<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.485236,1.547360,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="223.0.209.248" dst_ip="203.14.115.7" dst_port="3001" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424404"/>
        <to usec="0" sec="1462425290"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.83.181.107"/>
        </slice>
        <from usec="0" sec="1462424999"/>
        <to usec="0" sec="1462425006"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.215.43.234"/>
        </slice>
        <from usec="0" sec="1462425121"/>
        <to usec="0" sec="1462425126"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="103.232.186.16" dst_ip="163.83.125.162" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424997"/>
        <to usec="0" sec="1462425005"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.203.24.101" dst_ip="202.252.94.84" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424820"/>
        <to usec="0" sec="1462424823"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="172.98.74.152"/>
        </slice>
        <from usec="0" sec="1462424812"/>
        <to usec="0" sec="1462424828"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.83.189.157" dst_ip="178.53.165.100" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462425106"/>
        <to usec="0" sec="1462425116"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.83.46.30" dst_ip="166.166.40.59" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424489"/>
        <to usec="0" sec="1462425273"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="211.49.178.183" dst_ip="202.252.89.70" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424692"/>
        <to usec="0" sec="1462424694"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.83.160.76" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424490"/>
        <to usec="0" sec="1462424988"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="172.110.208.35" dst_ip="203.14.124.150" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424696"/>
        <to usec="0" sec="1462424838"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="160.51.209.44" dst_ip="202.252.238.68" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462425141"/>
        <to usec="0" sec="1462425145"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.203.207.200"/>
        </slice>
        <from usec="0" sec="1462425250"/>
        <to usec="0" sec="1462425290"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="209.80.226.88" dst_ip="202.252.76.191" src_port="80" dst_port="49577" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424462"/>
        <to usec="0" sec="1462424738"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.141.116.94" dst_ip="163.83.137.117" src_port="56710" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462425216"/>
        <to usec="0" sec="1462425220"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.83.160.1" dst_ip="52.172.75.36" src_port="52860" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462425054"/>
        <to usec="0" sec="1462425139"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.83.156.70" dst_ip="54.98.246.116" src_port="64279" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424450"/>
        <to usec="0" sec="1462424529"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="126.134.99.242" dst_ip="202.252.94.84" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462425130"/>
        <to usec="0" sec="1462425229"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.203.19.246"/>
        </slice>
        <from usec="0" sec="1462425219"/>
        <to usec="0" sec="1462425297"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.83.72.56"/>
        </slice>
        <from usec="0" sec="1462425187"/>
        <to usec="0" sec="1462425262"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="182.230.217.200" dst_ip="163.83.161.236" src_port="443" dst_port="53412" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424602"/>
        <to usec="0" sec="1462424900"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="182.230.217.201" dst_ip="163.83.212.245" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424804"/>
        <to usec="0" sec="1462425227"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="163.83.215.141" dst_ip="69.40.16.117" src_port="49874" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462425060"/>
        <to usec="0" sec="1462425062"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.146.216.20"/>
        </slice>
        <from usec="0" sec="1462424693"/>
        <to usec="0" sec="1462424707"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="185.117.79.212" dst_ip="163.83.160.10" src_port="443" dst_port="50575" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424430"/>
        <to usec="0" sec="1462424754"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="220.103.129.170"/>
        </slice>
        <from usec="0" sec="1462424793"/>
        <to usec="0" sec="1462424797"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.83.140.228" dst_ip="23.152.66.223" src_port="63014" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424522"/>
        <to usec="0" sec="1462424525"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.215.41.218" dst_ip="199.47.217.177" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424651"/>
        <to usec="0" sec="1462425253"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="162.122.187.226" dst_ip="203.14.112.112" src_port="443" dst_port="60158" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462425003"/>
        <to usec="0" sec="1462425005"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.203.67.94" dst_ip="17.110.247.204" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424773"/>
        <to usec="0" sec="1462424777"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.83.162.106"/>
        </slice>
        <from usec="0" sec="1462424955"/>
        <to usec="0" sec="1462424958"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.83.128.2" dst_ip="52.180.196.86" src_port="51211" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462425249"/>
        <to usec="0" sec="1462425280"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.83.217.179" dst_ip="78.238.187.71" src_port="55491" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424587"/>
        <to usec="0" sec="1462424589"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.252.236.57"/>
        </slice>
        <from usec="0" sec="1462424419"/>
        <to usec="0" sec="1462425123"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="23.221.9.184" dst_ip="163.83.162.17" src_port="80" dst_port="37997" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424455"/>
        <to usec="0" sec="1462424859"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.83.162.126"/>
        </slice>
        <from usec="0" sec="1462424861"/>
        <to usec="0" sec="1462424865"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.93.249.142" dst_ip="17.135.232.2" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462425168"/>
        <to usec="0" sec="1462425170"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="107.246.238.142" dst_ip="202.252.76.191" src_port="80" dst_port="49638" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424800"/>
        <to usec="0" sec="1462424812"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.215.240.132" dst_ip="188.185.240.88" src_port="57199" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424608"/>
        <to usec="0" sec="1462425232"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.83.223.106" dst_ip="52.194.137.197" src_port="53315" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424486"/>
        <to usec="0" sec="1462425196"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.203.202.150"/>
        </slice>
        <from usec="0" sec="1462425139"/>
        <to usec="0" sec="1462425150"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="58.62.135.99" dst_ip="163.83.161.235" src_port="80" dst_port="50986" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424797"/>
        <to usec="0" sec="1462424801"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.203.134.187" dst_ip="31.211.35.204" src_port="38915" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424903"/>
        <to usec="0" sec="1462424912"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.105.102.79" dst_ip="202.252.94.84" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462425060"/>
        <to usec="0" sec="1462425297"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.93.121.182"/>
        </slice>
        <from usec="0" sec="1462424777"/>
        <to usec="0" sec="1462424780"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="121.189.139.93" dst_ip="163.83.7.6" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424841"/>
        <to usec="0" sec="1462424845"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.83.235.86"/>
        </slice>
        <from usec="0" sec="1462424543"/>
        <to usec="0" sec="1462424829"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="219.97.221.168" dst_ip="203.14.124.146" src_port="49463" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424459"/>
        <to usec="0" sec="1462424464"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.83.64.167"/>
        </slice>
        <from usec="0" sec="1462424419"/>
        <to usec="0" sec="1462424423"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.203.110.242" dst_ip="17.165.25.232" src_port="10048" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462425167"/>
        <to usec="0" sec="1462425171"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="193.199.230.244"/>
        </slice>
        <from usec="0" sec="1462424538"/>
        <to usec="0" sec="1462425253"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,502,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="193.199.230.245" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424447"/>
        <to usec="0" sec="1462424479"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.83.158.197" dst_ip="168.205.170.104" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424897"/>
        <to usec="0" sec="1462425093"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.42.158.254" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424787"/>
        <to usec="0" sec="1462424976"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.83.76.192"/>
        </slice>
        <from usec="0" sec="1462425035"/>
        <to usec="0" sec="1462425070"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.83.127.21" dst_ip="31.211.41.204" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424601"/>
        <to usec="0" sec="1462424612"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="163.83.92.239" dst_ip="204.80.45.59" src_port="50648" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424641"/>
        <to usec="0" sec="1462424643"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="133.215.49.38" dst_ip="17.168.218.57" src_port="52067" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424565"/>
        <to usec="0" sec="1462424567"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.83.181.222" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424951"/>
        <to usec="0" sec="1462424964"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="125.202.9.57" dst_ip="163.83.229.248" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462425261"/>
        <to usec="0" sec="1462425264"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.14.124.225" dst_ip="54.29.209.105" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424641"/>
        <to usec="0" sec="1462424643"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="157.93.148.252"/>
        </slice>
        <from usec="0" sec="1462425249"/>
        <to usec="0" sec="1462425253"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="1.80.231.57" dst_ip="202.247.75.160" src_port="49444" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424638"/>
        <to usec="0" sec="1462424883"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,502,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="133.74.229.137"/>
        </slice>
        <from usec="0" sec="1462424731"/>
        <to usec="0" sec="1462425290"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.130.23.140"/>
        </slice>
        <from usec="0" sec="1462424855"/>
        <to usec="0" sec="1462424859"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.83.72.79" dst_port="993"/>
            <filter dst_ip="163.83.72.79" dst_port="443"/>
        </slice>
        <from usec="0" sec="1462424764"/>
        <to usec="0" sec="1462425174"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="221.252.0.81" dst_ip="203.14.121.89" dst_port="80"/>
        </slice>
        <from usec="0" sec="1462424433"/>
        <to usec="0" sec="1462425110"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="163.83.215.166"/>
        </slice>
        <from usec="0" sec="1462425112"/>
        <to usec="0" sec="1462425116"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="117.198.225.116" dst_ip="163.83.161.250" src_port="443" dst_port="5666" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462425045"/>
        <to usec="0" sec="1462425047"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,901,1 1 1 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="211.48.229.112" dst_ip="203.14.124.245" src_port="53"/>
            <filter src_ip="211.48.229.112" dst_ip="203.14.124.244" src_port="53"/>
        </slice>
        <from usec="0" sec="1462424684"/>
        <to usec="0" sec="1462424688"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.186.203.222" dst_ip="203.14.113.6" dst_port="80"/>
        </slice>
        <from usec="0" sec="1462424976"/>
        <to usec="0" sec="1462425300"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="68.243.25.34" dst_ip="163.83.7.29" src_port="41283" dst_port="80"/>
            <filter src_ip="150.185.94.204" dst_ip="163.83.7.29" src_port="61043" dst_port="80"/>
        </slice>
        <from usec="0" sec="1462424728"/>
        <to usec="0" sec="1462424742"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="203.179.131.34"/>
        </slice>
        <from usec="0" sec="1462424414"/>
        <to usec="0" sec="1462424453"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="54.29.209.105" dst_ip="163.83.247.149" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462425228"/>
        <to usec="0" sec="1462425230"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.128.230.106" dst_ip="133.196.108.121" src_port="873" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424608"/>
        <to usec="0" sec="1462424744"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="38.108.70.76" dst_ip="202.252.77.12" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424539"/>
        <to usec="0" sec="1462425295"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,999,1 0 0 0 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="217.95.55.86" dst_ip="203.14.117.177" src_port="3303" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424943"/>
        <to usec="0" sec="1462425226"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="202.16.153.199" dst_ip="163.83.125.240" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424959"/>
        <to usec="0" sec="1462424961"/>
    </anomaly>
    <anomaly type="notice" value="0.845690,1.551420,999,1 1 1 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="121.233.152.5" dst_ip="203.14.100.35" dst_port="53"/>
            <filter src_ip="139.97.201.134" dst_ip="203.14.100.35" dst_port="53"/>
        </slice>
        <from usec="0" sec="1462424402"/>
        <to usec="0" sec="1462425297"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.123.110.4"/>
        </slice>
        <from usec="0" sec="1462425156"/>
        <to usec="0" sec="1462425159"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="186.184.244.148"/>
        </slice>
        <from usec="0" sec="1462424519"/>
        <to usec="0" sec="1462425245"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.83.179.159"/>
        </slice>
        <from usec="0" sec="1462424715"/>
        <to usec="0" sec="1462425294"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="126.161.220.41"/>
        </slice>
        <from usec="0" sec="1462424838"/>
        <to usec="0" sec="1462425152"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.215.53.8" dst_ip="17.135.233.184" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424752"/>
        <to usec="0" sec="1462424755"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="104.146.200.45"/>
        </slice>
        <from usec="0" sec="1462424858"/>
        <to usec="0" sec="1462424875"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="126.203.137.42" dst_ip="202.252.236.54" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424988"/>
        <to usec="0" sec="1462425012"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.83.247.135"/>
        </slice>
        <from usec="0" sec="1462424462"/>
        <to usec="0" sec="1462425126"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.93.22.122"/>
