp"/>
        </slice>
        <from usec="0" sec="1456982018"/>
        <to usec="0" sec="1456982070"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.144.76.209" dst_ip="54.248.156.29" src_port="50853" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981679"/>
        <to usec="0" sec="1456981700"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="203.126.56.172" dst_ip="131.224.213.226" src_port="80" dst_port="56707" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981795"/>
        <to usec="0" sec="1456981944"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="91.83.78.211" dst_ip="133.136.78.96" src_port="80" dst_port="52476" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981592"/>
        <to usec="0" sec="1456981599"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.144.182.211"/>
        </slice>
        <from usec="0" sec="1456981526"/>
        <to usec="0" sec="1456981529"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="62.221.155.83" dst_ip="150.189.29.218" src_port="64916" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981215"/>
        <to usec="0" sec="1456981220"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="125.227.157.40" dst_ip="163.43.196.205" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981307"/>
        <to usec="0" sec="1456981644"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.94.125.90" dst_ip="69.45.174.250" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981876"/>
        <to usec="0" sec="1456981878"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.33.230.216"/>
        </slice>
        <from usec="0" sec="1456981750"/>
        <to usec="0" sec="1456981825"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="40.131.22.163" dst_ip="157.33.85.10" src_port="443" dst_port="60164" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981454"/>
        <to usec="0" sec="1456981603"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="183.124.136.221" dst_ip="163.43.79.37" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981518"/>
        <to usec="0" sec="1456981520"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="203.126.56.161" dst_ip="150.189.80.211" src_port="80" dst_port="65385" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981519"/>
        <to usec="0" sec="1456981941"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.35.214.223" dst_ip="163.43.246.36" src_port="443" dst_port="59230" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981502"/>
        <to usec="0" sec="1456981552"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.33.57.98" dst_ip="180.191.41.75" src_port="19169" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456982092"/>
        <to usec="0" sec="1456982094"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,502,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="192.184.172.134" dst_ip="203.94.101.31" src_port="34758" dst_port="22" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981219"/>
        <to usec="0" sec="1456982045"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.144.236.232" dst_ip="192.55.62.184" src_port="80" dst_port="61177" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981841"/>
        <to usec="0" sec="1456981842"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.43.238.153"/>
        </slice>
        <from usec="0" sec="1456981988"/>
        <to usec="0" sec="1456981990"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="157.33.122.235" dst_ip="65.83.229.41" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981936"/>
        <to usec="0" sec="1456982012"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="203.126.56.140" dst_ip="133.144.43.175" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981271"/>
        <to usec="0" sec="1456981832"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.136.214.131" dst_ip="17.235.26.51" src_port="53494" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981239"/>
        <to usec="0" sec="1456981251"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="112.211.172.246" dst_ip="203.94.97.243" src_port="51678" dst_port="8080" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981979"/>
        <to usec="0" sec="1456981980"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="192.255.71.14"/>
        </slice>
        <from usec="0" sec="1456981342"/>
        <to usec="0" sec="1456981344"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="5.187.214.242" dst_ip="150.189.81.179" src_port="80" dst_port="60580" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981786"/>
        <to usec="0" sec="1456982098"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="126.17.198.244"/>
        </slice>
        <from usec="0" sec="1456981328"/>
        <to usec="0" sec="1456981385"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="206.93.114.242" dst_ip="163.43.10.160" src_port="43360" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981598"/>
        <to usec="0" sec="1456981603"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.43.174.235"/>
        </slice>
        <from usec="0" sec="1456981461"/>
        <to usec="0" sec="1456981462"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="174.157.113.8" dst_ip="203.94.107.177" src_port="12058" dst_port="123" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981277"/>
        <to usec="0" sec="1456981279"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="202.8.243.132" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981559"/>
        <to usec="0" sec="1456981686"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.33.221.24" dst_ip="31.179.95.12" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981229"/>
        <to usec="0" sec="1456981232"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="94.153.51.6" dst_ip="163.43.129.116" src_port="1935" dst_port="50051" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981498"/>
        <to usec="0" sec="1456981920"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.235.33.4" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981430"/>
        <to usec="0" sec="1456981635"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="124.160.49.99" dst_ip="202.235.192.8" src_port="80" dst_port="59361" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981308"/>
        <to usec="0" sec="1456982007"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.179.136.176" dst_ip="203.94.98.58" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981916"/>
        <to usec="0" sec="1456981918"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="157.33.212.142" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981859"/>
        <to usec="0" sec="1456982070"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="219.138.160.137" dst_ip="203.94.107.177" src_port="3244" dst_port="123" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981576"/>
        <to usec="0" sec="1456981771"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="130.68.152.182" dst_ip="31.179.93.243" src_port="34765" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981547"/>
        <to usec="0" sec="1456981652"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.43.148.71" dst_ip="107.182.216.194" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981596"/>
        <to usec="0" sec="1456981981"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="210.191.235.124" dst_ip="163.43.84.237" src_port="443" dst_port="58172" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981599"/>
        <to usec="0" sec="1456981794"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="43.16.168.112" dst_ip="150.189.200.193" src_port="443" dst_port="52669" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981819"/>
        <to usec="0" sec="1456981821"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.43.78.108"/>
        </slice>
        <from usec="0" sec="1456981207"/>
        <to usec="0" sec="1456981793"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="73.8.235.104" dst_ip="163.43.77.175" src_port="9980" dst_port="53073" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981468"/>
        <to usec="0" sec="1456981906"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.43.77.169" dst_ip="54.137.2.135" src_port="53784" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981227"/>
        <to usec="0" sec="1456981228"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.43.78.102" dst_ip="23.71.242.201" src_port="63424" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981477"/>
        <to usec="0" sec="1456981542"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.144.152.93"/>
        </slice>
        <from usec="0" sec="1456981260"/>
        <to usec="0" sec="1456982029"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="183.176.96.154" dst_ip="163.43.77.119" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981931"/>
        <to usec="0" sec="1456981942"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.88.146.111" dst_ip="163.43.76.69" src_port="443" dst_port="9179" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981945"/>
        <to usec="0" sec="1456982022"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.43.204.93" dst_ip="173.52.75.198" src_port="59849" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981441"/>
        <to usec="0" sec="1456981811"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="112.92.206.73" dst_ip="150.189.174.127" src_port="443" dst_port="50372" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981238"/>
        <to usec="0" sec="1456981239"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="103.58.85.171" dst_ip="131.224.167.34" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981686"/>
        <to usec="0" sec="1456981688"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.33.245.149"/>
        </slice>
        <from usec="0" sec="1456981425"/>
        <to usec="0" sec="1456981427"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="61.213.189.148" dst_ip="131.224.30.135" src_port="80" dst_port="1031" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981685"/>
        <to usec="0" sec="1456981687"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="109.205.76.100" dst_ip="131.224.39.126" src_port="80" dst_port="59920" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981790"/>
        <to usec="0" sec="1456981800"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="199.154.121.173" dst_ip="163.43.130.222" src_port="80" dst_port="56312" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981976"/>
        <to usec="0" sec="1456982017"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.43.79.174" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981912"/>
        <to usec="0" sec="1456982089"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="150.185.188.128" dst_ip="203.94.109.5" src_port="38890" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981694"/>
        <to usec="0" sec="1456981697"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="157.33.100.105" dst_ip="31.179.94.15" src_port="49515" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981320"/>
        <to usec="0" sec="1456981321"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="198.50.197.176" dst_ip="163.43.130.253" src_port="443" dst_port="50276" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981315"/>
        <to usec="0" sec="1456982093"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.43.229.172" dst_ip="111.104.104.84" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981830"/>
        <to usec="0" sec="1456981954"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="182.189.25.136" dst_ip="150.189.83.31" src_port="3724" dst_port="64752" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981359"/>
        <to usec="0" sec="1456982091"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="104.182.246.71" dst_ip="150.189.82.58" src_port="65042" dst_port="52791" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981624"/>
        <to usec="0" sec="1456981625"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,502,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="119.178.97.135"/>
        </slice>
        <from usec="0" sec="1456981247"/>
        <to usec="0" sec="1456981615"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.136.24.91"/>
        </slice>
        <from usec="0" sec="1456981429"/>
        <to usec="0" sec="1456981507"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.33.245.130"/>
        </slice>
        <from usec="0" sec="1456982019"/>
        <to usec="0" sec="1456982021"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="49.65.0.124" dst_ip="150.189.81.82" src_port="80" dst_port="61502" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456982077"/>
        <to usec="0" sec="1456982078"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="69.40.52.127" dst_ip="150.189.82.58" src_port="59621" dst_port="52791" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981378"/>
        <to usec="0" sec="1456981482"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.43.232.63" dst_ip="198.60.234.143" src_port="51938" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456982054"/>
        <to usec="0" sec="1456982057"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="193.188.226.61"/>
        </slice>
        <from usec="0" sec="1456981352"/>
        <to usec="0" sec="1456982045"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="77.209.97.205" dst_ip="163.43.130.222" src_port="182" dst_port="56302" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981764"/>
        <to usec="0" sec="1456981766"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.144.73.198" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981442"/>
        <to usec="0" sec="1456981940"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="91.83.76.201"/>
        </slice>
        <from usec="0" sec="1456981822"/>
        <to usec="0" sec="1456981832"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="131.224.102.54" dst_ip="23.13.180.150" src_port="80" dst_port="54101" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981203"/>
        <to usec="0" sec="1456982041"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="49.149.2.57" dst_ip="202.235.219.133" src_port="62719" dst_port="993" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981271"/>
        <to usec="0" sec="1456981851"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.43.78.51"/>
        </slice>
        <from usec="0" sec="1456981472"/>
        <to usec="0" sec="1456981608"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.144.255.207"/>
        </slice>
        <from usec="0" sec="1456981481"/>
        <to usec="0" sec="1456981483"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.43.124.48"/>
        </slice>
        <from usec="0" sec="1456981750"/>
        <to usec="0" sec="1456982092"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="65.235.245.215" dst_ip="203.94.107.177" src_port="30001" dst_port="123" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981712"/>
        <to usec="0" sec="1456981717"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="61.5.253.209" dst_ip="150.189.26.181" src_port="49188" dst_port="4242" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981727"/>
        <to usec="0" sec="1456981728"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.43.172.215" dst_ip="54.250.229.9" src_port="53638" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981577"/>
        <to usec="0" sec="1456982079"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.144.239.38" dst_ip="5.74.120.203" src_port="80" dst_port="38058" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981609"/>
        <to usec="0" sec="1456981991"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.43.99.38"/>
        </slice>
        <from usec="0" sec="1456981753"/>
        <to usec="0" sec="1456981756"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,502,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="115.187.227.37" dst_ip="203.94.110.78" src_port="54967" dst_port="22" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981380"/>
        <to usec="0" sec="1456981481"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="192.26.84.219" dst_ip="163.43.78.234" src_port="443" dst_port="52045" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981930"/>
        <to usec="0" sec="1456981932"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="108.190.51.217" dst_ip="150.189.153.207" src_port="443" dst_port="63187" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981975"/>
        <to usec="0" sec="1456981977"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.43.234.36" dst_ip="31.179.83.109" src_port="57447" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981733"/>
        <to usec="0" sec="1456982100"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.94.105.32" dst_ip="141.200.190.149" src_port="80" dst_port="38407" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981938"/>
        <to usec="0" sec="1456981940"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.136.207.242" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981217"/>
        <to usec="0" sec="1456982005"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="126.252.4.243" dst_ip="163.43.229.9" src_port="52964" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981405"/>
        <to usec="0" sec="1456981407"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="23.201.166.19" dst_ip="131.224.213.104" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981391"/>
        <to usec="0" sec="1456982081"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.94.98.16"/>
        </slice>
        <from usec="0" sec="1456981900"/>
        <to usec="0" sec="1456981907"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="103.52.167.5" dst_ip="163.43.229.9" src_port="26313" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981639"/>
        <to usec="0" sec="1456981641"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="173.61.234.12" dst_ip="157.33.136.141" src_port="443" dst_port="63718" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981897"/>
        <to usec="0" sec="1456981898"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.94.97.243" dst_ip="106.179.26.128" src_port="8080" dst_port="44773" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981767"/>
        <to usec="0" sec="1456981945"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.43.187.241"/>
        </slice>
        <from usec="0" sec="1456981600"/>
        <to usec="0" sec="1456981602"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="203.94.106.8" dst_ip="110.186.38.158" src_port="80" dst_port="55083" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981610"/>
        <to usec="0" sec="1456981878"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="116.174.172.12" dst_ip="203.94.98.57" dst_port="993" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981650"/>
        <to usec="0" sec="1456981949"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="192.255.68.20" dst_ip="202.235.38.161" src_port="31029" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981339"/>
        <to usec="0" sec="1456981341"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="202.210.231.241" dst_ip="163.43.238.153" src_port="80" dst_port="55863" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981772"/>
        <to usec="0" sec="1456981773"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="124.160.95.230" dst_ip="202.235.200.244" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981665"/>
        <to usec="0" sec="1456981666"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="188.190.191.230" dst_ip="163.43.248.189" src_port="80" dst_port="52605" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981350"/>
        <to usec="0" sec="1456981351"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.235.192.251"/>
        </slice>
        <from usec="0" sec="1456981707"/>
        <to usec="0" sec="1456981709"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="182.89.31.2" dst_ip="163.43.16.165" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981367"/>
        <to usec="0" sec="1456981369"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="173.62.44.227" dst_ip="157.33.26.171" src_port="1935" dst_port="49345" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981260"/>
        <to usec="0" sec="1456982089"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="207.254.115.253" dst_ip="157.33.25.14" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981249"/>
        <to usec="0" sec="1456981877"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="31.179.85.72" dst_ip="31.179.85.72" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456982098"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,503,1 1 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="163.43.179.59" dst_ip="91.27.161.190"/>
            <filter src_ip="163.43.179.59" dst_port="80"/>
            <filter dst_ip="91.27.161.190" dst_port="80"/>
        </slice>
        <from usec="0" sec="1456981790"/>
        <to usec="0" sec="1456981851"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="222.197.116.55" dst_ip="131.224.103.168" dst_port="80"/>
            <filter src_ip="91.54.19.105" dst_ip="131.224.103.168" dst_port="80"/>
        </slice>
        <from usec="0" sec="1456981967"/>
        <to usec="0" sec="1456982095"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="130.68.147.174" dst_port="25"/>
        </slice>
        <from usec="0" sec="1456981231"/>
        <to usec="0" sec="1456982042"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="150.189.64.205" dst_ip="150.189.64.205" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981315"/>
        <to usec="0" sec="1456981928"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="108.179.216.73"/>
        </slice>
        <from usec="0" sec="1456981676"/>
        <to usec="0" sec="1456981788"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="118.244.16.16" dst_ip="163.43.104.117" dst_port="993"/>
        </slice>
        <from usec="0" sec="1456981219"/>
        <to usec="0" sec="1456981828"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,503,1 1 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="104.18.184.158" dst_ip="133.144.253.42" dst_port="80"/>
            <filter src_ip="91.54.19.74" dst_ip="133.144.253.42" dst_port="80"/>
        </slice>
        <from usec="0" sec="1456981472"/>
        <to usec="0" sec="1456981533"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="203.94.100.100" dst_ip="203.94.100.100" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981205"/>
        <to usec="0" sec="1456982090"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="23.247.46.48" dst_ip="150.189.161.113" src_port="80"/>
        </slice>
        <from usec="0" sec="1456981809"/>
        <to usec="0" sec="1456982016"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.43.77.8" dst_ip="202.229.76.177" dst_port="80"/>
        </slice>
        <from usec="0" sec="1456981389"/>
        <to usec="0" sec="1456982057"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="202.235.38.67"/>
        </slice>
        <from usec="0" sec="1456982057"/>
        <to usec="0" sec="1456982059"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.43.78.245" dst_ip="199.236.137.62" dst_port="80"/>
        </slice>
        <from usec="0" sec="1456981557"/>
        <to usec="0" sec="1456981624"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.189.8.12" dst_port="993"/>
            <filter dst_ip="150.189.8.12" dst_port="143"/>
        </slice>
        <from usec="0" sec="1456981287"/>
        <to usec="0" sec="1456982066"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="8.69.150.46" dst_ip="203.94.106.8" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981559"/>
        <to usec="0" sec="1456981562"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="157.30.69.1" dst_ip="163.43.78.168" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981589"/>
        <to usec="0" sec="1456982010"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="17.173.107.188" dst_ip="203.94.104.78" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981800"/>
        <to usec="0" sec="1456981802"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="23.125.133.38" dst_ip="202.235.208.193" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981986"/>
        <to usec="0" sec="1456981988"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="180.99.38.161" dst_ip="150.189.172.65" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981431"/>
        <to usec="0" sec="1456982078"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="104.174.216.204" dst_ip="133.136.144.244" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981707"/>
        <to usec="0" sec="1456981786"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="203.35.214.192" dst_ip="202.235.36.88" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981355"/>
        <to usec="0" sec="1456981356"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="168.0.252.207" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981385"/>
        <to usec="0" sec="1456981531"/>
    </anomaly>
    <anomaly type="notice" value="1.427760,2.151730,999,1 1 1 1 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="113.131.251.237" src_port="110"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456982099"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="183.176.96.163" dst_ip="163.43.186.57" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981931"/>
