<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="54.15.6.65" dst_ip="163.221.114.217" src_port="443" dst_port="56469" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189295"/>
        <to usec="0" sec="1465189988"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="162.121.247.201" dst_ip="203.114.152.127" src_port="443" dst_port="60429" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189950"/>
        <to usec="0" sec="1465189951"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.215.125.244"/>
        </slice>
        <from usec="0" sec="1465190067"/>
        <to usec="0" sec="1465190069"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.194.85.142" dst_ip="115.45.0.36" src_port="80" dst_port="57265" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189837"/>
        <to usec="0" sec="1465189839"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.219.192.4" dst_ip="17.164.99.202" src_port="53722" dst_port="993" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189891"/>
        <to usec="0" sec="1465190088"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="23.95.58.183" dst_ip="163.221.112.99" src_port="80" dst_port="49502" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189246"/>
        <to usec="0" sec="1465189248"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.81.186.74" dst_ip="202.244.177.175" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189240"/>
        <to usec="0" sec="1465189241"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="131.241.35.196" dst_ip="59.187.44.181" proto="udp"/>
        </slice>
        <from usec="0" sec="1465189302"/>
        <to usec="0" sec="1465190095"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.215.74.62" dst_ip="177.71.43.124" src_port="43570" dst_port="8018" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189871"/>
        <to usec="0" sec="1465189872"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="103.168.168.77" dst_ip="202.244.177.15" src_port="16285" dst_port="34901" proto="udp"/>
        </slice>
        <from usec="0" sec="1465189337"/>
        <to usec="0" sec="1465190024"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.221.217.191"/>
        </slice>
        <from usec="0" sec="1465189829"/>
        <to usec="0" sec="1465189830"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="103.19.211.233" dst_ip="203.114.151.247" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465190040"/>
        <to usec="0" sec="1465190051"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="157.77.191.175" dst_ip="60.54.54.178" src_port="1270" dst_port="12340" proto="udp"/>
        </slice>
        <from usec="0" sec="1465189564"/>
        <to usec="0" sec="1465190075"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="133.219.250.40" dst_ip="17.164.196.199" src_port="34792" dst_port="993" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189250"/>
        <to usec="0" sec="1465189487"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="210.1.166.21" dst_ip="163.221.11.33" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465190068"/>
        <to usec="0" sec="1465190071"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="219.103.193.238"/>
        </slice>
        <from usec="0" sec="1465189751"/>
        <to usec="0" sec="1465189753"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="17.178.35.208" dst_ip="202.244.178.145" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465190084"/>
        <to usec="0" sec="1465190091"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.72.220.87" dst_ip="202.244.39.155" src_port="63825" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189340"/>
        <to usec="0" sec="1465189343"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.219.56.107"/>
        </slice>
        <from usec="0" sec="1465189265"/>
        <to usec="0" sec="1465189434"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="76.100.211.153"/>
        </slice>
        <from usec="0" sec="1465189790"/>
        <to usec="0" sec="1465189809"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.194.171.217" dst_ip="198.116.247.232" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189212"/>
        <to usec="0" sec="1465189990"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,011,1 0 0 0 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="202.244.176.103" dst_ip="202.197.20.57" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189421"/>
        <to usec="0" sec="1465189423"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="157.77.99.229" dst_ip="31.105.64.63" src_port="55006" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189345"/>
        <to usec="0" sec="1465189347"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.219.144.97" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189219"/>
        <to usec="0" sec="1465189571"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="8.251.31.156" dst_ip="163.221.130.33" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189701"/>
        <to usec="0" sec="1465190008"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="180.225.94.98" dst_ip="163.221.130.181" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189731"/>
        <to usec="0" sec="1465189737"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.194.171.222" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465190091"/>
        <to usec="0" sec="1465190092"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.221.33.160" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189698"/>