        </slice>
        <from usec="0" sec="1462424709"/>
        <to usec="0" sec="1462424776"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="203.14.124.150" dst_ip="172.110.208.35" dst_port="443"/>
        </slice>
        <from usec="0" sec="1462424402"/>
        <to usec="0" sec="1462425229"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="219.97.101.101"/>
        </slice>
        <from usec="0" sec="1462424442"/>
        <to usec="0" sec="1462424572"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="221.178.173.98"/>
        </slice>
        <from usec="0" sec="1462425008"/>
        <to usec="0" sec="1462425012"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.215.52.162"/>
        </slice>
        <from usec="0" sec="1462425149"/>
        <to usec="0" sec="1462425175"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="221.213.124.168"/>
        </slice>
        <from usec="0" sec="1462425234"/>
        <to usec="0" sec="1462425237"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="85.83.55.180" dst_ip="203.14.119.167" dst_port="3389"/>
            <filter src_ip="76.7.147.158" dst_ip="203.14.119.167" dst_port="443"/>
        </slice>
        <from usec="0" sec="1462424404"/>
        <to usec="0" sec="1462425165"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.93.108.203" dst_ip="65.50.230.83" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462425157"/>
        <to usec="0" sec="1462425165"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.203.87.54" dst_ip="17.172.40.85" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462425278"/>
        <to usec="0" sec="1462425282"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.93.153.2" dst_ip="17.142.236.106" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424728"/>
        <to usec="0" sec="1462424732"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,502,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="1.254.36.36"/>
        </slice>
        <from usec="0" sec="1462424445"/>
        <to usec="0" sec="1462425282"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.93.251.25"/>
        </slice>
        <from usec="0" sec="1462424867"/>
        <to usec="0" sec="1462424871"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.83.160.217" dst_ip="198.40.98.7" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424905"/>
        <to usec="0" sec="1462425171"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.83.212.225"/>
        </slice>
        <from usec="0" sec="1462424968"/>
        <to usec="0" sec="1462425052"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.83.239.202" dst_port="80"/>
        </slice>
        <from usec="0" sec="1462424400"/>
        <to usec="0" sec="1462425220"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.83.0.34"/>
        </slice>
        <from usec="0" sec="1462424812"/>
        <to usec="0" sec="1462424815"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.252.236.43" dst_port="993"/>
        </slice>
        <from usec="0" sec="1462424701"/>
        <to usec="0" sec="1462425237"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="202.252.236.54" dst_ip="202.252.236.54" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424510"/>
        <to usec="0" sec="1462425220"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="202.246.3.119"/>
        </slice>
        <from usec="0" sec="1462424993"/>
        <to usec="0" sec="1462424997"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.167.209.79"/>
        </slice>
        <from usec="0" sec="1462425174"/>
        <to usec="0" sec="1462425179"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="185.253.71.196" dst_ip="163.83.30.250" dst_port="80"/>
            <filter src_ip="185.253.71.5" dst_ip="163.83.30.250" dst_port="80"/>
        </slice>
        <from usec="0" sec="1462424700"/>
        <to usec="0" sec="1462425026"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="183.60.219.54" dst_ip="203.14.115.58" dst_port="80"/>
            <filter src_ip="222.123.192.163" dst_ip="203.14.115.58" dst_port="80"/>
        </slice>
        <from usec="0" sec="1462424410"/>
        <to usec="0" sec="1462425290"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,002,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="65.1.59.25" src_port="1093" dst_port="137" proto="udp"/>
        </slice>
        <from usec="0" sec="1462424470"/>
        <to usec="0" sec="1462424472"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.234.169.115" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1462425017"/>
        <to usec="0" sec="1462425019"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="61.87.153.247" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1462425101"/>
        <to usec="0" sec="1462425112"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.26.164.242"/>
        </slice>
        <from usec="0" sec="1462425286"/>
        <to usec="0" sec="1462425300"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="61.57.33.155" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1462425137"/>
        <to usec="0" sec="1462425148"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="27.209.8.29"/>
        </slice>
        <from usec="0" sec="1462424956"/>
        <to usec="0" sec="1462424958"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="45.13.148.84" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462425249"/>
        <to usec="0" sec="1462425259"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.192.162.187"/>
        </slice>
        <from usec="0" sec="1462425068"/>
        <to usec="0" sec="1462425087"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.244.9.66" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424652"/>
        <to usec="0" sec="1462424663"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="124.107.244.213" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424610"/>
        <to usec="0" sec="1462424618"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="181.200.210.120"/>
        </slice>
        <from usec="0" sec="1462425286"/>
        <to usec="0" sec="1462425290"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.34.104.105" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1462424431"/>
        <to usec="0" sec="1462424442"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="202.181.116.46" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424570"/>
        <to usec="0" sec="1462424581"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.83.126.221"/>
        </slice>
        <from usec="0" sec="1462424761"/>
        <to usec="0" sec="1462424853"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.182.225.107" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462425225"/>
        <to usec="0" sec="1462425237"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="60.62.25.167" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1462425246"/>
        <to usec="0" sec="1462425256"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="211.155.60.21"/>
        </slice>
        <from usec="0" sec="1462425138"/>
        <to usec="0" sec="1462425162"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.201.39.179" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424520"/>
        <to usec="0" sec="1462424530"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="211.125.143.138" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1462424689"/>
        <to usec="0" sec="1462424701"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="162.79.240.119" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424856"/>
        <to usec="0" sec="1462424871"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="59.128.76.143" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424730"/>
        <to usec="0" sec="1462424742"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="94.207.179.115" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1462424400"/>
        <to usec="0" sec="1462424402"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.83.161.108"/>
        </slice>
        <from usec="0" sec="1462424880"/>
        <to usec="0" sec="1462424888"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="42.108.199.103" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1462424425"/>
        <to usec="0" sec="1462424436"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.40.206.152" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424465"/>
        <to usec="0" sec="1462424477"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.140.155.86" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1462424543"/>
        <to usec="0" sec="1462424561"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.75.204.187" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462425283"/>
        <to usec="0" sec="1462425300"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="218.198.174.176"/>
        </slice>
        <from usec="0" sec="1462424498"/>
        <to usec="0" sec="1462424519"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="200.62.0.177" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462425227"/>
        <to usec="0" sec="1462425251"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="84.109.107.72" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424651"/>
        <to usec="0" sec="1462424666"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.244.233.207" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424526"/>
        <to usec="0" sec="1462424536"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.163.25.51" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424697"/>
        <to usec="0" sec="1462424711"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="101.11.23.22" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1462424825"/>
        <to usec="0" sec="1462424827"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.54.225.25" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462425266"/>
        <to usec="0" sec="1462425282"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="171.222.46.219" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1462424557"/>
        <to usec="0" sec="1462424560"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="39.172.194.254" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1462424519"/>
        <to usec="0" sec="1462424521"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.167.210.131"/>
        </slice>
        <from usec="0" sec="1462425092"/>
        <to usec="0" sec="1462425096"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="163.83.228.50"/>
        </slice>
        <from usec="0" sec="1462424975"/>
        <to usec="0" sec="1462424980"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="208.146.1.81"/>
        </slice>
        <from usec="0" sec="1462425125"/>
        <to usec="0" sec="1462425129"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="91.227.146.215"/>
        </slice>
        <from usec="0" sec="1462424603"/>
        <to usec="0" sec="1462424606"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.158.1.198"/>
        </slice>
        <from usec="0" sec="1462424918"/>
        <to usec="0" sec="1462424923"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,011,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="95.87.255.208" src_port="23"/>
        </slice>
        <from usec="0" sec="1462424573"/>
        <to usec="0" sec="1462424575"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="17.145.98.102"/>
        </slice>
        <from usec="0" sec="1462424761"/>
        <to usec="0" sec="1462424765"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.83.0.32"/>
        </slice>
        <from usec="0" sec="1462424732"/>
        <to usec="0" sec="1462424926"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="17.168.132.64"/>
        </slice>
        <from usec="0" sec="1462424559"/>
        <to usec="0" sec="1462424562"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.167.208.176"/>
        </slice>
        <from usec="0" sec="1462425102"/>
        <to usec="0" sec="1462425107"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.14.121.243" dst_port="80"/>
        </slice>
        <from usec="0" sec="1462424767"/>
        <to usec="0" sec="1462425122"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="198.51.52.16"/>
        </slice>
        <from usec="0" sec="1462425052"/>
        <to usec="0" sec="1462425055"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.83.124.94"/>
        </slice>
        <from usec="0" sec="1462425255"/>
        <to usec="0" sec="1462425259"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.215.47.210"/>
        </slice>
        <from usec="0" sec="1462425032"/>
        <to usec="0" sec="1462425036"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="101.68.246.185"/>
        </slice>
        <from usec="0" sec="1462424757"/>
        <to usec="0" sec="1462424774"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.215.141.61"/>
        </slice>
        <from usec="0" sec="1462425293"/>
        <to usec="0" sec="1462425297"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.93.18.117"/>
        </slice>
        <from usec="0" sec="1462424419"/>
        <to usec="0" sec="1462424423"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.83.247.149"/>
        </slice>
        <from usec="0" sec="1462425174"/>
        <to usec="0" sec="1462425179"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.215.171.103"/>
        </slice>
        <from usec="0" sec="1462424987"/>
        <to usec="0" sec="1462424991"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.93.30.153"/>
        </slice>
        <from usec="0" sec="1462425035"/>
        <to usec="0" sec="1462425038"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.215.171.82"/>
        </slice>
        <from usec="0" sec="1462424773"/>
        <to usec="0" sec="1462424778"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.244.39.7"/>
        </slice>
        <from usec="0" sec="1462424725"/>
        <to usec="0" sec="1462424729"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.215.66.236"/>
        </slice>
        <from usec="0" sec="1462424520"/>
        <to usec="0" sec="1462424522"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="126.186.227.26"/>
        </slice>
        <from usec="0" sec="1462424827"/>
        <to usec="0" sec="1462424830"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="110.26.0.229"/>
        </slice>
        <from usec="0" sec="1462425046"/>
        <to usec="0" sec="1462425050"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.173.53.78"/>
        </slice>
        <from usec="0" sec="1462425092"/>
        <to usec="0" sec="1462425096"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.14.126.55" dst_port="53"/>
        </slice>
        <from usec="0" sec="1462424700"/>
        <to usec="0" sec="1462425282"/>
    </anomaly>
    <anomaly type="notice" value="0.845690,1.551420,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.30.90.241" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.979416,1.500390,504,1 1 1 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="192.6.200.1" dst_ip="203.14.124.48" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.247.103.244" dst_port="25"/>
        </slice>
        <from usec="0" sec="1462424466"/>
        <to usec="0" sec="1462425296"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="23.221.9.250" dst_ip="163.83.160.19" src_port="80" dst_port="64321"/>
        </slice>
        <from usec="0" sec="1462425260"/>
        <to usec="0" sec="1462425261"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,503,1 1 1 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.83.230.126" dst_port="80"/>
            <filter src_ip="163.83.230.126" dst_ip="67.53.56.235" dst_port="443"/>
        </slice>
        <from usec="0" sec="1462424738"/>
        <to usec="0" sec="1462425226"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.54.86.146" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424733"/>
        <to usec="0" sec="1462424745"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="93.238.167.154" dst_ip="163.83.158.46" src_port="54646" dst_port="80"/>
        </slice>
        <from usec="0" sec="1462425115"/>
        <to usec="0" sec="1462425122"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,504,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.83.162.51" dst_ip="8.126.244.33" src_port="53306" dst_port="443"/>
        </slice>
        <from usec="0" sec="1462424406"/>
        <to usec="0" sec="1462425300"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.14.100.35" dst_ip="121.233.152.5" src_port="53"/>
            <filter src_ip="203.14.100.35" dst_ip="139.97.201.134" src_port="53"/>
        </slice>
        <from usec="0" sec="1462424748"/>
        <to usec="0" sec="1462425285"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,503,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="60.80.91.183" dst_ip="203.14.125.70" src_port="43562" dst_port="80"/>
            <filter src_ip="60.80.91.183" dst_ip="203.14.125.70" src_port="42122" dst_port="80"/>
            <filter src_ip="60.80.91.183" dst_ip="203.14.125.70" src_port="39369" dst_port="80"/>