        <to usec="0" sec="1456981942"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="217.63.52.73" dst_ip="203.94.102.112" src_port="3303" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981602"/>
        <to usec="0" sec="1456981886"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="124.160.77.155" dst_ip="202.235.32.19" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981770"/>
        <to usec="0" sec="1456981771"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.30.249.193"/>
        </slice>
        <from usec="0" sec="1456981798"/>
        <to usec="0" sec="1456981891"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="211.239.145.207" dst_ip="202.228.201.156" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981894"/>
        <to usec="0" sec="1456981895"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="61.213.182.8" dst_ip="131.224.202.154" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981807"/>
        <to usec="0" sec="1456981809"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="208.45.16.16" dst_ip="157.33.133.249" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981662"/>
        <to usec="0" sec="1456981663"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="61.213.182.13" dst_ip="150.189.242.143" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981817"/>
        <to usec="0" sec="1456982011"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="112.177.214.192" dst_ip="203.94.103.52" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981204"/>
        <to usec="0" sec="1456982092"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.136.178.153" dst_ip="219.137.110.150" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981597"/>
        <to usec="0" sec="1456981604"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.43.149.29"/>
        </slice>
        <from usec="0" sec="1456982066"/>
        <to usec="0" sec="1456982068"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.144.147.223"/>
        </slice>
        <from usec="0" sec="1456981455"/>
        <to usec="0" sec="1456981457"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.33.247.41" dst_ip="219.137.110.150" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981281"/>
        <to usec="0" sec="1456981284"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.16.245.14"/>
        </slice>
        <from usec="0" sec="1456981690"/>
        <to usec="0" sec="1456981692"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="131.224.167.237"/>
        </slice>
        <from usec="0" sec="1456981792"/>
        <to usec="0" sec="1456981794"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="49.156.10.150" dst_ip="163.43.198.23" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981308"/>
        <to usec="0" sec="1456981310"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.136.17.184" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981701"/>
        <to usec="0" sec="1456981769"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.136.89.76"/>
        </slice>
        <from usec="0" sec="1456981308"/>
        <to usec="0" sec="1456981313"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.43.17.42" dst_ip="104.173.165.253" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981385"/>
        <to usec="0" sec="1456981951"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.33.57.92" dst_ip="17.17.243.75" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981833"/>
        <to usec="0" sec="1456981835"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.43.76.249"/>
        </slice>
        <from usec="0" sec="1456981425"/>
        <to usec="0" sec="1456981616"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.144.153.136"/>
        </slice>
        <from usec="0" sec="1456981832"/>
        <to usec="0" sec="1456981834"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="14.29.96.129" dst_ip="203.94.107.177" dst_port="123" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981511"/>
        <to usec="0" sec="1456981513"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="104.8.225.6"/>
        </slice>
        <from usec="0" sec="1456981481"/>
        <to usec="0" sec="1456981483"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="118.168.98.156" dst_ip="202.235.36.202" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981741"/>
        <to usec="0" sec="1456981744"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="118.246.23.135"/>
        </slice>
        <from usec="0" sec="1456982079"/>
        <to usec="0" sec="1456982081"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="117.31.232.129" dst_ip="163.43.198.23" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981523"/>
        <to usec="0" sec="1456981705"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.235.196.70"/>
        </slice>
        <from usec="0" sec="1456981236"/>
        <to usec="0" sec="1456981302"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="118.168.68.74"/>
        </slice>
        <from usec="0" sec="1456982058"/>
        <to usec="0" sec="1456982077"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.43.251.65"/>
        </slice>
        <from usec="0" sec="1456981780"/>
        <to usec="0" sec="1456981914"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.94.122.109"/>
        </slice>
        <from usec="0" sec="1456981550"/>
        <to usec="0" sec="1456981553"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.43.27.90" dst_ip="104.173.165.253" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981877"/>
        <to usec="0" sec="1456981894"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.43.176.155"/>
        </slice>
        <from usec="0" sec="1456982059"/>
        <to usec="0" sec="1456982063"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.43.76.116"/>
        </slice>
        <from usec="0" sec="1456981857"/>
        <to usec="0" sec="1456981858"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.33.255.162"/>
        </slice>
        <from usec="0" sec="1456981719"/>
        <to usec="0" sec="1456981734"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="202.235.200.69"/>
        </slice>
        <from usec="0" sec="1456981629"/>
        <to usec="0" sec="1456981649"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.136.76.107"/>
        </slice>
        <from usec="0" sec="1456981824"/>
        <to usec="0" sec="1456981861"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.33.93.75"/>
        </slice>
        <from usec="0" sec="1456981469"/>
        <to usec="0" sec="1456981471"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.136.252.85"/>
        </slice>
        <from usec="0" sec="1456981629"/>
        <to usec="0" sec="1456981631"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.136.42.82" dst_ip="17.17.244.149" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981953"/>
        <to usec="0" sec="1456981955"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.94.104.78"/>
        </slice>
        <from usec="0" sec="1456981800"/>
        <to usec="0" sec="1456981811"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.43.12.187" dst_port="443"/>
            <filter dst_ip="163.43.12.187" dst_port="80"/>
        </slice>
        <from usec="0" sec="1456981272"/>
        <to usec="0" sec="1456981998"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.94.104.85"/>
        </slice>
        <from usec="0" sec="1456981239"/>
        <to usec="0" sec="1456981241"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.144.43.184"/>
        </slice>
        <from usec="0" sec="1456981537"/>
        <to usec="0" sec="1456981540"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.144.153.67"/>
        </slice>
        <from usec="0" sec="1456981601"/>
        <to usec="0" sec="1456981603"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="61.251.22.124"/>
        </slice>
        <from usec="0" sec="1456981514"/>
        <to usec="0" sec="1456981517"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.235.208.193"/>
        </slice>
        <from usec="0" sec="1456981992"/>
        <to usec="0" sec="1456981994"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.144.43.204"/>
        </slice>
        <from usec="0" sec="1456981348"/>
        <to usec="0" sec="1456981354"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="203.94.104.41"/>
        </slice>
        <from usec="0" sec="1456981712"/>
        <to usec="0" sec="1456981714"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.43.32.36"/>
        </slice>
        <from usec="0" sec="1456981215"/>
        <to usec="0" sec="1456981857"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.43.172.218"/>
        </slice>
        <from usec="0" sec="1456981803"/>
        <to usec="0" sec="1456981809"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="126.12.246.38"/>
        </slice>
        <from usec="0" sec="1456981883"/>
        <to usec="0" sec="1456981893"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="157.33.102.33" dst_ip="180.191.56.69" dst_port="22222" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981727"/>
        <to usec="0" sec="1456981729"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="203.94.104.17"/>
        </slice>
        <from usec="0" sec="1456981483"/>
        <to usec="0" sec="1456981533"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.136.62.4" dst_ip="17.173.107.219" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456982030"/>
        <to usec="0" sec="1456982040"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="49.158.32.10"/>
        </slice>
        <from usec="0" sec="1456981648"/>
        <to usec="0" sec="1456981651"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.43.32.8"/>
        </slice>
        <from usec="0" sec="1456981268"/>
        <to usec="0" sec="1456981295"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="49.158.10.23"/>
        </slice>
        <from usec="0" sec="1456982098"/>
        <to usec="0" sec="1456982100"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.136.245.247"/>
        </slice>
        <from usec="0" sec="1456982058"/>
        <to usec="0" sec="1456982060"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.43.231.243"/>
        </slice>
        <from usec="0" sec="1456981772"/>
        <to usec="0" sec="1456982050"/>
    </anomaly>
    <anomaly type="notice" value="0.971818,2.103030,504,1 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.43.12.185" dst_port="443"/>
        </slice>
        <from usec="0" sec="1456981308"/>
        <to usec="0" sec="1456982046"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.150.60.10"/>
        </slice>
        <from usec="0" sec="1456981272"/>
        <to usec="0" sec="1456981274"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="115.8.13.124" dst_ip="115.8.13.124" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981569"/>
        <to usec="0" sec="1456982082"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="219.137.110.150" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981790"/>
        <to usec="0" sec="1456981794"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="115.226.23.164" dst_ip="133.136.104.215"/>
            <filter src_ip="115.226.23.164" dst_port="53"/>
            <filter src_ip="4.87.227.158" dst_ip="133.136.104.215" dst_port="53"/>
        </slice>
        <from usec="0" sec="1456981239"/>
        <to usec="0" sec="1456982092"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.134.191.249"/>
        </slice>
        <from usec="0" sec="1456981989"/>
        <to usec="0" sec="1456981991"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,ipv46tun">
        <slice>
            <filter src_ip="149.21.37.72" dst_ip="203.94.107.184"/>
        </slice>
        <from usec="0" sec="1456981204"/>
        <to usec="0" sec="1456981999"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="157.33.244.74" dst_ip="17.152.19.165" dst_port="993"/>
            <filter src_ip="157.33.31.97" dst_ip="17.152.19.165" dst_port="993"/>
        </slice>
        <from usec="0" sec="1456981324"/>
        <to usec="0" sec="1456981653"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.4.243.51" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981563"/>
        <to usec="0" sec="1456981570"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.197.166.162"/>
        </slice>
        <from usec="0" sec="1456981841"/>
        <to usec="0" sec="1456981852"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="58.86.122.157" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981981"/>
        <to usec="0" sec="1456981996"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.254.163.225" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1456982074"/>
        <to usec="0" sec="1456982081"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.35.202.71" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981907"/>
        <to usec="0" sec="1456981918"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="82.15.41.69" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981917"/>
        <to usec="0" sec="1456981919"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="42.164.5.40"/>
        </slice>
        <from usec="0" sec="1456981439"/>
        <to usec="0" sec="1456981458"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.162.64.175"/>
        </slice>
        <from usec="0" sec="1456982065"/>
        <to usec="0" sec="1456982076"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="46.224.179.76" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981633"/>
        <to usec="0" sec="1456981642"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.101.20.177" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981725"/>
        <to usec="0" sec="1456981731"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="80.132.187.126" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981778"/>
        <to usec="0" sec="1456981783"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.238.173.77" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981723"/>
        <to usec="0" sec="1456981733"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.136.147.75"/>
        </slice>
        <from usec="0" sec="1456981746"/>
        <to usec="0" sec="1456981749"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.154.221.65" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981464"/>
        <to usec="0" sec="1456981486"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="218.162.67.56" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981499"/>
        <to usec="0" sec="1456981508"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.20.31.60" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981314"/>
        <to usec="0" sec="1456981324"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.155.197.62" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981718"/>
        <to usec="0" sec="1456981730"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="218.80.215.80"/>
        </slice>
        <from usec="0" sec="1456981677"/>
        <to usec="0" sec="1456981693"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="203.125.165.44" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981509"/>
        <to usec="0" sec="1456981519"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="158.222.16.209" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981563"/>
        <to usec="0" sec="1456981578"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="110.228.122.215" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981753"/>
        <to usec="0" sec="1456981757"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.242.161.89" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981847"/>
        <to usec="0" sec="1456981858"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.184.103.93" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1456982080"/>
        <to usec="0" sec="1456982091"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="61.157.67.3" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981280"/>
        <to usec="0" sec="1456981291"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="185.144.168.226" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981669"/>
        <to usec="0" sec="1456981678"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="120.239.53.101" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981696"/>
        <to usec="0" sec="1456981708"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.177.146.155" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981519"/>
        <to usec="0" sec="1456981533"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="119.73.109.7" dst_port="139" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981961"/>
        <to usec="0" sec="1456981962"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="60.99.251.0" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981302"/>
        <to usec="0" sec="1456981307"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.94.99.144" src_port="28179"/>
            <filter src_ip="203.94.99.144" dst_port="443"/>
        </slice>
        <from usec="0" sec="1456981256"/>
        <to usec="0" sec="1456981979"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="180.108.153.249" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981222"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="190.26.58.249" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981853"/>
        <to usec="0" sec="1456981855"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.19.207.99" dst_port="22" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981207"/>
        <to usec="0" sec="1456981585"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.2.191.30" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981747"/>
        <to usec="0" sec="1456981772"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="58.221.17.97" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981713"/>
        <to usec="0" sec="1456981721"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="212.54.185.127"/>
        </slice>
        <from usec="0" sec="1456981676"/>
        <to usec="0" sec="1456981699"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="82.34.229.135" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981456"/>
        <to usec="0" sec="1456981471"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="118.227.34.76" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981753"/>
        <to usec="0" sec="1456981758"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="218.68.55.70"/>
        </slice>
        <from usec="0" sec="1456981750"/>
        <to usec="0" sec="1456981771"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="98.174.155.105" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981430"/>
        <to usec="0" sec="1456981447"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.130.176.148" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981813"/>
        <to usec="0" sec="1456981838"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.4.160.94" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981630"/>
        <to usec="0" sec="1456981654"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.195.129.154"/>
        </slice>
        <from usec="0" sec="1456981503"/>
        <to usec="0" sec="1456981525"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="218.41.65.160" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981759"/>
        <to usec="0" sec="1456981774"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="83.117.76.171" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981234"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="218.110.227.180" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981738"/>
        <to usec="0" sec="1456981747"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="37.87.51.74"/>
        </slice>
        <from usec="0" sec="1456981307"/>
        <to usec="0" sec="1456981327"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.59.107.115" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981517"/>
        <to usec="0" sec="1456981544"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="109.121.132.93"/>
        </slice>
        <from usec="0" sec="1456981522"/>
        <to usec="0" sec="1456981533"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="24.245.233.159" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1456982048"/>
        <to usec="0" sec="1456982055"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="79.74.19.83" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981697"/>
        <to usec="0" sec="1456981706"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.190.123.195" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981266"/>
        <to usec="0" sec="1456981274"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.222.31.194" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981740"/>
        <to usec="0" sec="1456981751"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="90.164.247.51" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981613"/>
        <to usec="0" sec="1456981624"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.139.224.53" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981811"/>
        <to usec="0" sec="1456981837"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="151.44.112.194" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981946"/>
        <to usec="0" sec="1456981958"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="49.51.247.213" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981911"/>
        <to usec="0" sec="1456981921"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="101.215.146.46" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981428"/>
        <to usec="0" sec="1456981452"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.129.174.35"/>
        </slice>
        <from usec="0" sec="1456981472"/>
        <to usec="0" sec="1456981485"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="120.235.20.239" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981274"/>
        <to usec="0" sec="1456981284"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.59.176.22" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456982044"/>
        <to usec="0" sec="1456982060"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.43.76.19"/>
        </slice>
        <from usec="0" sec="1456981878"/>
        <to usec="0" sec="1456981893"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="221.147.165.238" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981908"/>
        <to usec="0" sec="1456981920"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="221.195.191.16" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981960"/>
        <to usec="0" sec="1456981968"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="1.228.199.240" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981432"/>
        <to usec="0" sec="1456981443"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.14.172.10" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981528"/>
        <to usec="0" sec="1456981552"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="59.49.246.25"/>
        </slice>
        <from usec="0" sec="1456982083"/>
        <to usec="0" sec="1456982095"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,020,1 0 0 0 0 0 0 0 0 0 0 0,hostout">
        <slice>
            <filter src_ip="203.94.118.118"/>
        </slice>
        <from usec="0" sec="1456981797"/>
        <to usec="0" sec="1456981951"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.132.34.3"/>
        </slice>
        <from usec="0" sec="1456981354"/>
        <to usec="0" sec="1456981356"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,011,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="111.19.101.31" src_port="8080" dst_port="12200"/>
        </slice>
        <from usec="0" sec="1456981755"/>
        <to usec="0" sec="1456981757"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="220.173.77.84"/>
        </slice>
        <from usec="0" sec="1456981663"/>
        <to usec="0" sec="1456981664"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="192.69.164.206"/>
        </slice>
        <from usec="0" sec="1456981387"/>
        <to usec="0" sec="1456981389"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="126.88.176.233"/>
        </slice>
        <from usec="0" sec="1456981262"/>
        <to usec="0" sec="1456981265"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.136.14.122"/>
        </slice>
        <from usec="0" sec="1456981767"/>
        <to usec="0" sec="1456981769"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.43.79.148"/>
        </slice>
        <from usec="0" sec="1456981287"/>
        <to usec="0" sec="1456981291"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.43.124.26"/>
        </slice>
        <from usec="0" sec="1456981523"/>
        <to usec="0" sec="1456981525"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="23.13.180.150" dst_ip="131.224.102.54" src_port="54101" dst_port="80"/>
            <filter src_ip="198.24.119.86" dst_ip="131.224.102.54" src_port="46708" dst_port="80"/>
        </slice>
        <from usec="0" sec="1456981942"/>
        <to usec="0" sec="1456982075"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="204.196.119.124"/>
        </slice>
        <from usec="0" sec="1456982028"/>
        <to usec="0" sec="1456982030"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.136.181.10"/>
        </slice>
        <from usec="0" sec="1456981384"/>