        <to usec="0" sec="1465190069"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="114.69.188.28" dst_ip="133.215.87.133" src_port="3073" dst_port="60455" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465190089"/>
        <to usec="0" sec="1465190092"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="111.201.211.227" dst_ip="163.221.130.181" src_port="80" dst_port="57122" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465190000"/>
        <to usec="0" sec="1465190002"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="111.201.211.206" dst_ip="163.221.130.181" src_port="443" dst_port="57173" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465190054"/>
        <to usec="0" sec="1465190056"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.221.115.165" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189513"/>
        <to usec="0" sec="1465189947"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="163.221.12.4" dst_ip="115.78.150.218" src_port="443" dst_port="53827" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465190070"/>
        <to usec="0" sec="1465190071"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.77.190.36" dst_ip="31.105.64.63" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189700"/>
        <to usec="0" sec="1465189766"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="23.95.58.138" dst_ip="202.244.176.227" src_port="80" dst_port="64734" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189521"/>
        <to usec="0" sec="1465189868"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="5.251.205.234"/>
        </slice>
        <from usec="0" sec="1465189520"/>
        <to usec="0" sec="1465189522"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="23.95.58.139" dst_ip="163.221.130.219" src_port="80" dst_port="61915" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189856"/>
        <to usec="0" sec="1465189858"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="161.58.236.97" dst_ip="133.108.22.214" src_port="443" dst_port="50063" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189776"/>
        <to usec="0" sec="1465189778"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="68.139.26.115"/>
        </slice>
        <from usec="0" sec="1465190088"/>
        <to usec="0" sec="1465190091"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="173.173.35.193" dst_ip="163.221.159.29" src_port="80" dst_port="58274" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189884"/>
        <to usec="0" sec="1465189893"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.221.59.156"/>
        </slice>
        <from usec="0" sec="1465189939"/>
        <to usec="0" sec="1465190080"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.221.115.183" dst_ip="111.79.252.150" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189576"/>
        <to usec="0" sec="1465190093"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="31.105.73.113" dst_ip="163.221.112.95" src_port="443" dst_port="50827" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189970"/>
        <to usec="0" sec="1465189972"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="173.37.176.140" dst_ip="163.221.112.166" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189993"/>
        <to usec="0" sec="1465189996"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="126.59.185.75" dst_ip="163.221.11.18" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189205"/>
        <to usec="0" sec="1465189397"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="23.51.94.80" dst_ip="163.221.219.97" src_port="443" dst_port="60425" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189738"/>
        <to usec="0" sec="1465189740"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="65.42.116.48" dst_ip="163.221.113.194" src_port="443" dst_port="64447" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189612"/>
        <to usec="0" sec="1465189997"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.221.114.211" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189439"/>
        <to usec="0" sec="1465189901"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="115.78.157.152" dst_ip="203.114.157.56" src_port="54119" dst_port="993" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189220"/>
        <to usec="0" sec="1465189230"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="211.142.7.199" dst_ip="133.215.129.214" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189314"/>
        <to usec="0" sec="1465189678"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="182.75.149.132" dst_ip="202.244.32.11" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189688"/>
        <to usec="0" sec="1465189697"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.221.115.187" dst_ip="52.201.248.25" src_port="50295" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189211"/>
        <to usec="0" sec="1465190017"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.194.200.1" dst_ip="17.152.108.42" src_port="52680" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189597"/>
        <to usec="0" sec="1465189723"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.194.202.188"/>
        </slice>
        <from usec="0" sec="1465189386"/>
        <to usec="0" sec="1465189407"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.219.98.34" dst_ip="65.100.29.45" src_port="60971" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189456"/>
        <to usec="0" sec="1465189459"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="219.239.47.194" dst_ip="163.221.130.181" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465190063"/>