            <filter src_ip="60.80.91.183" dst_ip="203.14.125.70" src_port="38699" dst_port="80"/>
            <filter src_ip="60.80.91.183" dst_ip="203.14.125.70" src_port="35218" dst_port="80"/>
        </slice>
        <from usec="0" sec="1462425125"/>
        <to usec="0" sec="1462425129"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.235.72.79" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424921"/>
        <to usec="0" sec="1462424933"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.203.138.168" dst_ip="31.211.38.53" dst_port="80"/>
        </slice>
        <from usec="0" sec="1462424784"/>
        <to usec="0" sec="1462425133"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.106.209.203" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424538"/>
        <to usec="0" sec="1462424549"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="126.241.56.5" dst_ip="202.247.75.161" dst_port="80"/>
        </slice>
        <from usec="0" sec="1462424444"/>
        <to usec="0" sec="1462424592"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.83.162.64" dst_port="443"/>
            <filter src_ip="163.83.162.64" dst_ip="198.18.183.119" dst_port="80"/>
        </slice>
        <from usec="0" sec="1462424402"/>
        <to usec="0" sec="1462425294"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,054,1 1 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="163.83.160.10" dst_ip="52.218.132.16" dst_port="443"/>
        </slice>
        <from usec="0" sec="1462424436"/>
        <to usec="0" sec="1462425290"/>
    </anomaly>
    <anomaly type="notice" value="0.979416,1.500390,503,1 1 1 0 0 0 0 0 0 1 0 0,ntscACK">
        <slice>
            <filter src_ip="163.83.161.206" src_port="45330"/>
            <filter src_ip="163.83.161.206" dst_port="80"/>
            <filter src_ip="163.83.161.206" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.83.125.167" dst_ip="23.20.226.58" dst_port="80"/>
        </slice>
        <from usec="0" sec="1462425038"/>
        <to usec="0" sec="1462425064"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="23.0.181.226" dst_ip="203.14.119.156" dst_port="3389"/>
        </slice>
        <from usec="0" sec="1462424469"/>
        <to usec="0" sec="1462425245"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.139.177.31" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424518"/>
        <to usec="0" sec="1462424529"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="110.171.75.236" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424527"/>
        <to usec="0" sec="1462424538"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,504,1 1 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="163.83.161.228" dst_ip="54.163.119.54"/>
            <filter src_ip="163.83.161.228" dst_ip="52.218.132.16"/>
            <filter src_ip="163.83.161.228" dst_port="443"/>
            <filter src_ip="163.83.161.228" dst_port="80"/>
            <filter dst_ip="54.163.119.54" dst_port="443"/>
            <filter dst_ip="54.163.119.54" dst_port="80"/>
            <filter dst_ip="52.218.132.16" dst_port="443"/>
        </slice>
        <from usec="0" sec="1462424402"/>
        <to usec="0" sec="1462425300"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="124.166.148.85" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425047"/>
        <to usec="0" sec="1462425053"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.84.1.178" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425085"/>
        <to usec="0" sec="1462425096"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.83.229.248" dst_ip="125.202.9.57" src_port="80"/>
        </slice>
        <from usec="0" sec="1462425199"/>
        <to usec="0" sec="1462425264"/>
    </anomaly>
    <anomaly type="notice" value="0.979416,1.500390,503,1 1 1 0 0 0 0 0 0 1 0 0,ntscACK">
        <slice>
            <filter src_ip="163.83.161.235" dst_port="80"/>
            <filter src_ip="163.83.161.235" dst_port="443"/>
            <filter src_ip="163.83.160.121" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.83.125.142" dst_ip="1.47.106.128" src_port="16402" dst_port="46424"/>
        </slice>
        <from usec="0" sec="1462424451"/>
        <to usec="0" sec="1462425095"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="72.172.52.14" dst_ip="203.14.115.18" src_port="63836" dst_port="80"/>
            <filter src_ip="72.172.52.14" dst_ip="203.14.115.18" src_port="63835" dst_port="80"/>
        </slice>
        <from usec="0" sec="1462424899"/>
        <to usec="0" sec="1462424919"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,504,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="162.122.185.27" dst_ip="202.252.77.12" src_port="443" dst_port="63128"/>
        </slice>
        <from usec="0" sec="1462424618"/>
        <to usec="0" sec="1462425241"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,011,1 1 0 0 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="133.215.64.128" dst_ip="198.226.190.60" dst_port="443"/>
        </slice>
        <from usec="0" sec="1462424402"/>
        <to usec="0" sec="1462425287"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,503,1 1 1 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.93.188.140" dst_ip="125.12.228.72" src_port="42472" dst_port="80"/>
            <filter src_ip="157.93.188.140" dst_ip="125.12.228.49" src_port="50810" dst_port="80"/>
        </slice>
        <from usec="0" sec="1462425137"/>
        <to usec="0" sec="1462425142"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="70.114.106.142" dst_ip="203.14.115.18" src_port="35076" dst_port="80"/>
            <filter src_ip="70.114.106.142" dst_ip="203.14.115.18" src_port="2200" dst_port="80"/>
        </slice>
        <from usec="0" sec="1462424741"/>
        <to usec="0" sec="1462424748"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="126.93.121.134" dst_ip="163.83.161.115" src_port="55224" dst_port="9296"/>
        </slice>
        <from usec="0" sec="1462424502"/>
        <to usec="0" sec="1462425254"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.83.160.137" dst_ip="89.26.31.150" dst_port="80"/>
        </slice>
        <from usec="0" sec="1462424414"/>
        <to usec="0" sec="1462425027"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.76.154.131" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425283"/>
        <to usec="0" sec="1462425297"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="42.110.83.124" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425224"/>
        <to usec="0" sec="1462425240"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.252.76.191" dst_port="443"/>
            <filter src_ip="202.252.76.191" dst_ip="17.156.24.121" dst_port="993"/>
        </slice>
        <from usec="0" sec="1462424400"/>
        <to usec="0" sec="1462425300"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,503,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="175.114.206.69" dst_ip="202.252.234.162" src_port="50490" dst_port="80"/>
        </slice>
        <from usec="0" sec="1462425102"/>
        <to usec="0" sec="1462425107"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="118.121.241.172" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424987"/>
        <to usec="0" sec="1462425089"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="200.131.228.174" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424438"/>
        <to usec="0" sec="1462424446"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,999,1 1 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="203.14.125.206" dst_ip="85.83.55.180" src_port="3389"/>
            <filter src_ip="203.14.119.167" dst_ip="85.83.55.180" src_port="3389"/>
        </slice>
        <from usec="0" sec="1462424502"/>
        <to usec="0" sec="1462425294"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="108.180.198.40" dst_ip="203.14.115.18" src_port="51898" dst_port="80"/>
            <filter src_ip="108.180.198.40" dst_ip="203.14.115.18" src_port="51897" dst_port="80"/>
        </slice>
        <from usec="0" sec="1462425095"/>
        <to usec="0" sec="1462425103"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.254.185.20" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425015"/>
        <to usec="0" sec="1462425029"/>
    </anomaly>
    <anomaly type="notice" value="0.845690,1.551420,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="5.52.73.49" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425156"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="220.124.87.38" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425019"/>
        <to usec="0" sec="1462425031"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.210.233.221" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425224"/>
        <to usec="0" sec="1462425251"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,503,1 1 1 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.83.5.107" dst_port="80"/>
        </slice>
        <from usec="0" sec="1462424834"/>
        <to usec="0" sec="1462425017"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="192.62.221.120" dst_ip="203.14.118.185"/>
            <filter src_ip="192.62.221.120" dst_port="53"/>
            <filter src_ip="192.62.221.112" dst_ip="203.14.118.185"/>
            <filter src_ip="192.62.221.112" dst_port="53"/>
            <filter dst_ip="203.14.118.185" dst_port="53"/>
            <filter dst_ip="203.14.118.185" src_port="53" dst_port="65350"/>
        </slice>
        <from usec="0" sec="1462425073"/>
        <to usec="0" sec="1462425080"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.215.18.84" dst_ip="54.70.241.114" dst_port="443"/>
            <filter src_ip="133.215.18.84" dst_ip="207.199.21.76" dst_port="80"/>
            <filter src_ip="133.215.18.84" dst_ip="198.201.117.47" dst_port="80"/>
        </slice>
        <from usec="0" sec="1462424583"/>
        <to usec="0" sec="1462424780"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="203.14.118.45" dst_ip="199.7.115.107" dst_port="53"/>
            <filter src_ip="203.14.118.182" dst_ip="199.7.115.107" dst_port="53"/>
            <filter src_ip="203.14.118.191" dst_ip="199.7.115.107" dst_port="53"/>
            <filter src_ip="203.14.118.185" dst_ip="199.7.115.107" dst_port="53"/>
        </slice>
        <from usec="0" sec="1462425071"/>
        <to usec="0" sec="1462425077"/>
    </anomaly>
    <anomaly type="notice" value="0.979416,1.500390,504,1 1 1 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="203.14.119.167" dst_ip="76.7.147.158" src_port="443"/>
            <filter src_ip="203.14.119.167" dst_ip="96.7.90.187" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="212.211.231.254" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424417"/>
        <to usec="0" sec="1462424448"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.104.234.30" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425033"/>
        <to usec="0" sec="1462425041"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.77.51.207" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424925"/>
        <to usec="0" sec="1462424935"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.239.13.174" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424785"/>
        <to usec="0" sec="1462424798"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="189.10.139.92" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424996"/>
        <to usec="0" sec="1462425015"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.14.105.149" dst_ip="210.167.14.218" dst_port="443"/>
        </slice>
        <from usec="0" sec="1462424416"/>
        <to usec="0" sec="1462425079"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,503,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.83.215.32" dst_port="80"/>
        </slice>
        <from usec="0" sec="1462424400"/>
        <to usec="0" sec="1462425259"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="27.179.196.217" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424522"/>
        <to usec="0" sec="1462424534"/>
    </anomaly>
    <anomaly type="notice" value="0.845690,1.551420,010,1 1 1 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="186.65.97.144" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425163"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.1.181.236" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425279"/>
        <to usec="0" sec="1462425285"/>
    </anomaly>
    <anomaly type="notice" value="0.845690,1.551420,999,1 1 1 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.144.233.229" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.139.139.206" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425104"/>
        <to usec="0" sec="1462425117"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.160.8.57" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424589"/>
        <to usec="0" sec="1462424597"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.238.59.180" src_port="6000" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1462425160"/>
        <to usec="0" sec="1462425163"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.7.57.163" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425121"/>
        <to usec="0" sec="1462425135"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.196.57.56" src_port="5268" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1462424511"/>
        <to usec="0" sec="1462424513"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.103.61.237" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424960"/>
        <to usec="0" sec="1462424973"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="124.153.91.72" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424458"/>
        <to usec="0" sec="1462424466"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="111.136.157.22" src_port="12200" dst_port="21320"/>
            <filter src_ip="111.136.157.22" src_port="12200" dst_port="8080"/>
            <filter src_ip="111.136.157.22" src_port="12200" dst_port="8118"/>
        </slice>
        <from usec="0" sec="1462424883"/>
        <to usec="0" sec="1462424968"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="5.51.130.224" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425082"/>
        <to usec="0" sec="1462425096"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="113.151.190.132"/>
        </slice>
        <from usec="0" sec="1462424824"/>
        <to usec="0" sec="1462424826"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,020,1 1 1 0 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="203.14.126.119"/>
        </slice>
        <from usec="0" sec="1462424455"/>
        <to usec="0" sec="1462424868"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.101.253.129" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424667"/>
        <to usec="0" sec="1462424694"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="42.172.164.138" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425049"/>
        <to usec="0" sec="1462425064"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="59.128.84.122" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424756"/>
        <to usec="0" sec="1462424769"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="1.154.172.124" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424825"/>
        <to usec="0" sec="1462424836"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.76.57.15" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424684"/>
        <to usec="0" sec="1462424699"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="211.35.23.131" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425023"/>
        <to usec="0" sec="1462425035"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.92.79.141" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425049"/>
        <to usec="0" sec="1462425061"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="61.224.41.136" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424883"/>
        <to usec="0" sec="1462424917"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.129.88.120" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424465"/>
        <to usec="0" sec="1462424477"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="79.135.28.126" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424419"/>
        <to usec="0" sec="1462424431"/>
    </anomaly>
    <anomaly type="notice" value="0.845690,1.551420,999,1 1 1 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.92.145.137" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425217"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.197.73.118" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425022"/>
        <to usec="0" sec="1462425034"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.65.127.244" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424876"/>
        <to usec="0" sec="1462424886"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="117.193.33.123" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424953"/>
        <to usec="0" sec="1462424967"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.194.2.245" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425245"/>