        <to usec="0" sec="1456981387"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.132.43.202"/>
        </slice>
        <from usec="0" sec="1456981620"/>
        <to usec="0" sec="1456981622"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.43.129.2"/>
        </slice>
        <from usec="0" sec="1456981437"/>
        <to usec="0" sec="1456981439"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="131.224.42.145"/>
        </slice>
        <from usec="0" sec="1456981830"/>
        <to usec="0" sec="1456981832"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="182.158.102.227"/>
        </slice>
        <from usec="0" sec="1456981214"/>
        <to usec="0" sec="1456981216"/>
    </anomaly>
    <anomaly type="notice" value="0.971818,2.103030,020,1 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="209.113.166.11"/>
        </slice>
        <from usec="0" sec="1456981215"/>
        <to usec="0" sec="1456981888"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.144.214.213"/>
        </slice>
        <from usec="0" sec="1456982006"/>
        <to usec="0" sec="1456982008"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.136.191.202"/>
        </slice>
        <from usec="0" sec="1456981450"/>
        <to usec="0" sec="1456981452"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.144.237.11"/>
        </slice>
        <from usec="0" sec="1456981997"/>
        <to usec="0" sec="1456981999"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="219.48.48.189"/>
        </slice>
        <from usec="0" sec="1456981976"/>
        <to usec="0" sec="1456981979"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.33.0.195"/>
        </slice>
        <from usec="0" sec="1456981907"/>
        <to usec="0" sec="1456981909"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.43.85.83"/>
        </slice>
        <from usec="0" sec="1456981369"/>
        <to usec="0" sec="1456981371"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.33.240.16"/>
        </slice>
        <from usec="0" sec="1456982002"/>
        <to usec="0" sec="1456982004"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="122.143.32.71"/>
        </slice>
        <from usec="0" sec="1456981446"/>
        <to usec="0" sec="1456981484"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="219.104.145.184"/>
        </slice>
        <from usec="0" sec="1456981752"/>
        <to usec="0" sec="1456981754"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="126.205.72.88"/>
        </slice>
        <from usec="0" sec="1456981606"/>
        <to usec="0" sec="1456981608"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="49.150.6.97"/>
        </slice>
        <from usec="0" sec="1456981224"/>
        <to usec="0" sec="1456981226"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.136.151.80"/>
        </slice>
        <from usec="0" sec="1456981316"/>
        <to usec="0" sec="1456981318"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="157.33.245.146" dst_ip="17.150.35.2"/>
            <filter src_ip="157.33.245.146" dst_port="443"/>
            <filter src_ip="157.33.245.238" dst_ip="17.150.35.2" dst_port="443"/>
        </slice>
        <from usec="0" sec="1456981216"/>
        <to usec="0" sec="1456981248"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="187.96.227.160"/>
        </slice>
        <from usec="0" sec="1456981203"/>
        <to usec="0" sec="1456981210"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.43.131.176"/>
        </slice>
        <from usec="0" sec="1456982055"/>
        <to usec="0" sec="1456982057"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.12.35.133"/>
        </slice>
        <from usec="0" sec="1456982033"/>
        <to usec="0" sec="1456982035"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.43.76.61"/>
        </slice>
        <from usec="0" sec="1456982020"/>
        <to usec="0" sec="1456982022"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.198.251.236"/>
        </slice>
        <from usec="0" sec="1456981522"/>
        <to usec="0" sec="1456981532"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.184.26.173"/>
        </slice>
        <from usec="0" sec="1456981284"/>
        <to usec="0" sec="1456981287"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.184.24.89"/>
        </slice>
        <from usec="0" sec="1456981762"/>
        <to usec="0" sec="1456981764"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="13.180.4.46"/>
        </slice>
        <from usec="0" sec="1456981767"/>
        <to usec="0" sec="1456981970"/>
    </anomaly>
    <anomaly type="notice" value="0.411991,2.090910,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.134.190.211"/>
        </slice>
        <from usec="0" sec="1456982043"/>
        <to usec="0" sec="1456982045"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="39.209.39.57" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981856"/>
        <to usec="0" sec="1456981864"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.136.212.141" dst_ip="210.242.85.2" dst_port="80"/>
        </slice>
        <from usec="0" sec="1456981960"/>
        <to usec="0" sec="1456982068"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="175.45.10.252" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981746"/>
        <to usec="0" sec="1456981769"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.102.128.124" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981203"/>
        <to usec="0" sec="1456981255"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.228.232.120" src_port="161"/>
            <filter src_ip="202.228.232.120" dst_port="25"/>
        </slice>
        <from usec="0" sec="1456981434"/>
        <to usec="0" sec="1456982060"/>
    </anomaly>
    <anomaly type="notice" value="1.054300,2.076300,999,1 1 1 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="130.68.142.250" src_port="25"/>
            <filter src_ip="130.68.142.250" dst_ip="123.114.172.241" dst_port="53"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981935"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="204.234.181.117" dst_ip="192.192.127.243" src_port="80" dst_port="49499"/>
            <filter src_ip="204.234.181.117" dst_ip="192.192.127.243" src_port="80" dst_port="49498"/>
            <filter src_ip="204.234.181.117" dst_ip="192.192.127.243" src_port="80" dst_port="49299"/>
        </slice>
        <from usec="0" sec="1456981218"/>
        <to usec="0" sec="1456981220"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.143.29.56" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981449"/>
        <to usec="0" sec="1456981462"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="81.171.97.8" dst_ip="150.189.81.82" src_port="80" dst_port="58451"/>
        </slice>
        <from usec="0" sec="1456981203"/>
        <to usec="0" sec="1456982068"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.230.235.132" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981450"/>
        <to usec="0" sec="1456981460"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.164.26.211" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456982036"/>
        <to usec="0" sec="1456982047"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="100.183.87.43" dst_ip="203.94.109.5" src_port="36929" dst_port="80"/>
        </slice>
        <from usec="0" sec="1456981363"/>
        <to usec="0" sec="1456981367"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.43.133.42" dst_ip="199.236.137.62" dst_port="443"/>
        </slice>
        <from usec="0" sec="1456981262"/>
        <to usec="0" sec="1456982013"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="130.68.147.175" dst_port="25"/>
        </slice>
        <from usec="0" sec="1456981249"/>
        <to usec="0" sec="1456981877"/>
    </anomaly>
    <anomaly type="notice" value="1.124190,2.139890,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="110.51.122.223" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981407"/>
        <to usec="0" sec="1456982099"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="67.205.180.224" dst_ip="203.94.107.177" src_port="55490" dst_port="123"/>
        </slice>
        <from usec="0" sec="1456981358"/>
        <to usec="0" sec="1456981956"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="211.182.229.24" dst_ip="202.228.201.156" src_port="80"/>
        </slice>
        <from usec="0" sec="1456981943"/>
        <to usec="0" sec="1456982006"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="110.249.215.166" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981644"/>
        <to usec="0" sec="1456981655"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="222.221.80.57" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456982040"/>
        <to usec="0" sec="1456982051"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.43.129.48" dst_ip="123.106.248.60" src_port="36920" dst_port="12345"/>
        </slice>
        <from usec="0" sec="1456981664"/>
        <to usec="0" sec="1456981673"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="104.238.244.207" dst_ip="163.43.196.205" src_port="80"/>
        </slice>
        <from usec="0" sec="1456982056"/>
        <to usec="0" sec="1456982064"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="84.226.218.207" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456982005"/>
        <to usec="0" sec="1456982016"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="133.144.145.74" dst_port="80"/>
            <filter src_ip="133.144.145.74" dst_ip="67.251.88.249" dst_port="8080"/>
        </slice>
        <from usec="0" sec="1456981255"/>
        <to usec="0" sec="1456982042"/>
    </anomaly>
    <anomaly type="notice" value="1.124190,2.139890,503,1 1 1 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="150.189.31.116" src_port="80"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981721"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.69.13.101" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981487"/>
        <to usec="0" sec="1456981498"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="69.195.2.196" dst_ip="163.43.76.167" src_port="80" dst_port="51204"/>
        </slice>
        <from usec="0" sec="1456981301"/>
        <to usec="0" sec="1456981303"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.136.25.24" dst_port="25"/>
        </slice>
        <from usec="0" sec="1456981241"/>
        <to usec="0" sec="1456982057"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.43.130.253" dst_ip="198.50.197.176" dst_port="443"/>
        </slice>
        <from usec="0" sec="1456981213"/>
        <to usec="0" sec="1456982098"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="54.236.26.156" dst_ip="163.43.245.67" src_port="80"/>
        </slice>
        <from usec="0" sec="1456981665"/>
        <to usec="0" sec="1456981680"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,504,1 1 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="157.33.57.2" dst_ip="31.179.82.200" dst_port="443"/>
            <filter src_ip="157.33.12.118" dst_ip="31.179.82.200" dst_port="443"/>
        </slice>
        <from usec="0" sec="1456981263"/>
        <to usec="0" sec="1456982027"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="84.243.63.62" dst_ip="150.189.31.116" src_port="80" dst_port="53408"/>
        </slice>
        <from usec="0" sec="1456982097"/>
        <to usec="0" sec="1456982100"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="111.31.255.128" src_port="12200" dst_port="8118"/>
        </slice>
        <from usec="0" sec="1456981376"/>
        <to usec="0" sec="1456981379"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,052,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.48.94.205" dst_port="22"/>
        </slice>
        <from usec="0" sec="1456981518"/>
        <to usec="0" sec="1456981591"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.43.104.48" dst_port="25"/>
        </slice>
        <from usec="0" sec="1456981257"/>
        <to usec="0" sec="1456981324"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="126.13.84.56" dst_ip="202.228.201.223" dst_port="80"/>
            <filter src_ip="126.13.84.56" dst_ip="202.228.201.221" dst_port="80"/>
        </slice>
        <from usec="0" sec="1456981253"/>
        <to usec="0" sec="1456982021"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.182.68.71" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981700"/>
        <to usec="0" sec="1456981714"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.33.104.211" dst_ip="31.179.83.107" src_port="60822" dst_port="443"/>
            <filter src_ip="157.33.104.211" dst_ip="31.179.83.107" src_port="60821" dst_port="443"/>
            <filter src_ip="157.33.104.211" dst_ip="31.179.83.107" src_port="60756" dst_port="443"/>
            <filter src_ip="157.33.104.211" dst_ip="31.179.83.107" src_port="60755" dst_port="443"/>
        </slice>
        <from usec="0" sec="1456982020"/>
        <to usec="0" sec="1456982022"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="37.121.40.211" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981872"/>
        <to usec="0" sec="1456981883"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.15.97.209" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981841"/>
        <to usec="0" sec="1456981852"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="121.158.231.217" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981752"/>
        <to usec="0" sec="1456981769"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,503,1 1 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="202.235.33.30" dst_port="80"/>
        </slice>
        <from usec="0" sec="1456981206"/>
        <to usec="0" sec="1456981953"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.15.71.6" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981998"/>
        <to usec="0" sec="1456982008"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="61.184.58.144" dst_ip="150.189.10.47" src_port="80"/>
        </slice>
        <from usec="0" sec="1456981631"/>
        <to usec="0" sec="1456982088"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,503,1 1 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="195.106.194.149" dst_ip="150.189.29.218" src_port="56938" dst_port="80"/>
            <filter src_ip="195.106.194.149" dst_ip="150.189.29.218" src_port="53798" dst_port="80"/>
            <filter src_ip="195.106.194.149" dst_ip="150.189.29.218" src_port="53298" dst_port="80"/>
            <filter src_ip="80.177.249.175" dst_ip="150.189.29.218" src_port="38168" dst_port="80"/>
            <filter src_ip="80.177.249.175" dst_ip="150.189.29.218" src_port="38142" dst_port="80"/>
        </slice>
        <from usec="0" sec="1456981848"/>
        <to usec="0" sec="1456981902"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.246.3.116" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981350"/>
        <to usec="0" sec="1456981360"/>
    </anomaly>
    <anomaly type="notice" value="1.054300,2.076300,999,1 1 1 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="183.176.197.9" dst_ip="202.235.33.4" src_port="25317" dst_port="25"/>
        </slice>
        <from usec="0" sec="1456981211"/>
        <to usec="0" sec="1456981213"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.38.59.248" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981427"/>
        <to usec="0" sec="1456981438"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.43.198.23" dst_ip="207.241.18.123" src_port="80" dst_port="21291"/>
        </slice>
        <from usec="0" sec="1456981838"/>
        <to usec="0" sec="1456981848"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.255.153.22" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981480"/>
        <to usec="0" sec="1456981505"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.201.243.100" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981533"/>
        <to usec="0" sec="1456981543"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="36.221.182.140" dst_ip="203.94.97.243" src_port="58145" dst_port="8080"/>
        </slice>
        <from usec="0" sec="1456981706"/>
        <to usec="0" sec="1456981708"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="202.228.201.249" dst_port="25"/>
        </slice>
        <from usec="0" sec="1456981359"/>
        <to usec="0" sec="1456981840"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="98.165.11.121" dst_ip="157.33.106.208" dst_port="80"/>
        </slice>
        <from usec="0" sec="1456981861"/>
        <to usec="0" sec="1456981874"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,503,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.43.108.6" dst_port="80"/>
            <filter src_ip="203.94.103.127" dst_port="80"/>
        </slice>
        <from usec="0" sec="1456981207"/>
        <to usec="0" sec="1456982099"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.76.124.27" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981437"/>
        <to usec="0" sec="1456981450"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="121.118.136.252" dst_ip="203.94.103.127" src_port="443" dst_port="49784"/>
        </slice>
        <from usec="0" sec="1456981210"/>
        <to usec="0" sec="1456981604"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="79.11.142.254" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456982083"/>
        <to usec="0" sec="1456982096"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.144.183.129" dst_ip="95.223.157.233" dst_port="80"/>
            <filter src_ip="133.144.183.129" dst_ip="66.233.91.198" dst_port="80"/>
        </slice>
        <from usec="0" sec="1456981234"/>
        <to usec="0" sec="1456982100"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.43.77.175" dst_ip="73.8.235.104" src_port="53073" dst_port="9980"/>
        </slice>
        <from usec="0" sec="1456981226"/>
        <to usec="0" sec="1456982036"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="60.208.255.146" dst_ip="150.189.99.35" src_port="80" dst_port="60109"/>
        </slice>
        <from usec="0" sec="1456981691"/>
        <to usec="0" sec="1456981694"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="94.28.121.170" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982057"/>
        <to usec="0" sec="1456982075"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="94.180.30.174" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981931"/>
        <to usec="0" sec="1456981942"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="105.101.195.167" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981883"/>
        <to usec="0" sec="1456981907"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="216.128.188.86" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981790"/>
        <to usec="0" sec="1456981801"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="75.104.9.173" dst_ip="163.43.148.89" src_port="80"/>
        </slice>
        <from usec="0" sec="1456981845"/>
        <to usec="0" sec="1456981847"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="54.221.237.173" dst_ip="133.136.30.35" src_port="80" dst_port="50801"/>
        </slice>
        <from usec="0" sec="1456981806"/>
        <to usec="0" sec="1456981808"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.156.141.148" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981820"/>
        <to usec="0" sec="1456981833"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.144.152.119" dst_ip="96.146.240.217" src_port="49275" dst_port="80"/>
        </slice>
        <from usec="0" sec="1456981705"/>
        <to usec="0" sec="1456981763"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="157.33.71.120" dst_ip="61.243.89.188" dst_port="80"/>
        </slice>
        <from usec="0" sec="1456981793"/>
        <to usec="0" sec="1456982075"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.204.54.126" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981254"/>
        <to usec="0" sec="1456981263"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="202.235.36.193" dst_ip="8.249.85.78" src_port="61314" dst_port="80"/>
        </slice>
        <from usec="0" sec="1456981306"/>
        <to usec="0" sec="1456981885"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="24.68.203.202" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981843"/>
        <to usec="0" sec="1456982033"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="221.220.121.198" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981935"/>
        <to usec="0" sec="1456981954"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.144.255.202" dst_ip="50.239.216.30" src_port="34906" dst_port="25"/>
            <filter src_ip="133.144.255.202" dst_ip="193.21.142.155" src_port="54485" dst_port="443"/>
            <filter src_ip="133.144.255.202" dst_ip="98.113.127.254" src_port="60825" dst_port="25"/>
        </slice>
        <from usec="0" sec="1456981560"/>
        <to usec="0" sec="1456981616"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,503,1 1 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="63.178.31.23" dst_ip="133.144.45.211"/>
            <filter src_ip="63.178.31.23" dst_port="80"/>
            <filter src_ip="165.233.211.244" dst_ip="133.144.45.211"/>
            <filter src_ip="165.233.211.244" dst_port="80"/>
            <filter dst_ip="133.144.45.211" dst_port="80"/>
            <filter dst_ip="133.136.141.35" dst_port="80"/>
        </slice>
        <from usec="0" sec="1456981212"/>
        <to usec="0" sec="1456982100"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.247.46.63" dst_ip="157.33.100.232" src_port="443"/>
        </slice>
        <from usec="0" sec="1456981656"/>
        <to usec="0" sec="1456981720"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="70.41.96.48" dst_ip="130.68.147.201" src_port="54643" dst_port="995"/>
            <filter src_ip="70.41.96.48" dst_ip="130.68.147.201" src_port="54632" dst_port="995"/>
            <filter src_ip="70.41.96.48" dst_ip="130.68.147.138" src_port="54642" dst_port="587"/>
        </slice>
        <from usec="0" sec="1456981415"/>
        <to usec="0" sec="1456981602"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.43.77.207" dst_ip="202.229.76.204" dst_port="80"/>
            <filter src_ip="163.43.77.207" dst_ip="202.229.76.150" dst_port="80"/>
        </slice>
        <from usec="0" sec="1456981211"/>
        <to usec="0" sec="1456981984"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.144.255.215" dst_ip="66.197.118.194" src_port="46161" dst_port="25"/>
        </slice>
        <from usec="0" sec="1456981835"/>
        <to usec="0" sec="1456981838"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.144.255.213" dst_ip="17.173.96.49" src_port="50316" dst_port="25"/>
            <filter src_ip="133.144.255.213" dst_ip="17.132.93.74" src_port="52495" dst_port="25"/>
        </slice>
        <from usec="0" sec="1456981835"/>
        <to usec="0" sec="1456981853"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.43.124.42" dst_ip="91.83.76.174" src_port="50639" dst_port="80"/>
        </slice>
        <from usec="0" sec="1456981622"/>
        <to usec="0" sec="1456981893"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="39.252.46.41" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981497"/>
        <to usec="0" sec="1456981520"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.144.45.211" dst_ip="63.178.31.28" src_port="80" dst_port="58245"/>
        </slice>
        <from usec="0" sec="1456981213"/>
        <to usec="0" sec="1456982049"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.43.8.221" dst_ip="95.164.254.113" src_port="80" dst_port="53419"/>
        </slice>
        <from usec="0" sec="1456981450"/>
        <to usec="0" sec="1456981452"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.43.131.230" dst_ip="141.133.69.162" src_port="39044" dst_port="443"/>
        </slice>
        <from usec="0" sec="1456982096"/>
        <to usec="0" sec="1456982099"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,503,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.43.131.49" dst_ip="8.249.85.35"/>
            <filter src_ip="163.43.131.49" dst_port="80"/>
            <filter src_ip="163.43.130.2" dst_port="80"/>
            <filter dst_ip="8.249.85.35" dst_port="80"/>
        </slice>
        <from usec="0" sec="1456981202"/>
        <to usec="0" sec="1456981769"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="69.203.91.13" dst_ip="203.94.109.42" dst_port="123"/>
        </slice>
        <from usec="0" sec="1456981206"/>
        <to usec="0" sec="1456981223"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.100.83.253" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981915"/>
        <to usec="0" sec="1456981922"/>
    </anomaly>
    <anomaly type="notice" value="0.782840,2.164290,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="31.179.85.72" dst_ip="31.179.85.72" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981220"/>
        <to usec="0" sec="1456982042"/>
    </anomaly>
    <anomaly type="notice" value="0.782840,2.164290,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="31.179.90.113" dst_ip="31.179.90.113" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981220"/>
        <to usec="0" sec="1456982089"/>
    </anomaly>
    <anomaly type="notice" value="0.782840,2.164290,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="150.189.64.205" dst_ip="150.189.64.205" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981805"/>
        <to usec="0" sec="1456981928"/>
    </anomaly>