        <to usec="0" sec="1465190064"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="85.160.237.192" dst_ip="163.221.159.29" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465190084"/>
        <to usec="0" sec="1465190088"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.77.25.48" dst_ip="65.100.29.37" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189667"/>
        <to usec="0" sec="1465189670"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.221.172.58"/>
        </slice>
        <from usec="0" sec="1465189451"/>
        <to usec="0" sec="1465189926"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="173.7.187.201" dst_ip="202.244.160.104" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189487"/>
        <to usec="0" sec="1465190098"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.194.155.204"/>
        </slice>
        <from usec="0" sec="1465189231"/>
        <to usec="0" sec="1465189907"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="208.115.174.182"/>
        </slice>
        <from usec="0" sec="1465189784"/>
        <to usec="0" sec="1465189800"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.221.196.57"/>
        </slice>
        <from usec="0" sec="1465189567"/>
        <to usec="0" sec="1465189570"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.219.91.178" dst_ip="17.23.9.23" src_port="49269" dst_port="993" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189599"/>
        <to usec="0" sec="1465189600"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.221.114.179" dst_ip="209.28.26.198" src_port="58610" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189428"/>
        <to usec="0" sec="1465189546"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="163.221.211.195" dst_ip="72.11.86.35" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465190091"/>
        <to usec="0" sec="1465190095"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="111.66.242.191" dst_ip="163.221.209.206" src_port="1200" dst_port="8000" proto="udp"/>
        </slice>
        <from usec="0" sec="1465189488"/>
        <to usec="0" sec="1465189495"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="67.164.211.178" dst_ip="203.114.152.127" src_port="61955" dst_port="53449" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465190092"/>
        <to usec="0" sec="1465190093"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.221.210.60"/>
        </slice>
        <from usec="0" sec="1465189604"/>
        <to usec="0" sec="1465189655"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.194.130.80" dst_ip="199.8.197.166" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189218"/>
        <to usec="0" sec="1465189948"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="204.124.126.80" dst_ip="163.221.112.117" src_port="443" dst_port="57165" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189775"/>
        <to usec="0" sec="1465190057"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="131.241.1.45"/>
        </slice>
        <from usec="0" sec="1465190081"/>
        <to usec="0" sec="1465190084"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.221.218.173"/>
        </slice>
        <from usec="0" sec="1465189210"/>
        <to usec="0" sec="1465190093"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="157.77.32.85" dst_ip="31.105.64.63" src_port="57346" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189880"/>
        <to usec="0" sec="1465189881"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="157.77.36.81" dst_ip="141.105.57.202" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189519"/>
        <to usec="0" sec="1465189782"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.194.178.208" dst_ip="54.24.151.228" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189414"/>
        <to usec="0" sec="1465189926"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.194.215.216" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189353"/>
        <to usec="0" sec="1465189358"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.194.219.218"/>
        </slice>
        <from usec="0" sec="1465190090"/>
        <to usec="0" sec="1465190092"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.77.160.219" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189865"/>
        <to usec="0" sec="1465189938"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="126.198.133.91"/>
        </slice>
        <from usec="0" sec="1465189384"/>
        <to usec="0" sec="1465189386"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.221.112.95"/>
        </slice>
        <from usec="0" sec="1465189913"/>
        <to usec="0" sec="1465189975"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.194.52.34" dst_ip="52.201.153.35" src_port="58913" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189814"/>
        <to usec="0" sec="1465189816"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="110.77.237.93"/>
        </slice>
        <from usec="0" sec="1465189570"/>
        <to usec="0" sec="1465189575"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.194.169.223" dst_ip="69.172.202.154" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189765"/>
        <to usec="0" sec="1465189768"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="195.115.249.163" dst_ip="163.221.218.173" src_port="80" dst_port="61202" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189355"/>
        <to usec="0" sec="1465189357"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.219.199.232" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465190087"/>