        <to usec="0" sec="1462425300"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.97.14.5" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424609"/>
        <to usec="0" sec="1462424622"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.32.213.138" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424926"/>
        <to usec="0" sec="1462424936"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="41.102.157.7" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424528"/>
        <to usec="0" sec="1462424539"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="111.159.28.132" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424589"/>
        <to usec="0" sec="1462424599"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="118.135.164.117" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425225"/>
        <to usec="0" sec="1462425234"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="59.128.181.8" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424994"/>
        <to usec="0" sec="1462425009"/>
    </anomaly>
    <anomaly type="notice" value="0.845690,1.551420,999,1 1 1 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.135.39.249" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.845690,1.551420,999,1 1 1 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.92.190.11" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="117.39.23.248" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425263"/>
        <to usec="0" sec="1462425273"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="36.29.146.122" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424687"/>
        <to usec="0" sec="1462424698"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="124.8.57.122" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424724"/>
        <to usec="0" sec="1462424736"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="110.173.196.11" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425239"/>
        <to usec="0" sec="1462425251"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="99.52.163.243" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424404"/>
        <to usec="0" sec="1462424415"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.225.105.3" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424803"/>
        <to usec="0" sec="1462424805"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.136.89.140" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424562"/>
        <to usec="0" sec="1462424583"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="37.67.196.130" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424515"/>
        <to usec="0" sec="1462424525"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="42.199.199.141" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425253"/>
        <to usec="0" sec="1462425282"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.7.125.126" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424826"/>
        <to usec="0" sec="1462424851"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.244.21.254" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425110"/>
        <to usec="0" sec="1462425135"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="59.227.30.126" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424989"/>
        <to usec="0" sec="1462425018"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.139.245.143" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425263"/>
        <to usec="0" sec="1462425275"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.59.61.254" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424747"/>
        <to usec="0" sec="1462424759"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="188.126.222.129" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425031"/>
        <to usec="0" sec="1462425042"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="49.207.5.142" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424888"/>
        <to usec="0" sec="1462424899"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="46.86.167.147" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424572"/>
        <to usec="0" sec="1462424584"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="124.76.32.238" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425054"/>
        <to usec="0" sec="1462425056"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="187.221.117.147" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424626"/>
        <to usec="0" sec="1462424638"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="79.229.145.108" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424632"/>
        <to usec="0" sec="1462424658"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="221.125.241.105" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424812"/>
        <to usec="0" sec="1462424831"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="37.168.199.237" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425127"/>
        <to usec="0" sec="1462425143"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.157.150.19" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425235"/>
        <to usec="0" sec="1462425247"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.207.127.236" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425122"/>
        <to usec="0" sec="1462425154"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="223.24.116.108" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424821"/>
        <to usec="0" sec="1462424832"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="58.21.168.19" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425280"/>
        <to usec="0" sec="1462425294"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="118.78.37.147" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424859"/>
        <to usec="0" sec="1462424861"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.47.211.235" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424648"/>
        <to usec="0" sec="1462424657"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.124.0.20" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424416"/>
        <to usec="0" sec="1462424428"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="176.237.40.106" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424879"/>
        <to usec="0" sec="1462424890"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="120.178.207.237" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425281"/>
        <to usec="0" sec="1462425290"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="178.59.76.21" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424807"/>
        <to usec="0" sec="1462424817"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="221.22.214.104" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425156"/>
        <to usec="0" sec="1462425167"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.103.159.150" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424744"/>
        <to usec="0" sec="1462424756"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="27.193.91.228" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424580"/>
        <to usec="0" sec="1462424594"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.30.47.152" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424800"/>
        <to usec="0" sec="1462424815"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.44.86.155" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424831"/>
        <to usec="0" sec="1462424841"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.62.215.152" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425150"/>
        <to usec="0" sec="1462425165"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="190.225.237.152" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424553"/>
        <to usec="0" sec="1462424566"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="173.163.158.101" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425146"/>
        <to usec="0" sec="1462425165"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="139.39.181.230" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424608"/>
        <to usec="0" sec="1462424616"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="112.213.97.228" dst_ip="163.83.161.12" src_port="21754" dst_port="8739"/>
        </slice>
        <from usec="0" sec="1462424489"/>
        <to usec="0" sec="1462425073"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.192.83.153" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424931"/>
        <to usec="0" sec="1462424943"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.74.163.231" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424502"/>
        <to usec="0" sec="1462424513"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="200.20.152.29" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424624"/>
        <to usec="0" sec="1462424635"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.16.120.98" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424454"/>
        <to usec="0" sec="1462424472"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="181.139.72.30" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425127"/>
        <to usec="0" sec="1462425138"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="61.203.147.212" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424449"/>
        <to usec="0" sec="1462424458"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.207.141.179" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424407"/>
        <to usec="0" sec="1462424417"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="118.127.241.163" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424404"/>
        <to usec="0" sec="1462424417"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.235.55.177" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425094"/>
        <to usec="0" sec="1462425110"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="190.35.153.181" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424626"/>
        <to usec="0" sec="1462424638"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="27.218.79.94" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425032"/>
        <to usec="0" sec="1462425036"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="80.196.45.165" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424534"/>
        <to usec="0" sec="1462424548"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="42.198.85.214" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425150"/>
        <to usec="0" sec="1462425160"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="178.50.23.77" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424741"/>
        <to usec="0" sec="1462424750"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="115.64.249.205" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424756"/>
        <to usec="0" sec="1462424768"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="213.181.183.165" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424747"/>
        <to usec="0" sec="1462424758"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="39.128.160.85" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425036"/>
        <to usec="0" sec="1462425047"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.31.190.33" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424489"/>
        <to usec="0" sec="1462424501"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="111.81.53.55" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424800"/>
        <to usec="0" sec="1462424813"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.21.217.167" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424535"/>
        <to usec="0" sec="1462424549"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.3.85.177" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425277"/>
        <to usec="0" sec="1462425287"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.105.168.54" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425222"/>
        <to usec="0" sec="1462425245"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.122.128.75" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424589"/>
        <to usec="0" sec="1462424602"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="124.107.174.219" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424673"/>
        <to usec="0" sec="1462424693"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="189.100.49.53" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424422"/>
        <to usec="0" sec="1462424431"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="218.89.87.164" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425102"/>
        <to usec="0" sec="1462425116"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.33.166.185" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424667"/>
        <to usec="0" sec="1462424676"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.150.50.90" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424479"/>
        <to usec="0" sec="1462424491"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.34.53.200" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424724"/>
        <to usec="0" sec="1462424754"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="139.34.194.188" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425281"/>
        <to usec="0" sec="1462425287"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.147.244.163" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424732"/>
        <to usec="0" sec="1462424742"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="61.87.110.194" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425069"/>
        <to usec="0" sec="1462425083"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="98.16.206.63" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424749"/>
        <to usec="0" sec="1462424765"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="124.107.58.161" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425214"/>
        <to usec="0" sec="1462425228"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.163.110.160" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424461"/>
        <to usec="0" sec="1462424501"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="190.104.139.209" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425155"/>
        <to usec="0" sec="1462425165"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="218.253.100.64" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424849"/>
        <to usec="0" sec="1462424862"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="41.229.67.62" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425059"/>
        <to usec="0" sec="1462425071"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="108.130.173.78" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424406"/>
        <to usec="0" sec="1462424427"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.8.119.161" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424890"/>
        <to usec="0" sec="1462424903"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="79.132.72.51" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424873"/>
        <to usec="0" sec="1462424884"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.55.132.200" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424840"/>
        <to usec="0" sec="1462424853"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.90.149.181" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424814"/>
        <to usec="0" sec="1462424823"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="41.181.30.50" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425274"/>
        <to usec="0" sec="1462425300"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.102.218.81" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425009"/>
        <to usec="0" sec="1462425019"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="31.86.4.78" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425252"/>
        <to usec="0" sec="1462425262"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.196.172.176" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424541"/>
        <to usec="0" sec="1462424571"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.186.108.50" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424832"/>
        <to usec="0" sec="1462424844"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="61.255.85.84" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424864"/>
        <to usec="0" sec="1462424878"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="61.228.97.85" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424796"/>
        <to usec="0" sec="1462424807"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.23.177.201" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424785"/>
        <to usec="0" sec="1462424797"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.28.33.183" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425216"/>