    <anomaly type="notice" value="1.058270,2.138830,999,1 1 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.94.118.24" dst_port="53"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456982099"/>
    </anomaly>
    <anomaly type="notice" value="0.782840,2.164290,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="203.94.100.100" dst_ip="203.94.100.100" proto="udp"/>
        </slice>
        <from usec="0" sec="1456981205"/>
        <to usec="0" sec="1456981983"/>
    </anomaly>
    <anomaly type="notice" value="1.054300,2.076300,503,1 1 1 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="59.29.30.220" src_port="80"/>
            <filter dst_ip="150.189.82.234" src_port="80"/>
        </slice>
        <from usec="0" sec="1456981274"/>
        <to usec="0" sec="1456981669"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,503,1 1 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.43.148.71" src_port="80"/>
        </slice>
        <from usec="0" sec="1456981467"/>
        <to usec="0" sec="1456981469"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,503,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="183.176.96.161" dst_ip="163.43.242.77" src_port="80" dst_port="53395"/>
        </slice>
        <from usec="0" sec="1456981826"/>
        <to usec="0" sec="1456981828"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="208.45.16.20" dst_ip="133.136.209.210" src_port="443"/>
        </slice>
        <from usec="0" sec="1456981826"/>
        <to usec="0" sec="1456981978"/>
    </anomaly>
    <anomaly type="notice" value="0.983700,2.075210,503,1 1 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="61.13.137.121" dst_ip="131.224.103.235" dst_port="80"/>
        </slice>
        <from usec="0" sec="1456981247"/>
        <to usec="0" sec="1456981304"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.158.8.131" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981712"/>
        <to usec="0" sec="1456981724"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="79.177.250.245" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981975"/>
        <to usec="0" sec="1456981997"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.43.229.69" dst_ip="199.119.139.199" dst_port="80"/>
        </slice>
        <from usec="0" sec="1456981444"/>
        <to usec="0" sec="1456982012"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="64.56.161.24" dst_ip="133.73.245.3"/>
        </slice>
        <from usec="0" sec="1456981548"/>
        <to usec="0" sec="1456981700"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="118.50.224.93" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981988"/>
        <to usec="0" sec="1456981999"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.52.250.194" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981687"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="54.245.157.63"/>
        </slice>
        <from usec="0" sec="1456981635"/>
        <to usec="0" sec="1456981636"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="198.13.125.54" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981421"/>
        <to usec="0" sec="1456981433"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="58.219.189.62" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981651"/>
        <to usec="0" sec="1456981663"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.33.252.92" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981679"/>
        <to usec="0" sec="1456981691"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="103.15.184.86" dst_ip="150.189.29.211" dst_port="80"/>
        </slice>
        <from usec="0" sec="1456981212"/>
        <to usec="0" sec="1456982004"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.144.42.231" dst_ip="217.199.165.96" dst_port="80"/>
        </slice>
        <from usec="0" sec="1456981510"/>
        <to usec="0" sec="1456981915"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="2.166.179.77" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981589"/>
        <to usec="0" sec="1456981602"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.33.253.206" dst_ip="17.184.26.204" dst_port="443"/>
            <filter src_ip="157.33.253.206" dst_ip="17.184.25.186" dst_port="443"/>
        </slice>
        <from usec="0" sec="1456981731"/>
        <to usec="0" sec="1456981734"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.43.108.208" dst_port="80"/>
            <filter src_ip="163.43.108.208" dst_ip="131.19.61.44" dst_port="443"/>
        </slice>
        <from usec="0" sec="1456982089"/>
        <to usec="0" sec="1456982094"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.105.220.241" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981213"/>
        <to usec="0" sec="1456981225"/>
    </anomaly>
    <anomaly type="notice" value="0.983700,2.075210,503,1 1 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.43.10.172" dst_port="80"/>
        </slice>
        <from usec="0" sec="1456981204"/>
        <to usec="0" sec="1456982051"/>
    </anomaly>
    <anomaly type="notice" value="1.058270,2.138830,999,1 1 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="150.189.35.57" dst_port="53"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981801"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="61.206.157.131" dst_ip="202.235.33.14" dst_port="443"/>
        </slice>
        <from usec="0" sec="1456981359"/>
        <to usec="0" sec="1456981534"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="86.138.73.72" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981584"/>
        <to usec="0" sec="1456981595"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.6.13.74" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456982100"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="179.76.167.46" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981257"/>
        <to usec="0" sec="1456981267"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.223.75.43" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981202"/>
        <to usec="0" sec="1456982099"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,002,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="171.13.189.70" src_port="53319" dst_port="137"/>
        </slice>
        <from usec="0" sec="1456981569"/>
        <to usec="0" sec="1456981571"/>
    </anomaly>
    <anomaly type="notice" value="1.124190,2.139890,999,1 1 1 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.167.41.156" dst_port="1701"/>
        </slice>
        <from usec="0" sec="1456981761"/>
        <to usec="0" sec="1456981876"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="220.248.85.33" src_port="6000" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1456981532"/>
        <to usec="0" sec="1456981533"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="221.222.131.118" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981300"/>
        <to usec="0" sec="1456981313"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.219.45.68" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981347"/>
        <to usec="0" sec="1456981367"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.213.201.121" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981782"/>
        <to usec="0" sec="1456981794"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.157.162.189" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982002"/>
        <to usec="0" sec="1456982011"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.48.240.54" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982080"/>
        <to usec="0" sec="1456982093"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="69.171.228.133" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981774"/>
        <to usec="0" sec="1456981785"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.102.66.206" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981665"/>
        <to usec="0" sec="1456981676"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.149.93.70" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982039"/>
        <to usec="0" sec="1456982050"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.155.35.8" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456982056"/>
        <to usec="0" sec="1456982068"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="110.244.159.115" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981670"/>
        <to usec="0" sec="1456981682"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.247.243.130" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981544"/>
        <to usec="0" sec="1456981555"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.130.174.74" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981968"/>
        <to usec="0" sec="1456981980"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.43.166.246" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981754"/>
        <to usec="0" sec="1456981765"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.157.20.128" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982004"/>
        <to usec="0" sec="1456982015"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="39.208.90.192" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981495"/>
        <to usec="0" sec="1456981504"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="117.35.47.123" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981340"/>
        <to usec="0" sec="1456981350"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="98.59.119.59" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982075"/>
        <to usec="0" sec="1456982086"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="180.116.119.74" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981797"/>
        <to usec="0" sec="1456981809"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.25.69.57" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981541"/>
        <to usec="0" sec="1456981551"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="180.122.52.187" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981292"/>
        <to usec="0" sec="1456981304"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.253.222.243" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981381"/>
        <to usec="0" sec="1456981392"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="221.63.33.12" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981718"/>
        <to usec="0" sec="1456981729"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.227.92.242" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981566"/>
        <to usec="0" sec="1456981579"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="171.204.125.114" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981742"/>
        <to usec="0" sec="1456981754"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.60.90.130" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981689"/>
        <to usec="0" sec="1456981700"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="10.172.174.13" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981226"/>
        <to usec="0" sec="1456981237"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.207.27.193" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456982046"/>
        <to usec="0" sec="1456982059"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="87.46.38.129" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981519"/>
        <to usec="0" sec="1456981530"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="79.99.59.190" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981661"/>
        <to usec="0" sec="1456981673"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="212.237.91.206" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981954"/>
        <to usec="0" sec="1456981973"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="120.196.250.241" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981898"/>
        <to usec="0" sec="1456981909"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="87.52.222.255" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982077"/>
        <to usec="0" sec="1456982086"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="85.255.83.146" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981920"/>
        <to usec="0" sec="1456981941"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="181.220.89.16" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981391"/>
        <to usec="0" sec="1456981402"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="81.216.44.238" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981983"/>
        <to usec="0" sec="1456981995"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.227.96.236" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981875"/>
        <to usec="0" sec="1456981883"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="181.176.223.18" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981513"/>
        <to usec="0" sec="1456981551"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="99.63.69.43" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981221"/>
        <to usec="0" sec="1456981234"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.254.253.82" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982054"/>
        <to usec="0" sec="1456982066"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.155.231.45" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981938"/>
        <to usec="0" sec="1456981949"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.222.146.237" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981300"/>
        <to usec="0" sec="1456981313"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="27.116.81.83" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981769"/>
        <to usec="0" sec="1456981779"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="110.76.4.46" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981627"/>
        <to usec="0" sec="1456981635"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="110.252.196.238" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981654"/>
        <to usec="0" sec="1456981667"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="177.83.167.110" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456982073"/>
        <to usec="0" sec="1456982086"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.35.87.81" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981230"/>
        <to usec="0" sec="1456981243"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="210.222.149.87" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981579"/>
        <to usec="0" sec="1456981592"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="202.140.114.229" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981827"/>
        <to usec="0" sec="1456981836"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="189.159.203.101" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981868"/>
        <to usec="0" sec="1456981879"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.155.210.152" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981887"/>
        <to usec="0" sec="1456981899"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="2.164.236.155" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456982055"/>
        <to usec="0" sec="1456982066"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.104.229.101" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982039"/>
        <to usec="0" sec="1456982050"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.100.84.27" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981312"/>
        <to usec="0" sec="1456981331"/>
    </anomaly>
    <anomaly type="notice" value="1.054300,2.076300,999,1 1 1 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="189.234.249.89" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981203"/>
        <to usec="0" sec="1456981377"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="42.166.200.218" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981980"/>
        <to usec="0" sec="1456982012"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="42.159.64.218" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981337"/>
        <to usec="0" sec="1456981368"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="2.92.117.26" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981477"/>
        <to usec="0" sec="1456981492"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="89.165.83.228" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981388"/>
        <to usec="0" sec="1456981399"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.183.27.91" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981236"/>
        <to usec="0" sec="1456981251"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="190.29.102.216" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981914"/>
        <to usec="0" sec="1456981924"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="210.61.42.220" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981410"/>
        <to usec="0" sec="1456981423"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.73.190.156" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981899"/>
        <to usec="0" sec="1456981909"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.108.17.226" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981849"/>
        <to usec="0" sec="1456981862"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="110.76.15.97" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981627"/>
        <to usec="0" sec="1456981635"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="186.95.60.158" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981524"/>
        <to usec="0" sec="1456981532"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="118.247.227.158" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981378"/>
        <to usec="0" sec="1456981387"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.251.126.94" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981940"/>
        <to usec="0" sec="1456981952"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="27.93.12.95" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981431"/>
        <to usec="0" sec="1456981442"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.247.50.224" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981380"/>
        <to usec="0" sec="1456981388"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.107.115.223" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981408"/>
        <to usec="0" sec="1456981417"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.119.117.159" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981358"/>
        <to usec="0" sec="1456981368"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="27.214.58.159" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981260"/>
        <to usec="0" sec="1456981271"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.161.62.223" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981202"/>
        <to usec="0" sec="1456981212"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="60.126.5.96" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981635"/>
        <to usec="0" sec="1456981646"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.89.10.96" dst_port="8080"/>
        </slice>
        <from usec="0" sec="1456981956"/>
        <to usec="0" sec="1456981957"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="42.251.224.141" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981697"/>
        <to usec="0" sec="1456981708"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="59.30.103.192" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981369"/>
        <to usec="0" sec="1456981396"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="120.199.103.142" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982068"/>
        <to usec="0" sec="1456982076"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.89.163.124" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981600"/>
        <to usec="0" sec="1456981611"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.81.23.26" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981709"/>
        <to usec="0" sec="1456981721"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="180.121.214.161" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981662"/>
        <to usec="0" sec="1456981665"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.112.225.19" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981603"/>
        <to usec="0" sec="1456981639"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.103.109.88" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981943"/>
        <to usec="0" sec="1456981956"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="77.138.42.143" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981368"/>
        <to usec="0" sec="1456981379"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="1.101.170.188" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981548"/>
        <to usec="0" sec="1456981560"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.68.180.148" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982066"/>
        <to usec="0" sec="1456982078"/>
    </anomaly>
    <anomaly type="notice" value="1.376450,2.150680,503,1 1 0 1 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="203.94.110.172" dst_ip="24.240.58.251" dst_port="80"/>
            <filter src_ip="202.235.216.62" dst_ip="24.240.58.251" dst_port="80"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456982085"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.135.220.253" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456982087"/>
        <to usec="0" sec="1456982099"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.255.146.242" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981564"/>
        <to usec="0" sec="1456981577"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="221.194.13.44" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981999"/>
        <to usec="0" sec="1456982028"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.118.11.129" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981606"/>
        <to usec="0" sec="1456981617"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.60.242.230" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456982095"/>
        <to usec="0" sec="1456982100"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="118.218.109.81" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981478"/>
        <to usec="0" sec="1456981494"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="46.117.102.238" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981373"/>
        <to usec="0" sec="1456981385"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="80.0.200.56" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981609"/>
        <to usec="0" sec="1456981630"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="60.159.149.103" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981308"/>
        <to usec="0" sec="1456981321"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="103.243.31.55" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981855"/>
        <to usec="0" sec="1456981866"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.3.11.54" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981923"/>
        <to usec="0" sec="1456981934"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="106.217.196.132" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981701"/>
        <to usec="0" sec="1456981712"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.154.160.164" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456982027"/>
        <to usec="0" sec="1456982046"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.106.105.116" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981909"/>
        <to usec="0" sec="1456981920"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.106.7.57" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981225"/>
        <to usec="0" sec="1456981235"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.29.9.213" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981514"/>
        <to usec="0" sec="1456981525"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="36.15.223.53" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981279"/>
        <to usec="0" sec="1456981290"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="123.189.5.106" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456982079"/>
        <to usec="0" sec="1456982100"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="213.97.195.91" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981299"/>
        <to usec="0" sec="1456981318"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="74.184.154.212" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981864"/>
        <to usec="0" sec="1456981875"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.135.157.244" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456982029"/>
        <to usec="0" sec="1456982053"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="82.34.220.51" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981579"/>
        <to usec="0" sec="1456981589"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.134.190.147" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981870"/>
        <to usec="0" sec="1456981881"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.154.86.194" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981831"/>
        <to usec="0" sec="1456981843"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="79.84.13.1" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981345"/>