        <to usec="0" sec="1465190090"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.194.172.18" dst_ip="31.105.75.132" src_port="58681" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189277"/>
        <to usec="0" sec="1465189285"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="199.84.41.110" dst_ip="203.114.152.127" src_port="443" dst_port="60295" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189598"/>
        <to usec="0" sec="1465189615"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.221.112.100" dst_ip="124.192.33.230" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189561"/>
        <to usec="0" sec="1465189571"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.244.177.105"/>
        </slice>
        <from usec="0" sec="1465189375"/>
        <to usec="0" sec="1465189379"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="31.105.76.116" dst_ip="202.244.32.29" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465190001"/>
        <to usec="0" sec="1465190002"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.221.115.251" dst_ip="45.188.125.134" src_port="54276" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189307"/>
        <to usec="0" sec="1465189321"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.219.255.145" dst_ip="17.152.108.43" src_port="43439" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189496"/>
        <to usec="0" sec="1465189729"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.227.254.150" dst_ip="163.221.217.189" src_port="49679" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189595"/>
        <to usec="0" sec="1465189597"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="157.77.25.13" dst_ip="17.152.102.109" src_port="41930" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189359"/>
        <to usec="0" sec="1465189566"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.114.156.11" dst_ip="204.111.54.9" src_port="57680" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189785"/>
        <to usec="0" sec="1465190054"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.221.44.15"/>
        </slice>
        <from usec="0" sec="1465189903"/>
        <to usec="0" sec="1465189905"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="23.50.53.141" dst_ip="202.244.177.16" src_port="80" dst_port="54423" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189408"/>
        <to usec="0" sec="1465189413"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.77.25.9" dst_ip="17.130.25.48" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189538"/>
        <to usec="0" sec="1465189738"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.221.115.231" dst_ip="205.70.16.96" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189358"/>
        <to usec="0" sec="1465189395"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.244.178.24" dst_ip="17.152.108.41" src_port="62267" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189410"/>
        <to usec="0" sec="1465189451"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="133.194.200.123"/>
        </slice>
        <from usec="0" sec="1465189202"/>
        <to usec="0" sec="1465190100"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.194.221.27" dst_ip="113.130.182.243" src_port="8999" dst_port="11159" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189403"/>
        <to usec="0" sec="1465189409"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.221.131.225" dst_ip="123.239.11.169" src_port="54210" dst_port="13751" proto="udp"/>
        </slice>
        <from usec="0" sec="1465190029"/>
        <to usec="0" sec="1465190100"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="23.95.58.253" dst_ip="163.221.187.11" src_port="80" dst_port="63523" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189751"/>
        <to usec="0" sec="1465189948"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="192.124.195.119" dst_ip="163.221.217.232" src_port="443" dst_port="51582" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189859"/>
        <to usec="0" sec="1465189861"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="157.77.137.125" dst_ip="65.100.29.46" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189254"/>
        <to usec="0" sec="1465189290"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="218.94.250.189" dst_ip="163.221.110.114" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189738"/>
        <to usec="0" sec="1465189985"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="149.103.184.132" dst_ip="202.244.172.79" src_port="80" dst_port="4342" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189703"/>
        <to usec="0" sec="1465189827"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.221.212.180"/>
        </slice>
        <from usec="0" sec="1465189795"/>
        <to usec="0" sec="1465189983"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="61.248.73.183" dst_ip="202.244.166.87" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189210"/>
        <to usec="0" sec="1465189375"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.194.172.137"/>
        </slice>
        <from usec="0" sec="1465189212"/>
        <to usec="0" sec="1465189403"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="61.54.74.73" dst_ip="163.221.192.43" src_port="80" dst_port="62834" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189259"/>
        <to usec="0" sec="1465189261"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="221.144.156.176"/>
        </slice>
        <from usec="0" sec="1465189541"/>