        <to usec="0" sec="1462425226"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="58.48.50.87" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1462424943"/>
        <to usec="0" sec="1462424950"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.126.14.41" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425053"/>
        <to usec="0" sec="1462425065"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="27.216.243.40" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425011"/>
        <to usec="0" sec="1462425020"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="110.5.58.69" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424524"/>
        <to usec="0" sec="1462424535"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="181.58.188.38" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425076"/>
        <to usec="0" sec="1462425086"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.65.140.39" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424984"/>
        <to usec="0" sec="1462424995"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.105.237.166" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424918"/>
        <to usec="0" sec="1462424929"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="76.228.73.71" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425249"/>
        <to usec="0" sec="1462425267"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.179.206.60" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424546"/>
        <to usec="0" sec="1462424571"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.189.110.93" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424799"/>
        <to usec="0" sec="1462424812"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.234.99.33" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424678"/>
        <to usec="0" sec="1462424689"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="124.104.216.64" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425076"/>
        <to usec="0" sec="1462425089"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="221.57.150.95" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424858"/>
        <to usec="0" sec="1462424862"/>
    </anomaly>
    <anomaly type="notice" value="0.845690,1.551420,999,1 1 1 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="222.152.31.64" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.38.223.223" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424781"/>
        <to usec="0" sec="1462424793"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="39.135.53.176" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424656"/>
        <to usec="0" sec="1462424668"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.35.152.75" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424982"/>
        <to usec="0" sec="1462424992"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.91.139.128" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425121"/>
        <to usec="0" sec="1462425133"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.54.105.54" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424825"/>
        <to usec="0" sec="1462424836"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="217.230.98.242" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424581"/>
        <to usec="0" sec="1462424595"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="41.160.244.207" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424455"/>
        <to usec="0" sec="1462424469"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="124.114.152.12" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425210"/>
        <to usec="0" sec="1462425220"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.124.52.65" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425046"/>
        <to usec="0" sec="1462425055"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="42.199.96.12" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424536"/>
        <to usec="0" sec="1462424546"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="192.154.69.75" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425214"/>
        <to usec="0" sec="1462425227"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.74.157.203" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425093"/>
        <to usec="0" sec="1462425110"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.97.128.68" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424602"/>
        <to usec="0" sec="1462424616"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="118.78.180.74" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424896"/>
        <to usec="0" sec="1462424903"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.218.23.181" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424581"/>
        <to usec="0" sec="1462424595"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.65.64.1" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424709"/>
        <to usec="0" sec="1462424726"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="196.184.99.192" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424644"/>
        <to usec="0" sec="1462424656"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="27.208.37.201" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424669"/>
        <to usec="0" sec="1462424675"/>
    </anomaly>
    <anomaly type="notice" value="0.979416,1.500390,999,1 1 1 0 0 0 0 0 0 1 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.136.242.48" dst_port="53413"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.89.142.62" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424571"/>
        <to usec="0" sec="1462424595"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="118.212.184.120" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424685"/>
        <to usec="0" sec="1462424701"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="190.10.13.68" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425140"/>
        <to usec="0" sec="1462425152"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="58.53.34.122" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425244"/>
        <to usec="0" sec="1462425253"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="186.241.92.58" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425070"/>
        <to usec="0" sec="1462425081"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="42.166.214.53" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424841"/>
        <to usec="0" sec="1462424844"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.121.130.74" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424671"/>
        <to usec="0" sec="1462424684"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.155.22.137" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425119"/>
        <to usec="0" sec="1462425133"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.60.239.134" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424834"/>
        <to usec="0" sec="1462424845"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="118.148.201.134" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425111"/>
        <to usec="0" sec="1462425126"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.185.213.9" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424806"/>
        <to usec="0" sec="1462424825"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.186.43.120" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425012"/>
        <to usec="0" sec="1462425023"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="117.176.112.51" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424845"/>
        <to usec="0" sec="1462424854"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.73.5.253" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424747"/>
        <to usec="0" sec="1462424757"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.80.156.125" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424960"/>
        <to usec="0" sec="1462424991"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.144.135.129" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424858"/>
        <to usec="0" sec="1462424865"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.140.196.14" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425257"/>
        <to usec="0" sec="1462425270"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="43.31.225.206" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425050"/>
        <to usec="0" sec="1462425064"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.81.248.49" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424477"/>
        <to usec="0" sec="1462424496"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.48.110.255" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425041"/>
        <to usec="0" sec="1462425052"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.125.156.63" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424588"/>
        <to usec="0" sec="1462424600"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.42.39.143" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424587"/>
        <to usec="0" sec="1462424597"/>
    </anomaly>
    <anomaly type="notice" value="0.808978,1.559930,999,1 1 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="125.234.90.80" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.155.241.232" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424648"/>
        <to usec="0" sec="1462424662"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="181.84.245.232" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425142"/>
        <to usec="0" sec="1462425154"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="27.37.65.149" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424572"/>
        <to usec="0" sec="1462424582"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.45.3.213" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425253"/>
        <to usec="0" sec="1462425266"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="176.5.150.235" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425085"/>
        <to usec="0" sec="1462425100"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.232.144.104" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425004"/>
        <to usec="0" sec="1462425019"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="41.88.123.171" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424715"/>
        <to usec="0" sec="1462424729"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.239.81.108" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424677"/>
        <to usec="0" sec="1462424689"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="60.98.214.20" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425275"/>
        <to usec="0" sec="1462425287"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.247.191.171" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425275"/>
        <to usec="0" sec="1462425284"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.33.194.19" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424817"/>
        <to usec="0" sec="1462424826"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.7.170.146" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424485"/>
        <to usec="0" sec="1462424497"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.23.165.239" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425042"/>
        <to usec="0" sec="1462425054"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="211.211.191.169" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424896"/>
        <to usec="0" sec="1462424910"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="211.33.33.175" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424929"/>
        <to usec="0" sec="1462424942"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="119.77.121.231" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424949"/>
        <to usec="0" sec="1462424961"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.86.184.36" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424975"/>
        <to usec="0" sec="1462424980"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="218.89.62.102" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424932"/>
        <to usec="0" sec="1462424944"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.31.49.230" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424980"/>
        <to usec="0" sec="1462424990"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="37.106.230.27" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425214"/>
        <to usec="0" sec="1462425225"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.80.119.166" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424757"/>
        <to usec="0" sec="1462424772"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.90.68.100" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424776"/>
        <to usec="0" sec="1462424778"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.89.23.167" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425005"/>
        <to usec="0" sec="1462425019"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,502,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="218.145.78.35" dst_ip="203.14.115.253" src_port="57385" dst_port="22"/>
        </slice>
        <from usec="0" sec="1462424858"/>
        <to usec="0" sec="1462425035"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.8.141.221" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424674"/>
        <to usec="0" sec="1462424685"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="221.97.182.162" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424894"/>
        <to usec="0" sec="1462424920"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="106.11.26.94" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425265"/>
        <to usec="0" sec="1462425295"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="27.44.22.30" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424802"/>
        <to usec="0" sec="1462424811"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="71.226.106.97" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424940"/>
        <to usec="0" sec="1462424952"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.102.107.160" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425109"/>
        <to usec="0" sec="1462425140"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.215.44.51" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424400"/>
        <to usec="0" sec="1462424408"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="60.62.135.212" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424611"/>
        <to usec="0" sec="1462424623"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.109.226.55" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424522"/>
        <to usec="0" sec="1462424532"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.128.173.201" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424470"/>
        <to usec="0" sec="1462424481"/>
    </anomaly>
    <anomaly type="notice" value="0.845690,1.551420,999,1 1 1 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="36.25.189.219" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="42.201.174.74" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424701"/>
        <to usec="0" sec="1462424713"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="222.133.102.184" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425127"/>
        <to usec="0" sec="1462425142"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="115.70.7.153" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424817"/>
        <to usec="0" sec="1462424830"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="111.119.73.230" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424966"/>
        <to usec="0" sec="1462424980"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.22.65.134" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424842"/>
        <to usec="0" sec="1462424853"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="27.211.222.22" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424432"/>
        <to usec="0" sec="1462424444"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="190.76.9.238" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424640"/>
        <to usec="0" sec="1462424653"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="115.69.81.107" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424557"/>
        <to usec="0" sec="1462424569"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="101.71.123.57" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424744"/>
        <to usec="0" sec="1462424757"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="180.101.176.5" dst_port="49152"/>
        </slice>
        <from usec="0" sec="1462424716"/>
        <to usec="0" sec="1462424719"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.28.47.233" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424890"/>
        <to usec="0" sec="1462424903"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="101.69.197.244" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424692"/>