        <to usec="0" sec="1456981394"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="212.80.240.79" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981664"/>
        <to usec="0" sec="1456981673"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.1.194.255" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981239"/>
        <to usec="0" sec="1456981251"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.145.86.159" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981540"/>
        <to usec="0" sec="1456981554"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="176.255.12.76" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981798"/>
        <to usec="0" sec="1456981809"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="24.140.70.109" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982088"/>
        <to usec="0" sec="1456982096"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.131.25.47" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981889"/>
        <to usec="0" sec="1456981899"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="180.110.75.84" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981496"/>
        <to usec="0" sec="1456981507"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="111.1.102.204" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981606"/>
        <to usec="0" sec="1456981615"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.146.192.182" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981253"/>
        <to usec="0" sec="1456981264"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="92.228.212.203" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982056"/>
        <to usec="0" sec="1456982067"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="41.193.184.151" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981634"/>
        <to usec="0" sec="1456981654"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.60.158.237" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981434"/>
        <to usec="0" sec="1456981444"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.233.77.107" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981991"/>
        <to usec="0" sec="1456982002"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="27.197.252.51" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981206"/>
        <to usec="0" sec="1456981217"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="60.99.182.172" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981979"/>
        <to usec="0" sec="1456981993"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="115.1.141.10" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981394"/>
        <to usec="0" sec="1456981405"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.13.4.214" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981766"/>
        <to usec="0" sec="1456981778"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.234.224.145" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981256"/>
        <to usec="0" sec="1456981280"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.2.188.87" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981669"/>
        <to usec="0" sec="1456981676"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="59.102.103.55" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981748"/>
        <to usec="0" sec="1456981774"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="42.166.71.15" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981236"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.54.74.176" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981843"/>
        <to usec="0" sec="1456981854"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.147.140.38" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981662"/>
        <to usec="0" sec="1456981673"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="139.47.189.103" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982030"/>
        <to usec="0" sec="1456982041"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="218.156.232.70" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981997"/>
        <to usec="0" sec="1456982008"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.170.106.134" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981292"/>
        <to usec="0" sec="1456981303"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="219.69.109.4" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456982001"/>
        <to usec="0" sec="1456982027"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.246.64.134" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981723"/>
        <to usec="0" sec="1456981732"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.130.29.100" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981714"/>
        <to usec="0" sec="1456981722"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="125.3.10.134" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981851"/>
        <to usec="0" sec="1456981863"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.135.3.91" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981878"/>
        <to usec="0" sec="1456981889"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.131.17.231" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981301"/>
        <to usec="0" sec="1456981313"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.130.225.59" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981373"/>
        <to usec="0" sec="1456981385"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.156.28.189" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981744"/>
        <to usec="0" sec="1456981756"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="221.254.22.162" dst_port="80"/>
        </slice>
        <from usec="0" sec="1456981388"/>
        <to usec="0" sec="1456981491"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="211.156.158.131" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981707"/>
        <to usec="0" sec="1456981730"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.229.247.125" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981365"/>
        <to usec="0" sec="1456981383"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="42.23.51.126" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981537"/>
        <to usec="0" sec="1456981549"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="222.11.217.225" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981678"/>
        <to usec="0" sec="1456981688"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="175.86.240.65" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981537"/>
        <to usec="0" sec="1456981552"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="87.70.226.159" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982031"/>
        <to usec="0" sec="1456982042"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.219.60.191" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981888"/>
        <to usec="0" sec="1456981896"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.244.108.96" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981384"/>
        <to usec="0" sec="1456981395"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.1.130.224" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981891"/>
        <to usec="0" sec="1456981902"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.127.0.179" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981589"/>
        <to usec="0" sec="1456981600"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="87.62.10.205" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981207"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.51.112.207" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981429"/>
        <to usec="0" sec="1456981439"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="110.252.100.181" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981582"/>
        <to usec="0" sec="1456981592"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.104.47.62" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981295"/>
        <to usec="0" sec="1456981306"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.255.196.181" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982084"/>
        <to usec="0" sec="1456982096"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="191.202.84.196" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981379"/>
        <to usec="0" sec="1456981388"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="39.207.182.48" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981431"/>
        <to usec="0" sec="1456981435"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="46.249.18.206" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981735"/>
        <to usec="0" sec="1456981747"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.235.54.49" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981273"/>
        <to usec="0" sec="1456981283"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="203.243.249.65" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981690"/>
        <to usec="0" sec="1456981703"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.165.149.60" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456982021"/>
        <to usec="0" sec="1456982052"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="1.253.164.48" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981490"/>
        <to usec="0" sec="1456981502"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="49.43.32.77" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981691"/>
        <to usec="0" sec="1456981714"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="110.155.40.68" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981267"/>
        <to usec="0" sec="1456981277"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="42.135.193.75" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981842"/>
        <to usec="0" sec="1456981868"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="108.199.95.60" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981213"/>
        <to usec="0" sec="1456981236"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.109.132.181" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981313"/>
        <to usec="0" sec="1456981325"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.4.178.178" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981522"/>
        <to usec="0" sec="1456981535"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.28.53.77" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981862"/>
        <to usec="0" sec="1456981871"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.204.0.194" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981971"/>
        <to usec="0" sec="1456981982"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="180.156.74.193" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981856"/>
        <to usec="0" sec="1456981867"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="118.213.224.73" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981970"/>
        <to usec="0" sec="1456981981"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.195.29.71" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981995"/>
        <to usec="0" sec="1456982009"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.3.75.180" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981279"/>
        <to usec="0" sec="1456981301"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.128.85.59" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981302"/>
        <to usec="0" sec="1456981315"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.58.122.202" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981709"/>
        <to usec="0" sec="1456981720"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="80.188.189.54" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981290"/>
        <to usec="0" sec="1456981301"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.84.73.58" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981587"/>
        <to usec="0" sec="1456981598"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="1.225.244.186" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981347"/>
        <to usec="0" sec="1456981358"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="187.97.80.182" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981457"/>
        <to usec="0" sec="1456981485"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.38.209.68" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981405"/>
        <to usec="0" sec="1456981418"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="104.164.182.187" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981808"/>
        <to usec="0" sec="1456981821"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.150.13.204" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982051"/>
        <to usec="0" sec="1456982061"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="81.165.38.194" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981690"/>
        <to usec="0" sec="1456981708"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="200.111.6.62" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456982055"/>
        <to usec="0" sec="1456982073"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="76.236.255.49" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981436"/>
        <to usec="0" sec="1456981444"/>
    </anomaly>
    <anomaly type="notice" value="1.054300,2.076300,999,1 1 1 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="39.209.98.206" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981275"/>
        <to usec="0" sec="1456981289"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.220.91.65" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981845"/>
        <to usec="0" sec="1456981855"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="49.182.239.207" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981519"/>
        <to usec="0" sec="1456981531"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.166.24.64" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981385"/>
        <to usec="0" sec="1456981397"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="223.174.182.191" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981672"/>
        <to usec="0" sec="1456981680"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.253.250.191" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981773"/>
        <to usec="0" sec="1456981802"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.157.211.46" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982011"/>
        <to usec="0" sec="1456982023"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.190.28.170" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981670"/>
        <to usec="0" sec="1456981682"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="176.255.5.84" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981992"/>
        <to usec="0" sec="1456982005"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="188.39.44.215" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981676"/>
        <to usec="0" sec="1456981687"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="94.17.115.44" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981298"/>
        <to usec="0" sec="1456981328"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.115.191.86" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981290"/>
        <to usec="0" sec="1456981308"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="221.194.7.172" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982036"/>
        <to usec="0" sec="1456982046"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.238.230.172" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981623"/>
        <to usec="0" sec="1456981639"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="180.124.200.40" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981535"/>
        <to usec="0" sec="1456981546"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="1.112.153.42" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981618"/>
        <to usec="0" sec="1456981630"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="101.19.111.83" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982011"/>
        <to usec="0" sec="1456982023"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.221.252.45" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981373"/>
        <to usec="0" sec="1456981385"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="89.251.4.213" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981980"/>
        <to usec="0" sec="1456981998"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.157.182.170" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981778"/>
        <to usec="0" sec="1456981785"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.239.190.83" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981379"/>
        <to usec="0" sec="1456981390"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="171.138.238.214" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981418"/>
        <to usec="0" sec="1456981427"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="116.211.241.80" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981291"/>
        <to usec="0" sec="1456981302"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="60.140.26.175" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456982002"/>
        <to usec="0" sec="1456982014"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="117.75.255.47" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981750"/>
        <to usec="0" sec="1456981761"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="27.208.246.219" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981446"/>
        <to usec="0" sec="1456981457"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="109.5.128.218" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456982006"/>
        <to usec="0" sec="1456982013"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.231.38.219" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981299"/>
        <to usec="0" sec="1456981312"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="176.62.72.167" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981931"/>
        <to usec="0" sec="1456981941"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.242.28.39" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981979"/>
        <to usec="0" sec="1456981991"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="120.255.104.36" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981256"/>
        <to usec="0" sec="1456981281"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="190.226.41.38" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981204"/>
        <to usec="0" sec="1456981218"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="187.101.182.38" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982013"/>
        <to usec="0" sec="1456982024"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="42.171.28.164" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981313"/>
        <to usec="0" sec="1456981342"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="101.176.210.219" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981728"/>
        <to usec="0" sec="1456981756"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="83.68.149.91" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981643"/>
        <to usec="0" sec="1456981654"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="94.10.143.36" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981708"/>
        <to usec="0" sec="1456981719"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.118.8.220" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981521"/>
        <to usec="0" sec="1456981551"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="46.188.187.163" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981652"/>
        <to usec="0" sec="1456981664"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="81.218.103.35" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981733"/>
        <to usec="0" sec="1456981744"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.133.217.92" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981762"/>
        <to usec="0" sec="1456981774"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.67.164.161" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981956"/>
        <to usec="0" sec="1456981968"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.60.105.32" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981966"/>
        <to usec="0" sec="1456981978"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.142.89.32" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981896"/>
        <to usec="0" sec="1456981908"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="223.116.190.254" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981812"/>
        <to usec="0" sec="1456981826"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="87.56.2.245" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981342"/>
        <to usec="0" sec="1456981353"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.33.130.243" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981383"/>
        <to usec="0" sec="1456981394"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="36.203.77.25" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981789"/>
        <to usec="0" sec="1456981801"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.75.78.3" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981627"/>
        <to usec="0" sec="1456981639"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="81.218.199.2" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981259"/>
        <to usec="0" sec="1456981273"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="110.230.163.141" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981915"/>
        <to usec="0" sec="1456981925"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.135.191.157" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981511"/>
        <to usec="0" sec="1456981521"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.102.4.23" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981359"/>
        <to usec="0" sec="1456981371"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.249.185.116" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981813"/>
        <to usec="0" sec="1456981823"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.251.50.235" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981291"/>
        <to usec="0" sec="1456981301"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="110.85.254.146" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981791"/>
        <to usec="0" sec="1456981803"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.52.195.140" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981213"/>
        <to usec="0" sec="1456981241"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="101.187.76.107" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981306"/>
        <to usec="0" sec="1456981316"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="46.150.123.155" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981894"/>
        <to usec="0" sec="1456981904"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.13.41.101" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981982"/>
        <to usec="0" sec="1456981993"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="85.22.152.249" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981978"/>
        <to usec="0" sec="1456981989"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="159.161.77.102" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981565"/>
        <to usec="0" sec="1456981576"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.54.93.121" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981593"/>
        <to usec="0" sec="1456981604"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="80.10.242.248" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982045"/>
        <to usec="0" sec="1456982055"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="200.10.74.159" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981349"/>
        <to usec="0" sec="1456981359"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="191.214.137.103" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982069"/>
        <to usec="0" sec="1456982079"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="217.186.245.116" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981776"/>
        <to usec="0" sec="1456981789"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="37.100.129.120" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981838"/>
        <to usec="0" sec="1456981848"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.150.105.120" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982058"/>
        <to usec="0" sec="1456982068"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.171.167.104" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456982025"/>
        <to usec="0" sec="1456982037"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="58.99.217.117" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981778"/>
        <to usec="0" sec="1456981791"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="187.50.159.139" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982032"/>