        <to usec="0" sec="1465189543"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.77.138.177"/>
        </slice>
        <from usec="0" sec="1465189435"/>
        <to usec="0" sec="1465189438"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="49.178.137.78" dst_ip="133.215.90.83" src_port="9433" dst_port="57966" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465190015"/>
        <to usec="0" sec="1465190025"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.73.88.65"/>
        </slice>
        <from usec="0" sec="1465189780"/>
        <to usec="0" sec="1465189822"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.221.114.87"/>
        </slice>
        <from usec="0" sec="1465189683"/>
        <to usec="0" sec="1465189687"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="104.184.152.86" dst_ip="163.221.187.11" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189722"/>
        <to usec="0" sec="1465190051"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.221.149.105"/>
        </slice>
        <from usec="0" sec="1465189676"/>
        <to usec="0" sec="1465189954"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="74.117.66.109" dst_ip="163.221.83.18" src_port="8777" dst_port="61013" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189467"/>
        <to usec="0" sec="1465189790"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.194.210.156" dst_port="443"/>
            <filter src_ip="133.194.210.156" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189761"/>
        <to usec="0" sec="1465190091"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="101.196.135.104"/>
        </slice>
        <from usec="0" sec="1465190081"/>
        <to usec="0" sec="1465190083"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.244.183.103"/>
        </slice>
        <from usec="0" sec="1465189535"/>
        <to usec="0" sec="1465189539"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.194.222.173" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189515"/>
        <to usec="0" sec="1465189831"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.194.155.92" dst_ip="54.103.81.58" src_port="40005" dst_port="44932" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189804"/>
        <to usec="0" sec="1465189809"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.51.92.132" dst_ip="163.221.115.219" src_port="80" dst_port="63526" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189926"/>
        <to usec="0" sec="1465189927"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="68.139.26.165"/>
        </slice>
        <from usec="0" sec="1465189992"/>
        <to usec="0" sec="1465189994"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="82.229.214.136" dst_ip="163.221.114.28" src_port="44660" dst_port="49410" proto="udp"/>
        </slice>
        <from usec="0" sec="1465189961"/>
        <to usec="0" sec="1465189984"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="38.117.0.71" dst_ip="163.221.159.29" src_port="1935" dst_port="58200" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189840"/>
        <to usec="0" sec="1465189842"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="157.77.160.119" dst_ip="31.105.64.63" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189630"/>
        <to usec="0" sec="1465190081"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.50.56.182" dst_ip="163.221.114.137" src_port="443" dst_port="50695" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189919"/>
        <to usec="0" sec="1465190011"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.244.178.144"/>
        </slice>
        <from usec="0" sec="1465189910"/>
        <to usec="0" sec="1465189915"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="52.55.49.109" dst_ip="163.221.251.9" src_port="443" dst_port="62949" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189244"/>
        <to usec="0" sec="1465189306"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="69.175.44.148" dst_ip="202.244.181.102" src_port="80" dst_port="49506" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189721"/>
        <to usec="0" sec="1465189723"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="17.255.106.179" dst_ip="163.221.114.159" src_port="443" dst_port="57367" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189643"/>
        <to usec="0" sec="1465189644"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.77.127.115" dst_ip="31.105.69.206" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465190096"/>
        <to usec="0" sec="1465190098"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.219.191.135" dst_ip="128.240.148.69" src_port="16582" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189212"/>
        <to usec="0" sec="1465189272"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.244.35.99" dst_ip="40.218.166.87" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189430"/>
        <to usec="0" sec="1465189957"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.221.114.126" dst_ip="213.172.125.245" src_port="46135" dst_port="12340" proto="udp"/>
        </slice>
        <from usec="0" sec="1465190084"/>
        <to usec="0" sec="1465190088"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="193.31.236.98" src_port="53" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189838"/>
        <to usec="0" sec="1465189841"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="157.77.113.130" dst_ip="209.177.69.234" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189663"/>