        <to usec="0" sec="1462424706"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="223.112.213.139" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424830"/>
        <to usec="0" sec="1462424850"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.13.73.229" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424768"/>
        <to usec="0" sec="1462424780"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="176.53.20.102" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424400"/>
        <to usec="0" sec="1462424403"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="143.182.78.26" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424705"/>
        <to usec="0" sec="1462424726"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.244.216.108" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425221"/>
        <to usec="0" sec="1462425246"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="197.8.242.115" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424541"/>
        <to usec="0" sec="1462424552"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.128.135.162" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424578"/>
        <to usec="0" sec="1462424588"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.74.100.29" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424981"/>
        <to usec="0" sec="1462424994"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="42.165.173.224" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425234"/>
        <to usec="0" sec="1462425245"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="118.220.62.222" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424451"/>
        <to usec="0" sec="1462424462"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="110.1.215.168" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424580"/>
        <to usec="0" sec="1462424592"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="39.168.196.215" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424835"/>
        <to usec="0" sec="1462424843"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.94.223.147" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424505"/>
        <to usec="0" sec="1462424515"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="220.125.83.42" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425227"/>
        <to usec="0" sec="1462425243"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="37.39.217.109" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424539"/>
        <to usec="0" sec="1462424562"/>
    </anomaly>
    <anomaly type="notice" value="0.845690,1.551420,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.223.158.46" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.102.80.18" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424505"/>
        <to usec="0" sec="1462424516"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.208.27.214" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424777"/>
        <to usec="0" sec="1462424787"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.17.53.173" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424617"/>
        <to usec="0" sec="1462424629"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.196.146.16" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424800"/>
        <to usec="0" sec="1462424815"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="222.170.74.171" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424739"/>
        <to usec="0" sec="1462424748"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="186.105.249.47" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424857"/>
        <to usec="0" sec="1462424868"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="27.37.39.147" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424748"/>
        <to usec="0" sec="1462424761"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="42.164.156.53" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424553"/>
        <to usec="0" sec="1462424558"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="109.89.116.117" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424670"/>
        <to usec="0" sec="1462424681"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.141.133.181" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425241"/>
        <to usec="0" sec="1462425252"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="223.209.213.210" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424530"/>
        <to usec="0" sec="1462424541"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.82.30.106" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424600"/>
        <to usec="0" sec="1462424611"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="60.232.179.241" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424744"/>
        <to usec="0" sec="1462424774"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.175.185.120" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425147"/>
        <to usec="0" sec="1462425151"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="178.193.61.36" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424458"/>
        <to usec="0" sec="1462424470"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.22.129.58" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425263"/>
        <to usec="0" sec="1462425286"/>
    </anomaly>
    <anomaly type="notice" value="0.845690,1.551420,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.154.21.229" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="27.176.211.248" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425144"/>
        <to usec="0" sec="1462425155"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.54.134.25" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424619"/>
        <to usec="0" sec="1462424631"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="188.118.91.216" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424420"/>
        <to usec="0" sec="1462424448"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="61.0.50.24" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425052"/>
        <to usec="0" sec="1462425064"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="80.242.107.188" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424861"/>
        <to usec="0" sec="1462424875"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="49.77.91.227" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425075"/>
        <to usec="0" sec="1462425086"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.126.215.129" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424525"/>
        <to usec="0" sec="1462424537"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="49.75.10.160" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424402"/>
        <to usec="0" sec="1462424431"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="187.217.202.127" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425046"/>
        <to usec="0" sec="1462425058"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="203.151.71.129" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424905"/>
        <to usec="0" sec="1462424912"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="27.207.132.1" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424927"/>
        <to usec="0" sec="1462424939"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.79.11.123" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424880"/>
        <to usec="0" sec="1462424894"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.149.80.140" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425006"/>
        <to usec="0" sec="1462425030"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="41.181.28.112" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424875"/>
        <to usec="0" sec="1462424885"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="190.110.80.141" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425231"/>
        <to usec="0" sec="1462425242"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="101.5.40.135" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424764"/>
        <to usec="0" sec="1462424782"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="221.231.119.115" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424699"/>
        <to usec="0" sec="1462424713"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="117.185.220.116" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424460"/>
        <to usec="0" sec="1462424471"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="2.206.213.116" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424414"/>
        <to usec="0" sec="1462424427"/>
    </anomaly>
    <anomaly type="notice" value="0.845690,1.551420,999,1 1 1 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="125.106.33.124" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.58.47.114" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424753"/>
        <to usec="0" sec="1462424764"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="190.111.18.133" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424654"/>
        <to usec="0" sec="1462424665"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.29.52.137" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424702"/>
        <to usec="0" sec="1462424716"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="218.125.238.139" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425161"/>
        <to usec="0" sec="1462425173"/>
    </anomaly>
    <anomaly type="notice" value="0.845690,1.551420,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.30.65.134" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="69.33.62.134" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424844"/>
        <to usec="0" sec="1462424878"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.159.74.121" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424456"/>
        <to usec="0" sec="1462424464"/>
    </anomaly>
    <anomaly type="notice" value="0.845690,1.551420,999,1 1 1 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="188.52.201.119" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.31.166.137" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424499"/>
        <to usec="0" sec="1462424512"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.124.176.123" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424740"/>
        <to usec="0" sec="1462424752"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.192.243.115" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424943"/>
        <to usec="0" sec="1462424955"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="41.125.212.140" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424866"/>
        <to usec="0" sec="1462424877"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="118.80.153.114" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424769"/>
        <to usec="0" sec="1462424778"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="23.131.22.141" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424998"/>
        <to usec="0" sec="1462425012"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="111.185.71.125" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424536"/>
        <to usec="0" sec="1462424546"/>
    </anomaly>
    <anomaly type="notice" value="0.845690,1.551420,999,1 1 1 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.69.69.125" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.17.124.128" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424692"/>
        <to usec="0" sec="1462424704"/>
    </anomaly>
    <anomaly type="notice" value="0.845690,1.551420,999,1 1 1 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.44.132.128" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425164"/>
        <to usec="0" sec="1462425228"/>
    </anomaly>
    <anomaly type="notice" value="0.808978,1.559930,010,1 1 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="221.21.162.128" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425154"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="192.64.200.32"/>
            <filter src_ip="177.35.5.142" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424547"/>
        <to usec="0" sec="1462425110"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="197.208.29.127" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424543"/>
        <to usec="0" sec="1462424554"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="218.230.164.149" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424545"/>
        <to usec="0" sec="1462424574"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="180.106.110.110" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424632"/>
        <to usec="0" sec="1462424643"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="176.52.114.150" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424981"/>
        <to usec="0" sec="1462424995"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.22.41.105" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425088"/>
        <to usec="0" sec="1462425105"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.145.198.108" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424470"/>
        <to usec="0" sec="1462424480"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.43.233.109" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424744"/>
        <to usec="0" sec="1462424755"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="59.129.40.144" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424425"/>
        <to usec="0" sec="1462424458"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.28.119.104" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424423"/>
        <to usec="0" sec="1462424434"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="159.219.205.104" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424793"/>
        <to usec="0" sec="1462424805"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="124.159.121.100" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424481"/>
        <to usec="0" sec="1462424489"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.192.172.155" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424845"/>
        <to usec="0" sec="1462424856"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="119.77.139.103" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425228"/>
        <to usec="0" sec="1462425240"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="223.206.8.153" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424743"/>
        <to usec="0" sec="1462424755"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.229.14.103" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424428"/>
        <to usec="0" sec="1462424439"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="219.198.225.152" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425250"/>
        <to usec="0" sec="1462425260"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.197.251.99" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425140"/>
        <to usec="0" sec="1462425164"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="84.80.179.99" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424790"/>
        <to usec="0" sec="1462424802"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="111.131.138.99" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424550"/>
        <to usec="0" sec="1462424564"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.192.81.156" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425150"/>
        <to usec="0" sec="1462425155"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.83.194.98" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424478"/>
        <to usec="0" sec="1462424487"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="37.57.12.157" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424841"/>
        <to usec="0" sec="1462424852"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.77.179.97" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424805"/>
        <to usec="0" sec="1462424817"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="124.139.245.175" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424801"/>
        <to usec="0" sec="1462424805"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.134.252.168" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424723"/>
        <to usec="0" sec="1462424736"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.29.217.67" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424554"/>
        <to usec="0" sec="1462424569"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.150.26.92" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425266"/>
        <to usec="0" sec="1462425276"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="27.194.195.94" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424461"/>
        <to usec="0" sec="1462424473"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="117.178.102.165" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424614"/>
        <to usec="0" sec="1462424626"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.150.109.70" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425018"/>