        <to usec="0" sec="1456982046"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="178.7.6.227" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981689"/>
        <to usec="0" sec="1456981708"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.167.32.99" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981238"/>
        <to usec="0" sec="1456981248"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.13.166.146" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981446"/>
        <to usec="0" sec="1456981457"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.245.223.252" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981274"/>
        <to usec="0" sec="1456981283"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="27.91.157.115" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981550"/>
        <to usec="0" sec="1456981561"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.12.188.241" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981992"/>
        <to usec="0" sec="1456982004"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="161.77.174.142" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981207"/>
        <to usec="0" sec="1456981232"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="110.56.51.238" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982063"/>
        <to usec="0" sec="1456982075"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="27.83.70.239" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981205"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="178.244.15.96" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982018"/>
        <to usec="0" sec="1456982028"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.149.105.127" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982075"/>
        <to usec="0" sec="1456982086"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="181.220.88.20" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981990"/>
        <to usec="0" sec="1456982000"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="212.232.15.150" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981516"/>
        <to usec="0" sec="1456981529"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="222.123.231.113" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981992"/>
        <to usec="0" sec="1456982021"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="81.205.28.136" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456982088"/>
        <to usec="0" sec="1456982099"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="117.79.89.19" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981803"/>
        <to usec="0" sec="1456981813"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.102.69.21" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981815"/>
        <to usec="0" sec="1456981825"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="111.63.215.115" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981241"/>
        <to usec="0" sec="1456981253"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.183.11.14" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981611"/>
        <to usec="0" sec="1456981636"/>
    </anomaly>
    <anomaly type="notice" value="1.058270,2.138830,010,1 1 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="213.87.56.240" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981760"/>
        <to usec="0" sec="1456982041"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.110.75.112" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981740"/>
        <to usec="0" sec="1456981751"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.246.166.135" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981704"/>
        <to usec="0" sec="1456981715"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="202.103.131.26" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981680"/>
        <to usec="0" sec="1456981692"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="222.85.203.27" dst_port="5900"/>
        </slice>
        <from usec="0" sec="1456981641"/>
        <to usec="0" sec="1456981693"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="117.107.180.25" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981956"/>
        <to usec="0" sec="1456981966"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="86.142.138.228" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981722"/>
        <to usec="0" sec="1456981753"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="89.159.199.229" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981843"/>
        <to usec="0" sec="1456981848"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.252.226.153" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981836"/>
        <to usec="0" sec="1456981846"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="178.72.210.133" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981441"/>
        <to usec="0" sec="1456981451"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="45.192.151.230" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981558"/>
        <to usec="0" sec="1456981569"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="111.101.34.251" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981853"/>
        <to usec="0" sec="1456981865"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="1.222.221.100" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981681"/>
        <to usec="0" sec="1456981693"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="218.154.26.130" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981944"/>
        <to usec="0" sec="1456981956"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.245.47.156" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981278"/>
        <to usec="0" sec="1456981294"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="61.229.176.3" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981811"/>
        <to usec="0" sec="1456981824"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="124.155.151.125" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981498"/>
        <to usec="0" sec="1456981506"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="58.67.71.29" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981727"/>
        <to usec="0" sec="1456981738"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="94.116.194.225" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981274"/>
        <to usec="0" sec="1456981292"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="181.112.211.158" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981716"/>
        <to usec="0" sec="1456981725"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="124.71.135.127" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981670"/>
        <to usec="0" sec="1456981678"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.183.39.188" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981714"/>
        <to usec="0" sec="1456981726"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.239.100.185" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981625"/>
        <to usec="0" sec="1456981644"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.248.249.189" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981781"/>
        <to usec="0" sec="1456981791"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="171.130.240.115" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981974"/>
        <to usec="0" sec="1456981985"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="116.200.190.123" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981511"/>
        <to usec="0" sec="1456981522"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.205.26.186" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981773"/>
        <to usec="0" sec="1456981783"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.216.47.185" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981429"/>
        <to usec="0" sec="1456981438"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.187.191.125" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981465"/>
        <to usec="0" sec="1456981476"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="125.242.200.184" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981490"/>
        <to usec="0" sec="1456981500"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="218.40.189.179" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981820"/>
        <to usec="0" sec="1456981832"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="81.227.175.139" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981488"/>
        <to usec="0" sec="1456981502"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="180.137.2.74" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981634"/>
        <to usec="0" sec="1456981643"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="31.32.248.114" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981908"/>
        <to usec="0" sec="1456981920"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.215.190.74" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982083"/>
        <to usec="0" sec="1456982095"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="213.75.147.121" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981441"/>
        <to usec="0" sec="1456981450"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.241.17.176" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981918"/>
        <to usec="0" sec="1456981928"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="42.199.97.119" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981962"/>
        <to usec="0" sec="1456981972"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.177.9.183" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981820"/>
        <to usec="0" sec="1456981831"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.245.49.137" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456982088"/>
        <to usec="0" sec="1456982098"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.132.61.135" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981773"/>
        <to usec="0" sec="1456981781"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.149.10.73" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981848"/>
        <to usec="0" sec="1456981859"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="120.200.208.70" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981961"/>
        <to usec="0" sec="1456981969"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="69.190.53.133" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981268"/>
        <to usec="0" sec="1456981279"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="221.156.22.121" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981633"/>
        <to usec="0" sec="1456981643"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="220.207.152.69" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981215"/>
        <to usec="0" sec="1456981228"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="94.5.24.68" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981795"/>
        <to usec="0" sec="1456981819"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="24.89.196.71" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981532"/>
        <to usec="0" sec="1456981551"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.62.84.120" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981317"/>
        <to usec="0" sec="1456981329"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.66.61.130" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981785"/>
        <to usec="0" sec="1456981796"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="187.178.13.130" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981592"/>
        <to usec="0" sec="1456981605"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.186.36.125" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981370"/>
        <to usec="0" sec="1456981381"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="49.188.201.179" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982003"/>
        <to usec="0" sec="1456982014"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="218.70.43.129" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981358"/>
        <to usec="0" sec="1456981373"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.204.55.129" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982035"/>
        <to usec="0" sec="1456982048"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="27.93.21.191" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981496"/>
        <to usec="0" sec="1456981508"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="101.213.48.112" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981872"/>
        <to usec="0" sec="1456981885"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="175.237.108.191" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456982090"/>
        <to usec="0" sec="1456982101"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="171.250.63.172" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981567"/>
        <to usec="0" sec="1456981581"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.148.74.109" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981730"/>
        <to usec="0" sec="1456981740"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="216.10.10.84" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456982023"/>
        <to usec="0" sec="1456982036"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.103.183.82" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981647"/>
        <to usec="0" sec="1456981659"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.136.27.146" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981297"/>
        <to usec="0" sec="1456981308"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.3.92.81" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981827"/>
        <to usec="0" sec="1456981843"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.134.118.86" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981689"/>
        <to usec="0" sec="1456981700"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.88.52.85" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982048"/>
        <to usec="0" sec="1456982059"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.51.22.84" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981314"/>
        <to usec="0" sec="1456981319"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="79.108.31.168" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981214"/>
        <to usec="0" sec="1456981228"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.151.34.172" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981538"/>
        <to usec="0" sec="1456981564"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="27.223.24.83" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981463"/>
        <to usec="0" sec="1456981473"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.59.4.84" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981803"/>
        <to usec="0" sec="1456981830"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="83.62.129.149" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981848"/>
        <to usec="0" sec="1456981858"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="118.114.160.83" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982032"/>
        <to usec="0" sec="1456982043"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.125.34.81" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981487"/>
        <to usec="0" sec="1456981515"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="106.242.165.169" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981227"/>
        <to usec="0" sec="1456981238"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="49.85.131.169" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981920"/>
        <to usec="0" sec="1456981933"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="81.217.196.87" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981941"/>
        <to usec="0" sec="1456981964"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.245.174.111" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981972"/>
        <to usec="0" sec="1456981985"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.248.18.87" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981713"/>
        <to usec="0" sec="1456981724"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="42.52.110.87" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981389"/>
        <to usec="0" sec="1456981401"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.252.118.87" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981253"/>
        <to usec="0" sec="1456981263"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="185.173.218.100" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981904"/>
        <to usec="0" sec="1456981913"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="163.73.42.103" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981473"/>
        <to usec="0" sec="1456981483"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.150.143.153" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981723"/>
        <to usec="0" sec="1456981729"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.144.253.154" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981996"/>
        <to usec="0" sec="1456982009"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.85.92.98" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981631"/>
        <to usec="0" sec="1456981641"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="81.218.107.162" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981605"/>
        <to usec="0" sec="1456981617"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="178.223.204.92" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981219"/>
        <to usec="0" sec="1456981229"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.104.82.93" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981734"/>
        <to usec="0" sec="1456981745"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="39.100.11.96" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981247"/>
        <to usec="0" sec="1456981259"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.86.145.75" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981660"/>
        <to usec="0" sec="1456981669"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="110.33.108.106" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982047"/>
        <to usec="0" sec="1456982057"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="111.99.215.121" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981874"/>
        <to usec="0" sec="1456981885"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="69.3.21.135" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981202"/>
        <to usec="0" sec="1456982098"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="81.255.110.98" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981227"/>
        <to usec="0" sec="1456981265"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="75.174.143.188" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456982030"/>
        <to usec="0" sec="1456982050"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="116.29.248.189" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981464"/>
        <to usec="0" sec="1456981476"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="101.213.246.83" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981950"/>
        <to usec="0" sec="1456981961"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="97.76.95.85" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981595"/>
        <to usec="0" sec="1456981947"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="42.30.27.186" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981250"/>
        <to usec="0" sec="1456981260"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.157.244.76" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981859"/>
        <to usec="0" sec="1456981866"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="82.34.198.105" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982014"/>
        <to usec="0" sec="1456982024"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="222.112.244.86" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981734"/>
        <to usec="0" sec="1456981744"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.244.118.64" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981808"/>
        <to usec="0" sec="1456981835"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.138.243.165" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981599"/>
        <to usec="0" sec="1456981611"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="61.177.126.85" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981652"/>
        <to usec="0" sec="1456981662"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.171.24.165" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981687"/>
        <to usec="0" sec="1456981689"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="218.105.70.88" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981575"/>
        <to usec="0" sec="1456981586"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="61.119.58.74" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456982067"/>
        <to usec="0" sec="1456982078"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="39.193.249.121" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981876"/>
        <to usec="0" sec="1456981888"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="27.212.9.186" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981318"/>
        <to usec="0" sec="1456981325"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.39.134.122" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981476"/>
        <to usec="0" sec="1456981487"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="62.211.232.68" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981534"/>
        <to usec="0" sec="1456981547"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="108.169.226.115" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981494"/>
        <to usec="0" sec="1456981506"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="59.4.138.77" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456982095"/>
        <to usec="0" sec="1456982100"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="27.212.33.173" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981668"/>
        <to usec="0" sec="1456981676"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.89.206.110" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981831"/>
        <to usec="0" sec="1456981842"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="203.254.225.175" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981980"/>
        <to usec="0" sec="1456982006"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="116.209.69.175" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981635"/>
        <to usec="0" sec="1456981646"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.28.178.110" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981289"/>
        <to usec="0" sec="1456981299"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.229.245.139" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981530"/>
        <to usec="0" sec="1456981778"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.108.54.108" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981456"/>
        <to usec="0" sec="1456981487"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="83.243.24.180" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981726"/>
        <to usec="0" sec="1456981737"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="101.216.236.76" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981236"/>
        <to usec="0" sec="1456981249"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="93.90.109.174" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981480"/>
        <to usec="0" sec="1456981491"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.117.234.109" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981864"/>
        <to usec="0" sec="1456981875"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="27.199.62.109" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981975"/>
        <to usec="0" sec="1456981985"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.221.179.82" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981659"/>
        <to usec="0" sec="1456981671"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="101.213.141.141" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981252"/>
        <to usec="0" sec="1456981282"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="218.169.252.150" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981786"/>
        <to usec="0" sec="1456981798"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="50.195.246.72" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981701"/>
        <to usec="0" sec="1456981714"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="175.96.180.108" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981375"/>
        <to usec="0" sec="1456981398"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.133.253.144" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981315"/>
        <to usec="0" sec="1456981327"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.140.105.180" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982082"/>
        <to usec="0" sec="1456982090"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.96.32.117" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981464"/>