        <to usec="0" sec="1465189668"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.194.206.203"/>
        </slice>
        <from usec="0" sec="1465189730"/>
        <to usec="0" sec="1465189733"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="157.77.146.49" dst_ip="17.164.116.63" src_port="50636" dst_port="993" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189390"/>
        <to usec="0" sec="1465189624"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="175.204.57.62" dst_ip="203.114.152.127" src_port="20659" dst_port="20276" proto="udp"/>
        </slice>
        <from usec="0" sec="1465189520"/>
        <to usec="0" sec="1465189625"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="131.241.135.57" dst_ip="104.36.79.106" src_port="80" dst_port="55586" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189671"/>
        <to usec="0" sec="1465190081"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="68.232.82.55" dst_ip="163.221.218.211" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189804"/>
        <to usec="0" sec="1465189813"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.219.103.59"/>
        </slice>
        <from usec="0" sec="1465189561"/>
        <to usec="0" sec="1465189563"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.244.174.203" dst_ip="191.26.116.154" src_port="57454" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189955"/>
        <to usec="0" sec="1465189956"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="192.77.15.60" dst_ip="107.128.120.202" src_port="56919" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189728"/>
        <to usec="0" sec="1465190071"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="146.121.159.215" dst_ip="163.221.115.75" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189872"/>
        <to usec="0" sec="1465189904"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.194.82.212" dst_ip="198.43.179.195" src_port="80" dst_port="53134" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189779"/>
        <to usec="0" sec="1465189781"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="104.146.125.46" dst_ip="203.114.149.212" src_port="80" dst_port="57459" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189990"/>
        <to usec="0" sec="1465189992"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="1.99.201.208"/>
        </slice>
        <from usec="0" sec="1465189531"/>
        <to usec="0" sec="1465189534"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="219.10.162.38"/>
        </slice>
        <from usec="0" sec="1465190033"/>
        <to usec="0" sec="1465190035"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.221.214.218" dst_ip="198.66.133.242" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189229"/>
        <to usec="0" sec="1465189260"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.221.115.36" dst_ip="54.26.250.8" src_port="56309" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189962"/>
        <to usec="0" sec="1465190054"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.77.42.36"/>
        </slice>
        <from usec="0" sec="1465189521"/>
        <to usec="0" sec="1465190059"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="107.162.115.32"/>
        </slice>
        <from usec="0" sec="1465190098"/>
        <to usec="0" sec="1465190100"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="61.252.37.33"/>
        </slice>
        <from usec="0" sec="1465189368"/>
        <to usec="0" sec="1465189370"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="192.84.151.34"/>
        </slice>
        <from usec="0" sec="1465189458"/>
        <to usec="0" sec="1465189991"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.221.175.35" dst_ip="167.216.232.14" src_port="26039" dst_port="20919" proto="udp"/>
        </slice>
        <from usec="0" sec="1465189881"/>
        <to usec="0" sec="1465189885"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.221.176.220" dst_ip="132.10.156.58" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189904"/>
        <to usec="0" sec="1465189950"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.194.223.7"/>
        </slice>
        <from usec="0" sec="1465189386"/>
        <to usec="0" sec="1465189389"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="133.194.200.229" dst_ip="74.197.49.162" src_port="57765" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465190016"/>
        <to usec="0" sec="1465190020"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.61.125.250"/>
        </slice>
        <from usec="0" sec="1465189683"/>
        <to usec="0" sec="1465189685"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.221.114.28" dst_ip="82.229.214.136" src_port="49410" dst_port="44660" proto="udp"/>
        </slice>
        <from usec="0" sec="1465190049"/>
        <to usec="0" sec="1465190097"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.194.171.6" dst_ip="54.73.18.197" src_port="62867" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189829"/>
        <to usec="0" sec="1465189836"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="130.58.164.229" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189224"/>
        <to usec="0" sec="1465189254"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.51.68.229" dst_ip="163.221.211.192" src_port="80" dst_port="53705" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189835"/>
        <to usec="0" sec="1465189839"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.194.221.254"/>
        </slice>
        <from usec="0" sec="1465189242"/>