        <to usec="0" sec="1462425044"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.234.59.81" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425076"/>
        <to usec="0" sec="1462425087"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.251.144.184" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424486"/>
        <to usec="0" sec="1462424497"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.76.60.171" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425025"/>
        <to usec="0" sec="1462425030"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.54.9.171" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424742"/>
        <to usec="0" sec="1462424753"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="223.117.111.66" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424949"/>
        <to usec="0" sec="1462424961"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.255.29.77" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424900"/>
        <to usec="0" sec="1462424912"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="111.189.195.81" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424578"/>
        <to usec="0" sec="1462424592"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.154.56.180" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424791"/>
        <to usec="0" sec="1462424802"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.148.241.74" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424581"/>
        <to usec="0" sec="1462424592"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="27.198.85.89" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424816"/>
        <to usec="0" sec="1462424828"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.217.193.185" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424747"/>
        <to usec="0" sec="1462424761"/>
    </anomaly>
    <anomaly type="notice" value="0.808978,1.559930,010,1 1 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="73.31.223.170" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.75.239.90" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424538"/>
        <to usec="0" sec="1462424549"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="218.89.48.169" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424993"/>
        <to usec="0" sec="1462425006"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="77.135.154.181" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425098"/>
        <to usec="0" sec="1462425115"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.76.120.186" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425023"/>
        <to usec="0" sec="1462425045"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="39.160.33.73" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424542"/>
        <to usec="0" sec="1462424560"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="80.125.197.89" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425238"/>
        <to usec="0" sec="1462425250"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.106.27.75" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424724"/>
        <to usec="0" sec="1462424735"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.246.110.163" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425198"/>
        <to usec="0" sec="1462425229"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="109.155.243.67" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425039"/>
        <to usec="0" sec="1462425050"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.209.78.189" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424927"/>
        <to usec="0" sec="1462424938"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="78.120.30.176" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424484"/>
        <to usec="0" sec="1462424500"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.76.72.175" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425141"/>
        <to usec="0" sec="1462425154"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="221.101.175.74" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424578"/>
        <to usec="0" sec="1462424587"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="118.71.101.73" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425109"/>
        <to usec="0" sec="1462425135"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="124.107.13.178" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424914"/>
        <to usec="0" sec="1462424929"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="118.120.250.170" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424509"/>
        <to usec="0" sec="1462424522"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.120.179.173" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424841"/>
        <to usec="0" sec="1462424856"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="49.117.117.85" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424888"/>
        <to usec="0" sec="1462424900"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.167.30.173" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424983"/>
        <to usec="0" sec="1462424991"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.192.121.178" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424893"/>
        <to usec="0" sec="1462424916"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.69.89.82" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424824"/>
        <to usec="0" sec="1462424836"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.192.72.181" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424608"/>
        <to usec="0" sec="1462424619"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.23.173.174" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425039"/>
        <to usec="0" sec="1462425050"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.192.86.80" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424442"/>
        <to usec="0" sec="1462424453"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="180.206.161.81" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424849"/>
        <to usec="0" sec="1462424864"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.213.237.68" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425115"/>
        <to usec="0" sec="1462425120"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.78.50.71" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425046"/>
        <to usec="0" sec="1462425094"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.34.169.185" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424939"/>
        <to usec="0" sec="1462424955"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="71.13.2.68" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424465"/>
        <to usec="0" sec="1462424477"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="117.214.67.88" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424744"/>
        <to usec="0" sec="1462424751"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.140.103.91" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424966"/>
        <to usec="0" sec="1462424976"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.164.178.163" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424876"/>
        <to usec="0" sec="1462424887"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="42.11.175.92" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425110"/>
        <to usec="0" sec="1462425141"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="50.82.86.67" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424889"/>
        <to usec="0" sec="1462424902"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.90.178.93" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424429"/>
        <to usec="0" sec="1462424444"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.137.80.190" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424705"/>
        <to usec="0" sec="1462424717"/>
    </anomaly>
    <anomaly type="notice" value="0.845690,1.551420,999,1 1 1 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="115.71.170.190" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425218"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="79.211.236.251" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425254"/>
        <to usec="0" sec="1462425264"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="72.183.231.62" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425290"/>
        <to usec="0" sec="1462425297"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="203.188.117.57" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424407"/>
        <to usec="0" sec="1462424422"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="181.254.121.199" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424978"/>
        <to usec="0" sec="1462424990"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="106.127.228.248" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424879"/>
        <to usec="0" sec="1462424889"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.73.68.243" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424581"/>
        <to usec="0" sec="1462424605"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="90.221.118.242" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424447"/>
        <to usec="0" sec="1462424470"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="119.77.122.61" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424965"/>
        <to usec="0" sec="1462424985"/>
    </anomaly>
    <anomaly type="notice" value="0.808978,1.559930,010,1 1 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.244.187.53" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.134.135.15" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424514"/>
        <to usec="0" sec="1462424521"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="118.27.222.199" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424845"/>
        <to usec="0" sec="1462424856"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.71.33.57" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424503"/>
        <to usec="0" sec="1462424529"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="120.178.72.247" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425099"/>
        <to usec="0" sec="1462425103"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.89.135.4" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424691"/>
        <to usec="0" sec="1462424713"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="124.156.158.252" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424804"/>
        <to usec="0" sec="1462424813"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="118.23.48.195" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425007"/>
        <to usec="0" sec="1462425018"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="181.36.142.0" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424453"/>
        <to usec="0" sec="1462424464"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="221.61.60.192" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1462425032"/>
        <to usec="0" sec="1462425037"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="118.80.161.41" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425109"/>
        <to usec="0" sec="1462425128"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="61.148.97.18" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424809"/>
        <to usec="0" sec="1462424819"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="89.116.32.233" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424853"/>
        <to usec="0" sec="1462424865"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.197.211.21" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424924"/>
        <to usec="0" sec="1462424940"/>
    </anomaly>
    <anomaly type="notice" value="0.845690,1.551420,999,1 1 1 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.196.86.17" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.26.247.236" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424400"/>
        <to usec="0" sec="1462424408"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.66.246.233" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424737"/>
        <to usec="0" sec="1462424760"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="58.222.214.46" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425120"/>
        <to usec="0" sec="1462425132"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="116.241.141.211" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425025"/>
        <to usec="0" sec="1462425035"/>
    </anomaly>
    <anomaly type="notice" value="0.845690,1.551420,999,1 1 1 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.175.237.20" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.845690,1.551420,999,1 1 1 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.13.55.42" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="41.160.240.210" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425107"/>
        <to usec="0" sec="1462425134"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.118.137.237" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424879"/>
        <to usec="0" sec="1462424888"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.30.71.22" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424917"/>
        <to usec="0" sec="1462424937"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="80.134.247.46" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424421"/>
        <to usec="0" sec="1462424446"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="101.90.27.16" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425088"/>
        <to usec="0" sec="1462425093"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.146.46.46" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425233"/>
        <to usec="0" sec="1462425237"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.135.237.209" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424900"/>
        <to usec="0" sec="1462424906"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="117.162.39.25" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424771"/>
        <to usec="0" sec="1462424782"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="97.96.37.35" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425051"/>
        <to usec="0" sec="1462425067"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="117.180.252.221" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425233"/>
        <to usec="0" sec="1462425244"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="218.196.196.223" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424400"/>
        <to usec="0" sec="1462424408"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="61.190.171.30" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424785"/>
        <to usec="0" sec="1462424791"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="118.130.217.192" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425151"/>
        <to usec="0" sec="1462425162"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="171.123.100.206" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425091"/>
        <to usec="0" sec="1462425100"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.105.140.216" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424788"/>
        <to usec="0" sec="1462424802"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="36.24.139.5" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424538"/>
        <to usec="0" sec="1462424548"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="211.205.131.250" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425269"/>
        <to usec="0" sec="1462425281"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.199.33.10" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425057"/>
        <to usec="0" sec="1462425086"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="110.169.26.203" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424952"/>
        <to usec="0" sec="1462424965"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.7.126.218" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424973"/>
        <to usec="0" sec="1462424976"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="222.50.90.58" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424618"/>
        <to usec="0" sec="1462424648"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.73.97.45" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424953"/>
        <to usec="0" sec="1462424964"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="211.7.182.221" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424820"/>
        <to usec="0" sec="1462424830"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="187.20.49.245" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424451"/>
        <to usec="0" sec="1462424465"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.126.9.18" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424479"/>
        <to usec="0" sec="1462425051"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="41.125.116.225" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424813"/>