        <to usec="0" sec="1456981474"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="24.21.164.106" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982064"/>
        <to usec="0" sec="1456982074"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.164.78.85" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981716"/>
        <to usec="0" sec="1456981721"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.60.102.83" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981337"/>
        <to usec="0" sec="1456981367"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="220.129.74.105" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981819"/>
        <to usec="0" sec="1456981833"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="79.108.238.72" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981777"/>
        <to usec="0" sec="1456981801"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="151.10.17.175" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981472"/>
        <to usec="0" sec="1456981482"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="202.7.65.133" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981783"/>
        <to usec="0" sec="1456981792"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="117.78.124.120" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981788"/>
        <to usec="0" sec="1456981798"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.44.86.100" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981981"/>
        <to usec="0" sec="1456981993"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="94.14.3.71" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981263"/>
        <to usec="0" sec="1456981296"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="59.125.146.90" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981380"/>
        <to usec="0" sec="1456981391"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.247.72.184" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981465"/>
        <to usec="0" sec="1456981485"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="118.112.32.69" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981679"/>
        <to usec="0" sec="1456981690"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.156.15.164" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981724"/>
        <to usec="0" sec="1456981732"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="92.255.150.155" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981439"/>
        <to usec="0" sec="1456981451"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="110.255.123.162" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981249"/>
        <to usec="0" sec="1456981260"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.96.154.66" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981517"/>
        <to usec="0" sec="1456981528"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="87.63.7.131" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456982073"/>
        <to usec="0" sec="1456982097"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="1.193.153.130" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981299"/>
        <to usec="0" sec="1456981310"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="81.216.38.93" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982042"/>
        <to usec="0" sec="1456982057"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.202.53.156" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981792"/>
        <to usec="0" sec="1456981803"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="81.216.153.189" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981723"/>
        <to usec="0" sec="1456981733"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.218.153.189" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981595"/>
        <to usec="0" sec="1456981607"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.11.225.162" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981438"/>
        <to usec="0" sec="1456981449"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="117.41.71.94" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981463"/>
        <to usec="0" sec="1456981475"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.221.203.161" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981382"/>
        <to usec="0" sec="1456981390"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="191.253.35.159" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981971"/>
        <to usec="0" sec="1456981980"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="120.245.123.54" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981728"/>
        <to usec="0" sec="1456981740"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="169.124.65.193" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981885"/>
        <to usec="0" sec="1456981895"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="171.139.70.62" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982009"/>
        <to usec="0" sec="1456982020"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.40.65.202" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981719"/>
        <to usec="0" sec="1456981730"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.55.177.54" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981529"/>
        <to usec="0" sec="1456981542"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="79.9.209.199" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981316"/>
        <to usec="0" sec="1456981327"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="60.127.82.60" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981496"/>
        <to usec="0" sec="1456981507"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="222.218.119.63" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981597"/>
        <to usec="0" sec="1456981607"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="83.100.71.48" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981207"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.60.165.202" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981235"/>
        <to usec="0" sec="1456981247"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="62.14.137.205" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981915"/>
        <to usec="0" sec="1456981925"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.206.213.193" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981220"/>
        <to usec="0" sec="1456981230"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.157.57.63" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982090"/>
        <to usec="0" sec="1456982101"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.46.253.198" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981573"/>
        <to usec="0" sec="1456981586"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="49.162.223.198" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981561"/>
        <to usec="0" sec="1456981572"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="111.229.144.54" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456982087"/>
        <to usec="0" sec="1456982099"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.221.112.54" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981201"/>
        <to usec="0" sec="1456981683"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="220.133.132.196" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981413"/>
        <to usec="0" sec="1456981439"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="39.198.4.202" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981898"/>
        <to usec="0" sec="1456981909"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="197.131.54.197" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981533"/>
        <to usec="0" sec="1456981546"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="42.26.164.57" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981874"/>
        <to usec="0" sec="1456981884"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="1.253.166.54" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981472"/>
        <to usec="0" sec="1456981484"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="5.76.0.199" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981245"/>
        <to usec="0" sec="1456981258"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.158.79.196" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981741"/>
        <to usec="0" sec="1456981753"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="106.241.29.204" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982042"/>
        <to usec="0" sec="1456982052"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="60.116.136.61" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981431"/>
        <to usec="0" sec="1456981442"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="94.37.144.204" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981700"/>
        <to usec="0" sec="1456981720"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="61.35.4.48" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981577"/>
        <to usec="0" sec="1456981583"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="181.142.56.48" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981714"/>
        <to usec="0" sec="1456981721"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="171.241.231.192" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981655"/>
        <to usec="0" sec="1456981664"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="117.105.168.40" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982050"/>
        <to usec="0" sec="1456982062"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="116.218.69.208" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981650"/>
        <to usec="0" sec="1456981661"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.177.14.45" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981209"/>
        <to usec="0" sec="1456981222"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="92.228.156.42" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981614"/>
        <to usec="0" sec="1456981624"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.126.175.42" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982025"/>
        <to usec="0" sec="1456982036"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.129.176.40" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981953"/>
        <to usec="0" sec="1456981964"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.121.211.45" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981465"/>
        <to usec="0" sec="1456981476"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.122.2.41" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981346"/>
        <to usec="0" sec="1456981364"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="117.214.144.45" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981228"/>
        <to usec="0" sec="1456981236"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="42.145.48.214" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981859"/>
        <to usec="0" sec="1456981869"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.23.183.214" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981202"/>
        <to usec="0" sec="1456981204"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="111.136.122.42" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981820"/>
        <to usec="0" sec="1456981831"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="110.245.14.42" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981374"/>
        <to usec="0" sec="1456981385"/>
    </anomaly>
    <anomaly type="notice" value="0.983700,2.075210,999,1 1 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="189.1.250.43" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981381"/>
        <to usec="0" sec="1456981391"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.62.2.44" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981210"/>
        <to usec="0" sec="1456981221"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.151.201.210" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981247"/>
        <to usec="0" sec="1456981259"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="79.87.26.42" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981684"/>
        <to usec="0" sec="1456981696"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="191.167.5.212" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982098"/>
        <to usec="0" sec="1456982101"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.60.39.210" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981631"/>
        <to usec="0" sec="1456981643"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.167.116.46" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981251"/>
        <to usec="0" sec="1456981261"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="80.127.160.46" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981735"/>
        <to usec="0" sec="1456981745"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="111.25.207.214" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981934"/>
        <to usec="0" sec="1456981946"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.239.69.215" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981358"/>
        <to usec="0" sec="1456981371"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="27.204.124.215" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456982047"/>
        <to usec="0" sec="1456982057"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="60.212.84.40" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982009"/>
        <to usec="0" sec="1456982019"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="181.197.123.37" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981763"/>
        <to usec="0" sec="1456981772"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.134.198.216" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981888"/>
        <to usec="0" sec="1456981899"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="72.119.4.220" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981759"/>
        <to usec="0" sec="1456981770"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="81.217.181.220" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981826"/>
        <to usec="0" sec="1456981839"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="188.255.111.220" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981945"/>
        <to usec="0" sec="1456981956"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.101.88.35" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982088"/>
        <to usec="0" sec="1456982099"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="101.219.19.34" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981669"/>
        <to usec="0" sec="1456981677"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.239.60.222" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981764"/>
        <to usec="0" sec="1456981777"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="46.249.18.32" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981599"/>
        <to usec="0" sec="1456981625"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="202.148.222.32" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981758"/>
        <to usec="0" sec="1456981771"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.226.93.223" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981267"/>
        <to usec="0" sec="1456981278"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.247.184.223" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981371"/>
        <to usec="0" sec="1456981382"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="139.42.19.13" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981468"/>
        <to usec="0" sec="1456981479"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.53.186.13" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981366"/>
        <to usec="0" sec="1456981376"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="196.204.75.230" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981438"/>
        <to usec="0" sec="1456981450"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="62.14.141.243" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981515"/>
        <to usec="0" sec="1456981526"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.61.182.24" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981401"/>
        <to usec="0" sec="1456981411"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.132.122.19" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981723"/>
        <to usec="0" sec="1456981734"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.156.171.237" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981709"/>
        <to usec="0" sec="1456981721"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.121.74.10" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981872"/>
        <to usec="0" sec="1456981882"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.135.176.5" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981372"/>
        <to usec="0" sec="1456981382"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="139.126.189.229"/>
        </slice>
        <from usec="0" sec="1456981829"/>
        <to usec="0" sec="1456981830"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="80.251.61.235" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981675"/>
        <to usec="0" sec="1456982099"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="62.151.123.21" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981201"/>
        <to usec="0" sec="1456982100"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.245.181.252" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981615"/>
        <to usec="0" sec="1456981626"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.235.190.5" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981950"/>
        <to usec="0" sec="1456981980"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="213.175.38.25" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981952"/>
        <to usec="0" sec="1456981965"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.206.54.9" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981334"/>
        <to usec="0" sec="1456981344"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.18.149.238" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982050"/>
        <to usec="0" sec="1456982061"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="116.195.78.25" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981792"/>
        <to usec="0" sec="1456981806"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="110.253.219.248" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981832"/>
        <to usec="0" sec="1456981843"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.97.169.249" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981752"/>
        <to usec="0" sec="1456981763"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="1.115.123.232" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981420"/>
        <to usec="0" sec="1456981431"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.123.176.11" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981991"/>
        <to usec="0" sec="1456982002"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.208.239.233" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981601"/>
        <to usec="0" sec="1456981614"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.22.246.6" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981534"/>
        <to usec="0" sec="1456981545"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="124.7.248.5" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982044"/>
        <to usec="0" sec="1456982056"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.103.135.228" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981272"/>
        <to usec="0" sec="1456981285"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="39.223.107.233" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981306"/>
        <to usec="0" sec="1456981315"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.155.235.5" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981348"/>
        <to usec="0" sec="1456981361"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.157.47.238" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981693"/>
        <to usec="0" sec="1456981702"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.59.51.254" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981226"/>
        <to usec="0" sec="1456981236"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="171.42.200.17" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981766"/>
        <to usec="0" sec="1456981777"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="120.199.154.17" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981268"/>
        <to usec="0" sec="1456981276"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="60.115.185.254" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981387"/>
        <to usec="0" sec="1456981401"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="58.69.76.224" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456982054"/>
        <to usec="0" sec="1456982064"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.253.93.239" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981528"/>
        <to usec="0" sec="1456981540"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.231.81.0" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981616"/>
        <to usec="0" sec="1456981628"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="175.237.40.13" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981789"/>
        <to usec="0" sec="1456981800"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.152.230.9" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981261"/>
        <to usec="0" sec="1456981272"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="86.137.124.240" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981774"/>
        <to usec="0" sec="1456981789"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="1.63.106.10" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981400"/>
        <to usec="0" sec="1456981412"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="60.121.237.246" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981604"/>
        <to usec="0" sec="1456981615"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.199.8.238" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981714"/>
        <to usec="0" sec="1456981723"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.94.98.21" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981896"/>
        <to usec="0" sec="1456981909"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.139.179.235" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981302"/>
        <to usec="0" sec="1456981313"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.91.228.234" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981400"/>
        <to usec="0" sec="1456981403"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.48.22.246" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981765"/>
        <to usec="0" sec="1456981778"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.157.248.239" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981745"/>
        <to usec="0" sec="1456981757"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.56.10.27" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981539"/>
        <to usec="0" sec="1456981550"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.41.190.7" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981708"/>
        <to usec="0" sec="1456981720"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="118.140.13.231" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981556"/>
        <to usec="0" sec="1456981566"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="175.110.64.6" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981923"/>
        <to usec="0" sec="1456981936"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="117.42.161.250" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981230"/>
        <to usec="0" sec="1456981243"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="221.222.5.251" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981894"/>
        <to usec="0" sec="1456981906"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="101.216.67.248" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981267"/>
        <to usec="0" sec="1456981278"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.19.202.7" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981826"/>
        <to usec="0" sec="1456981836"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="58.51.215.226" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981202"/>
        <to usec="0" sec="1456981211"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="58.226.204.253" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456982087"/>
        <to usec="0" sec="1456982091"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="58.72.15.253" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981497"/>
        <to usec="0" sec="1456981506"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.104.94.226" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456982070"/>
        <to usec="0" sec="1456982093"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="110.253.241.1" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981349"/>
        <to usec="0" sec="1456981361"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="42.206.67.254" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981641"/>
        <to usec="0" sec="1456981652"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="186.218.115.255" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1456981408"/>
        <to usec="0" sec="1456981423"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,011,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="123.167.146.33" src_port="1723"/>
        </slice>
        <from usec="0" sec="1456981828"/>
        <to usec="0" sec="1456981829"/>
    </anomaly>
    <anomaly type="notice" value="1.058270,2.138830,999,1 1 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.189.25.60" src_port="53"/>
            <filter dst_ip="150.189.25.60"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981865"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,011,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="110.51.122.223" src_port="23"/>
        </slice>
        <from usec="0" sec="1456981461"/>
        <to usec="0" sec="1456981465"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,011,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="180.121.214.161" src_port="23"/>
        </slice>
        <from usec="0" sec="1456981662"/>
        <to usec="0" sec="1456981665"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,011,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="120.203.186.54" src_port="23"/>
        </slice>
        <from usec="0" sec="1456981864"/>
        <to usec="0" sec="1456981877"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,011,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="80.251.61.235" src_port="23"/>
        </slice>
        <from usec="0" sec="1456981784"/>
        <to usec="0" sec="1456981800"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.43.129.123" dst_ip="204.234.164.152" dst_port="80"/>
        </slice>
        <from usec="0" sec="1456981491"/>
        <to usec="0" sec="1456981825"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="54.248.12.41" dst_ip="157.33.57.65" src_port="80" dst_port="61450"/>
            <filter src_ip="54.248.12.41" dst_ip="157.33.57.65" src_port="80" dst_port="40071"/>
            <filter src_ip="54.248.12.41" dst_ip="157.33.57.65" src_port="80" dst_port="1117"/>
        </slice>
        <from usec="0" sec="1456981592"/>
        <to usec="0" sec="1456981596"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.43.77.67" dst_port="443"/>
            <filter src_ip="163.43.77.67" dst_ip="104.171.206.169" dst_port="80"/>
        </slice>
        <from usec="0" sec="1456981265"/>
        <to usec="0" sec="1456981267"/>
    </anomaly>
    <anomaly type="notice" value="0.580391,2.064030,999,1 1 1 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="88.104.77.62" dst_port="53"/>
            <filter src_ip="192.215.55.77" dst_ip="133.136.207.176" dst_port="25"/>
        </slice>
        <from usec="0" sec="1456981265"/>
        <to usec="0" sec="1456981930"/>
    </anomaly>
    <anomaly type="notice" value="0.439287,2.062940,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="122.152.66.249" dst_ip="163.43.198.23" dst_port="80"/>
        </slice>
        <from usec="0" sec="1456981679"/>
        <to usec="0" sec="1456981684"/>
    </anomaly>
    <anomaly type="notice" value="0.869896,2.165340,504,0 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="198.50.197.176" dst_ip="163.43.130.253" src_port="443" dst_port="50296"/>
        </slice>
        <from usec="0" sec="1456981316"/>
        <to usec="0" sec="1456982090"/>
    </anomaly>
    <anomaly type="notice" value="0.856437,2.192010,010,0 0 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="111.31.255.128" src_port="12200" dst_port="3128" proto="tcp"/>
        </slice>
        <from usec="0" sec="1456981376"/>
        <to usec="0" sec="1456981378"/>
    </anomaly>
    <anomaly type="notice" value="1.124190,2.139890,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="111.19.101.31" src_port="12200" dst_port="3128"/>
            <filter src_ip="111.19.101.31" src_port="12200" dst_port="8080"/>
        </slice>
        <from usec="0" sec="1456981605"/>
        <to usec="0" sec="1456981761"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="168.252.4.98"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981398"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.94.102.118"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981308"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.144.43.229"/>
        </slice>
        <from usec="0" sec="1456981201"/>
        <to usec="0" sec="1456981308"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,999,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="87.101.154.181"/>
        </slice>
        <from usec="0" sec="1456981202"/>
        <to usec="0" sec="1456981307"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="203.94.106.8"/>
        </slice>
        <from usec="0" sec="1456981208"/>
        <to usec="0" sec="1456981305"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="218.211.242.120"/>
        </slice>
        <from usec="0" sec="1456981229"/>
        <to usec="0" sec="1456981247"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="68.20.95.153"/>
        </slice>
        <from usec="0" sec="1456981250"/>
        <to usec="0" sec="1456981275"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="188.214.157.83"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981398"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="192.192.112.61"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981359"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="67.229.103.161"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981397"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="114.210.234.205"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981398"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.144.50.250"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981220"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="222.7.11.61"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981259"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="183.124.183.222"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981330"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="17.152.25.24"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981398"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="98.64.28.213"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981398"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="76.189.63.80"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981398"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="173.27.117.59"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981396"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="61.213.182.12" dst_ip="131.224.45.172" src_port="80"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981398"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="115.9.248.95"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981397"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="189.215.154.223"/>
        </slice>
        <from usec="0" sec="1456981201"/>
        <to usec="0" sec="1456981397"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.43.19.147"/>
        </slice>
        <from usec="0" sec="1456981201"/>
        <to usec="0" sec="1456981397"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="66.198.196.136"/>
        </slice>
        <from usec="0" sec="1456981201"/>
        <to usec="0" sec="1456981398"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,503,0 0 0 1 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="222.84.25.107"/>
        </slice>
        <from usec="0" sec="1456981202"/>
        <to usec="0" sec="1456981398"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.136.56.137"/>
        </slice>
        <from usec="0" sec="1456981204"/>
        <to usec="0" sec="1456981395"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="196.79.173.45"/>
        </slice>
        <from usec="0" sec="1456981205"/>
        <to usec="0" sec="1456981397"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="125.240.100.245"/>
        </slice>
        <from usec="0" sec="1456981206"/>
        <to usec="0" sec="1456981331"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.43.247.148"/>
        </slice>
        <from usec="0" sec="1456981207"/>
        <to usec="0" sec="1456981398"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="167.242.128.78"/>
        </slice>
        <from usec="0" sec="1456981208"/>
        <to usec="0" sec="1456981391"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.43.130.171"/>
        </slice>
        <from usec="0" sec="1456981208"/>
        <to usec="0" sec="1456981394"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.33.105.122"/>
        </slice>
        <from usec="0" sec="1456981209"/>
        <to usec="0" sec="1456981397"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="69.195.2.197"/>
        </slice>
        <from usec="0" sec="1456981209"/>
        <to usec="0" sec="1456981398"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="23.75.118.172"/>
        </slice>
        <from usec="0" sec="1456981210"/>
        <to usec="0" sec="1456981746"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.43.77.243"/>
        </slice>
        <from usec="0" sec="1456981211"/>
        <to usec="0" sec="1456981398"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.144.44.93"/>
        </slice>
        <from usec="0" sec="1456981211"/>
        <to usec="0" sec="1456981397"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="17.184.96.186"/>
        </slice>
        <from usec="0" sec="1456981219"/>
        <to usec="0" sec="1456981386"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,020,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter src_ip="60.218.5.233"/>
        </slice>
        <from usec="0" sec="1456981239"/>
        <to usec="0" sec="1456981300"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="126.203.87.188"/>
        </slice>
        <from usec="0" sec="1456981242"/>
        <to usec="0" sec="1456981310"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="210.229.167.115"/>
        </slice>
        <from usec="0" sec="1456981245"/>
        <to usec="0" sec="1456981389"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="209.214.252.244"/>
        </slice>
        <from usec="0" sec="1456981253"/>
        <to usec="0" sec="1456981377"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,020,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter src_ip="222.73.33.122"/>
        </slice>
        <from usec="0" sec="1456981253"/>
        <to usec="0" sec="1456981319"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.132.60.144"/>
        </slice>
        <from usec="0" sec="1456981255"/>
        <to usec="0" sec="1456981307"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="174.164.237.74"/>
        </slice>
        <from usec="0" sec="1456981290"/>
        <to usec="0" sec="1456981341"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="24.194.177.220"/>
        </slice>
        <from usec="0" sec="1456981291"/>
        <to usec="0" sec="1456981398"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="119.178.101.46"/>
        </slice>
        <from usec="0" sec="1456981318"/>
        <to usec="0" sec="1456981389"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="91.225.141.153"/>
        </slice>
        <from usec="0" sec="1456981328"/>
        <to usec="0" sec="1456981398"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="76.213.218.42"/>
        </slice>
        <from usec="0" sec="1456981344"/>
        <to usec="0" sec="1456981396"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="49.150.15.216"/>
        </slice>
        <from usec="0" sec="1456981376"/>
        <to usec="0" sec="1456981398"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.228.217.16"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981488"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="189.126.207.123"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981488"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.136.249.39"/>
        </slice>
        <from usec="0" sec="1456981210"/>
        <to usec="0" sec="1456981352"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.132.32.9"/>
        </slice>
        <from usec="0" sec="1456981263"/>
        <to usec="0" sec="1456981440"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="133.136.128.119"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981810"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="211.6.60.49"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981842"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="54.236.190.7"/>
        </slice>
        <from usec="0" sec="1456981210"/>
        <to usec="0" sec="1456981838"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="77.206.131.30"/>
        </slice>
        <from usec="0" sec="1456981212"/>
        <to usec="0" sec="1456981845"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="212.5.188.167"/>
        </slice>
        <from usec="0" sec="1456981432"/>
        <to usec="0" sec="1456981843"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="113.215.4.23"/>
        </slice>
        <from usec="0" sec="1456981201"/>
        <to usec="0" sec="1456981938"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.94.116.87" src_port="63368"/>
            <filter src_ip="203.94.116.87" dst_port="53"/>
        </slice>
        <from usec="0" sec="1456981201"/>
        <to usec="0" sec="1456981938"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="198.50.197.177"/>
        </slice>
        <from usec="0" sec="1456981201"/>
        <to usec="0" sec="1456981938"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="37.184.158.213"/>
        </slice>
        <from usec="0" sec="1456981204"/>
        <to usec="0" sec="1456981938"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="17.179.49.97" dst_ip="203.94.118.115" src_port="53"/>
        </slice>
        <from usec="0" sec="1456981205"/>
        <to usec="0" sec="1456981938"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.43.78.11"/>
        </slice>
        <from usec="0" sec="1456981206"/>
        <to usec="0" sec="1456981934"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="108.191.221.0"/>
        </slice>
        <from usec="0" sec="1456981209"/>
        <to usec="0" sec="1456981936"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.144.42.195"/>
        </slice>
        <from usec="0" sec="1456981222"/>
        <to usec="0" sec="1456981938"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="206.41.182.83"/>
        </slice>
        <from usec="0" sec="1456981484"/>
        <to usec="0" sec="1456981920"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.136.208.2"/>
        </slice>
        <from usec="0" sec="1456981501"/>
        <to usec="0" sec="1456981933"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="40.136.93.219"/>
        </slice>
        <from usec="0" sec="1456981598"/>
        <to usec="0" sec="1456981930"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,020,0 0 0 1 0 0 0 0 0 0 0 0,hostout">
        <slice>
            <filter src_ip="157.33.242.97"/>
        </slice>
        <from usec="0" sec="1456981639"/>
        <to usec="0" sec="1456981771"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.88.211.228"/>
        </slice>
        <from usec="0" sec="1456981748"/>
        <to usec="0" sec="1456981770"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="166.206.114.112"/>
        </slice>
        <from usec="0" sec="1456981905"/>
        <to usec="0" sec="1456981913"/>
    </anomaly>
    <anomaly type="notice" value="1.168030,2.202540,502,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.94.111.44" dst_ip="222.85.245.72" src_port="22"/>
        </slice>
        <from usec="0" sec="1456981214"/>
        <to usec="0" sec="1456981887"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="133.136.251.67"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="157.33.251.250"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="131.224.250.197"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.189.175.48"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="133.144.53.12"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="150.189.26.137"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="131.224.250.202"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="150.189.85.201"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.235.220.135"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.235.220.131" src_port="53"/>
            <filter dst_ip="202.235.220.131" dst_port="53"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="133.136.251.83"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.43.36.100"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="203.94.105.245"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="113.109.224.97"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.189.237.108"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.132.62.138"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.94.107.152"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.94.107.157"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.94.107.158"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="131.224.14.254"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.189.237.61"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.94.100.72"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.132.62.196"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="61.191.59.49"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="61.191.59.48"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="172.9.168.181"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="150.189.97.51"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="183.176.96.163" dst_ip="163.43.246.211" src_port="80"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,010,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="150.189.145.45"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="157.33.231.163"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.189.58.220"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="150.189.35.20" dst_port="6881"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="150.189.240.133"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.212.113.4"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="150.189.98.233"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.189.223.137"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.189.175.117" dst_port="54762"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="133.136.25.117"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.047230,2.165830,504,1 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="126.146.215.38" dst_ip="202.235.33.14" dst_port="443"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.94.106.130"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,503,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="183.176.70.128" dst_ip="163.43.233.227" src_port="80"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.189.175.140" dst_port="54770"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.94.110.65"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="150.189.25.128" dst_port="53"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="218.68.182.127"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="133.136.155.111"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="133.136.47.167"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.212.19.106"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="117.93.252.121"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.189.236.114"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.132.61.141"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.94.109.202"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="203.94.106.59"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.513690,2.273780,503,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="106.167.214.64" dst_ip="150.189.82.58"/>
            <filter dst_ip="150.189.82.58" src_port="80"/>
            <filter src_ip="106.167.214.64" dst_ip="150.189.173.40" src_port="80"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981378"/>
    </anomaly>
    <anomaly type="notice" value="1.513690,2.273780,010,0 0 0 1 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.132.61.196" dst_port="50356"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981911"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.189.174.26"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.212.112.13"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.189.174.13"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.212.112.19"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981246"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="104.146.200.80" src_port="80"/>
        </slice>
        <from usec="0" sec="1456981470"/>
        <to usec="0" sec="1456981516"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="60.216.180.86" src_port="40409" dst_port="40"/>
        </slice>
        <from usec="0" sec="1456981605"/>
        <to usec="0" sec="1456981651"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="111.31.255.112" src_port="12200" dst_port="81"/>
            <filter src_ip="111.31.255.112" src_port="12200" dst_port="1081"/>
        </slice>
        <from usec="0" sec="1456981605"/>
        <to usec="0" sec="1456981651"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="150.189.26.137"/>
        </slice>
        <from usec="0" sec="1456981695"/>
        <to usec="0" sec="1456981741"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,503,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="182.89.84.195" dst_ip="202.235.36.75" src_port="80"/>
        </slice>
        <from usec="0" sec="1456981695"/>
        <to usec="0" sec="1456981741"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.43.36.84" src_port="53"/>
        </slice>
        <from usec="0" sec="1456981200"/>
        <to usec="0" sec="1456981741"/>
    </anomaly>
    <anomaly type="notice" value="1.047230,2.165830,503,1 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="150.189.47.6" src_port="80"/>
        </slice>
        <from usec="0" sec="1456981695"/>
        <to usec="0" sec="1456981741"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.212.113.20"/>
        </slice>
        <from usec="0" sec="1456981695"/>
        <to usec="0" sec="1456981741"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.229.239.110" dst_port="22"/>
        </slice>
        <from usec="0" sec="1456981785"/>
        <to usec="0" sec="1456981831"/>
    </anomaly>
    <anomaly type="notice" value="1.124190,2.139890,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.175.61.173" dst_port="23"/>
        </slice>
        <from usec="0" sec="1456981429"/>
        <to usec="0" sec="1456982100"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="150.189.127.222" dst_port="20894"/>
        </slice>
        <from usec="0" sec="1456981785"/>
        <to usec="0" sec="1456981831"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.189.175.117" dst_port="54762"/>
        </slice>
        <from usec="0" sec="1456981965"/>
        <to usec="0" sec="1456982011"/>
    </anomaly>
    <anomaly type="notice" value="1.231490,2.262580,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.189.175.140" dst_port="54770"/>
        </slice>
        <from usec="0" sec="1456981965"/>
        <to usec="0" sec="1456982011"/>
    </anomaly>
    <anomaly type="notice" value="1.373710,2.072160,999,1 0 0 0 0 0 0 0 0 1 0 0,heavy_hitter">
        <slice>
            <filter src_ip="203.94.102.112" dst_ip="217.63.52.73" dst_port="3303"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.373710,2.072160,503,1 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="133.144.140.210" src_port="80"/>
            <filter src_ip="199.209.100.130" dst_ip="133.144.140.210" src_port="443"/>
            <filter src_ip="23.6.251.29" dst_ip="133.144.140.210" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.373710,2.072160,503,1 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="150.189.96.174" src_port="80"/>
            <filter dst_ip="150.189.96.174" dst_port="32986"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.373710,2.072160,504,1 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.43.133.42" src_port="80"/>
            <filter dst_ip="163.43.133.42" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.373710,2.072160,503,1 0 0 0 0 0 0 0 0 1 0 0,ntscACK">
        <slice>
            <filter src_ip="163.43.10.172" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.373710,2.072160,504,1 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter dst_ip="199.236.142.127" dst_port="80"/>
            <filter src_ip="131.224.167.49" dst_ip="199.236.142.127" dst_port="443"/>
            <filter src_ip="131.224.167.49" dst_ip="199.236.142.48" dst_port="80"/>
            <filter src_ip="131.224.226.211" dst_ip="199.236.142.127" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.373710,2.072160,504,1 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="38.13.58.197" dst_ip="202.235.195.220" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