        <to usec="0" sec="1462424824"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="120.240.150.25" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424776"/>
        <to usec="0" sec="1462424786"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="121.30.182.15" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424603"/>
        <to usec="0" sec="1462424629"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="42.197.66.22" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424610"/>
        <to usec="0" sec="1462424615"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.200.231.47" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424568"/>
        <to usec="0" sec="1462424596"/>
    </anomaly>
    <anomaly type="notice" value="0.845690,1.551420,999,1 1 1 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.46.243.40" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425215"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.47.20.234" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424656"/>
        <to usec="0" sec="1462424666"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="110.238.116.8" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425040"/>
        <to usec="0" sec="1462425051"/>
    </anomaly>
    <anomaly type="notice" value="0.845690,1.551420,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="92.7.109.12" dst_port="4028"/>
        </slice>
        <from usec="0" sec="1462425210"/>
        <to usec="0" sec="1462425300"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="81.191.211.60" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424425"/>
        <to usec="0" sec="1462424436"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="222.149.34.45" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424488"/>
        <to usec="0" sec="1462424501"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.26.35.61" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424716"/>
        <to usec="0" sec="1462424729"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.139.181.238" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424436"/>
        <to usec="0" sec="1462424448"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.153.88.238" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424781"/>
        <to usec="0" sec="1462424794"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="179.88.83.32" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424855"/>
        <to usec="0" sec="1462424862"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="125.184.94.16" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424623"/>
        <to usec="0" sec="1462424633"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="42.165.37.12" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425116"/>
        <to usec="0" sec="1462425127"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="185.72.101.207" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425076"/>
        <to usec="0" sec="1462425089"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="222.77.202.20" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424589"/>
        <to usec="0" sec="1462424617"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="118.23.250.239" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424944"/>
        <to usec="0" sec="1462424956"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.125.0.8" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424848"/>
        <to usec="0" sec="1462424860"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="58.11.21.21" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425276"/>
        <to usec="0" sec="1462425282"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.230.222.20" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424554"/>
        <to usec="0" sec="1462424584"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="118.80.100.43" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424535"/>
        <to usec="0" sec="1462424545"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="103.253.58.242" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424900"/>
        <to usec="0" sec="1462424912"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.27.102.213" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424865"/>
        <to usec="0" sec="1462424875"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="110.165.71.8" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424885"/>
        <to usec="0" sec="1462424896"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="181.39.107.23" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424744"/>
        <to usec="0" sec="1462424756"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.155.6.22" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424769"/>
        <to usec="0" sec="1462424802"/>
    </anomaly>
    <anomaly type="notice" value="0.845690,1.551420,999,1 1 1 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="79.130.34.22" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="115.234.131.55" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425011"/>
        <to usec="0" sec="1462425023"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="1.129.202.233" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424768"/>
        <to usec="0" sec="1462424794"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.125.182.207" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424643"/>
        <to usec="0" sec="1462424654"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.234.125.7" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424541"/>
        <to usec="0" sec="1462424552"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="58.154.235.27" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424879"/>
        <to usec="0" sec="1462424888"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.72.143.57" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425228"/>
        <to usec="0" sec="1462425245"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.90.169.4" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462424734"/>
        <to usec="0" sec="1462424752"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.130.14.227" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424417"/>
        <to usec="0" sec="1462424428"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="36.98.105.28" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424926"/>
        <to usec="0" sec="1462424937"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="125.172.96.220" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424838"/>
        <to usec="0" sec="1462424848"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.117.181.2" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424932"/>
        <to usec="0" sec="1462424943"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.129.164.194" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462424421"/>
        <to usec="0" sec="1462424432"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.156.182.194" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1462425274"/>
        <to usec="0" sec="1462425286"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="58.9.142.31" dst_port="80"/>
        </slice>
        <from usec="0" sec="1462424420"/>
        <to usec="0" sec="1462424422"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.152.30.255" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425054"/>
        <to usec="0" sec="1462425088"/>
    </anomaly>
    <anomaly type="notice" value="0.546949,1.518260,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="139.89.210.196"/>
        </slice>
        <from usec="0" sec="1462425063"/>
        <to usec="0" sec="1462425065"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,011,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="95.146.46.46" src_port="23"/>
        </slice>
        <from usec="0" sec="1462425233"/>
        <to usec="0" sec="1462425237"/>
    </anomaly>
    <anomaly type="notice" value="0.488268,1.526960,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.252.75.64" dst_port="443"/>
            <filter src_ip="202.252.75.64" dst_ip="117.238.232.160" dst_port="993"/>
        </slice>
        <from usec="0" sec="1462425095"/>
        <to usec="0" sec="1462425100"/>
    </anomaly>
    <anomaly type="notice" value="0.710634,1.601250,504,0 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.83.156.70"/>
        </slice>
        <from usec="0" sec="1462424527"/>
        <to usec="0" sec="1462424529"/>
    </anomaly>
    <anomaly type="notice" value="0.979416,1.500390,503,1 1 1 0 0 0 0 0 0 1 0 0,ntscACKt">
        <slice>
            <filter src_ip="163.83.126.215" src_port="40862"/>
            <filter src_ip="163.83.126.215" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="104.185.176.110"/>
        </slice>
        <from usec="0" sec="1462424400"/>
        <to usec="0" sec="1462424446"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="80.81.77.200"/>
        </slice>
        <from usec="0" sec="1462424400"/>
        <to usec="0" sec="1462424446"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="208.157.196.203"/>
        </slice>
        <from usec="0" sec="1462424400"/>
        <to usec="0" sec="1462424446"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.247.81.151"/>
        </slice>
        <from usec="0" sec="1462424490"/>
        <to usec="0" sec="1462424536"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.252.68.37"/>
        </slice>
        <from usec="0" sec="1462424490"/>
        <to usec="0" sec="1462424536"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.252.94.103" dst_port="53"/>
        </slice>
        <from usec="0" sec="1462424490"/>
        <to usec="0" sec="1462424536"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.14.124.212"/>
        </slice>
        <from usec="0" sec="1462424490"/>
        <to usec="0" sec="1462424536"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.252.233.26"/>
        </slice>
        <from usec="0" sec="1462424490"/>
        <to usec="0" sec="1462424536"/>
    </anomaly>
    <anomaly type="notice" value="0.807151,1.579910,010,1 0 0 0 0 0 1 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="64.24.154.201" dst_ip="133.74.228.1"/>
        </slice>
        <from usec="0" sec="1462424670"/>
        <to usec="0" sec="1462424802"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.14.118.255"/>
        </slice>
        <from usec="0" sec="1462424670"/>
        <to usec="0" sec="1462424716"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.252.95.252" src_port="53"/>
            <filter dst_ip="202.252.95.252" dst_port="53"/>
        </slice>
        <from usec="0" sec="1462424670"/>
        <to usec="0" sec="1462424716"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.243.178.194"/>
        </slice>
        <from usec="0" sec="1462424670"/>
        <to usec="0" sec="1462424716"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.252.68.37"/>
        </slice>
        <from usec="0" sec="1462424670"/>
        <to usec="0" sec="1462424716"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.14.120.62" dst_port="53"/>
        </slice>
        <from usec="0" sec="1462424670"/>
        <to usec="0" sec="1462424716"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.14.119.182" dst_port="53"/>
        </slice>
        <from usec="0" sec="1462424670"/>
        <to usec="0" sec="1462424716"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.252.94.103" dst_port="53"/>
        </slice>
        <from usec="0" sec="1462424670"/>
        <to usec="0" sec="1462424716"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.14.121.34"/>
        </slice>
        <from usec="0" sec="1462424670"/>
        <to usec="0" sec="1462424716"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="221.80.100.171"/>
        </slice>
        <from usec="0" sec="1462424670"/>
        <to usec="0" sec="1462424716"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.243.179.93"/>
        </slice>
        <from usec="0" sec="1462424670"/>
        <to usec="0" sec="1462424716"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="203.14.120.189"/>
        </slice>
        <from usec="0" sec="1462424490"/>
        <to usec="0" sec="1462424716"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.14.126.62" dst_port="53"/>
        </slice>
        <from usec="0" sec="1462424490"/>
        <to usec="0" sec="1462424716"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.14.113.8" dst_port="53"/>
        </slice>
        <from usec="0" sec="1462424670"/>
        <to usec="0" sec="1462424716"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.14.124.212"/>
        </slice>
        <from usec="0" sec="1462424670"/>
        <to usec="0" sec="1462424716"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.252.233.22"/>
        </slice>
        <from usec="0" sec="1462424670"/>
        <to usec="0" sec="1462424716"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.252.233.26"/>
        </slice>
        <from usec="0" sec="1462424670"/>
        <to usec="0" sec="1462424716"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.83.41.185"/>
        </slice>
        <from usec="0" sec="1462424715"/>
        <to usec="0" sec="1462424761"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="133.215.68.246"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="163.18.176.111"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="184.151.186.59"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="117.33.219.10"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="198.35.166.123"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="85.196.149.159"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="198.35.178.110" src_port="34680"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="198.35.164.80"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="66.133.31.150"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="71.57.125.119"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.198.22.130"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.82.96.132"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="66.133.32.132"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="66.133.58.151"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="111.118.101.102"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="113.119.5.101"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="188.158.251.172"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="71.57.106.186"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="71.57.106.185"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="203.14.121.203"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="71.57.90.8"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="74.87.130.218"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="5.31.223.29"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="209.126.87.251" dst_port="123"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="91.236.213.139" dst_port="8080"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="138.54.226.101" src_port="80"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="163.83.41.153" dst_port="53"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="180.100.155.187" dst_port="3128"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="180.100.155.186" dst_port="3128"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="133.215.32.21" src_port="6889"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.807151,1.579910,010,1 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.67.54.138" dst_port="23"/>
        </slice>
        <from usec="0" sec="1462425153"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.93.188.133" dst_port="53"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="69.164.210.111" src_port="80"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="180.100.155.73" dst_port="3128"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="133.215.80.177" src_port="6889"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.958169,1.651830,010,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_port="4935" dst_port="3389"/>
        </slice>
        <from usec="0" sec="1462425165"/>
        <to usec="0" sec="1462425211"/>
    </anomaly>
    <anomaly type="notice" value="0.485236,1.547360,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.203.143.167" dst_ip="17.158.0.214" dst_port="443"/>
        </slice>
        <from usec="0" sec="1462424414"/>
        <to usec="0" sec="1462425237"/>
    </anomaly>
    <anomaly type="notice" value="0.946339,1.529840,504,1 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="54.163.119.54" dst_ip="163.83.161.228"/>
            <filter src_ip="54.163.119.54" src_port="443"/>
            <filter src_ip="54.163.119.54" src_port="80"/>
            <filter src_ip="52.218.132.16" dst_ip="163.83.161.228"/>
            <filter src_ip="52.218.132.16" src_port="443"/>
            <filter dst_ip="163.83.161.228" src_port="443"/>
            <filter dst_ip="163.83.161.228" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