        <to usec="0" sec="1465189244"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.221.175.13" dst_ip="128.240.148.28" src_port="1090" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189806"/>
        <to usec="0" sec="1465189809"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.51.67.2" dst_ip="202.244.176.173" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189845"/>
        <to usec="0" sec="1465189855"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="108.159.83.18" dst_ip="163.221.59.2" src_port="443" dst_port="65239" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189484"/>
        <to usec="0" sec="1465189850"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.221.124.236"/>
        </slice>
        <from usec="0" sec="1465189489"/>
        <to usec="0" sec="1465190073"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.221.112.241" dst_ip="91.23.94.12" src_port="50979" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189951"/>
        <to usec="0" sec="1465189955"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="182.75.167.237" dst_ip="202.244.184.56" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189744"/>
        <to usec="0" sec="1465189745"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.114.144.245" dst_ip="52.201.209.125" src_port="33963" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189241"/>
        <to usec="0" sec="1465189983"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.221.216.237"/>
        </slice>
        <from usec="0" sec="1465189676"/>
        <to usec="0" sec="1465189678"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.194.172.247"/>
        </slice>
        <from usec="0" sec="1465189215"/>
        <to usec="0" sec="1465189238"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.244.183.19"/>
        </slice>
        <from usec="0" sec="1465189660"/>
        <to usec="0" sec="1465189664"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.194.214.6"/>
        </slice>
        <from usec="0" sec="1465189529"/>
        <to usec="0" sec="1465189666"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.215.83.29" dst_ip="209.105.116.77" src_port="43863" dst_port="8659" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189223"/>
        <to usec="0" sec="1465189224"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.77.42.3" dst_ip="31.105.64.63" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189525"/>
        <to usec="0" sec="1465189526"/>
    </anomaly>
    <anomaly type="notice" value="0.930962,1.812160,504,1 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.244.174.60" dst_port="443"/>
            <filter src_ip="202.244.174.60" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189206"/>
        <to usec="0" sec="1465190092"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_port="111"/>
            <filter src_ip="59.29.79.47" dst_port="22"/>
        </slice>
        <from usec="0" sec="1465189202"/>
        <to usec="0" sec="1465190100"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="31.105.64.63" dst_ip="31.105.64.63" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189203"/>
        <to usec="0" sec="1465190100"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="31.105.75.132" dst_ip="31.105.75.132" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189242"/>
        <to usec="0" sec="1465190065"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,502,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="119.40.198.101" dst_ip="203.114.158.51" src_port="53326" dst_port="22"/>
        </slice>
        <from usec="0" sec="1465189541"/>
        <to usec="0" sec="1465189567"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="17.164.33.197"/>
        </slice>
        <from usec="0" sec="1465189242"/>
        <to usec="0" sec="1465189244"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="163.221.203.134" dst_port="443"/>
            <filter dst_ip="31.105.77.177" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189206"/>
        <to usec="0" sec="1465190097"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="192.77.15.203" dst_port="443"/>
            <filter dst_ip="31.105.64.49" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189207"/>
        <to usec="0" sec="1465190099"/>
    </anomaly>
    <anomaly type="notice" value="0.930962,1.812160,504,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="173.7.151.245" dst_port="443"/>
            <filter dst_ip="31.105.65.78" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189201"/>
        <to usec="0" sec="1465190097"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="203.114.151.206" dst_ip="203.114.151.206" proto="udp"/>
        </slice>
        <from usec="0" sec="1465189240"/>
        <to usec="0" sec="1465190041"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.194.171.41" dst_port="443"/>
            <filter src_ip="133.194.171.41" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189958"/>
        <to usec="0" sec="1465190100"/>
    </anomaly>
    <anomaly type="notice" value="1.005010,1.809710,503,1 1 1 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="38.107.138.166" dst_ip="163.221.9.95" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189214"/>
        <to usec="0" sec="1465190092"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="202.244.178.178" dst_port="443"/>
            <filter src_ip="202.244.178.178" dst_port="993"/>
            <filter src_ip="157.77.150.78" dst_port="443"/>
            <filter dst_ip="17.146.167.132" dst_port="993"/>
        </slice>
        <from usec="0" sec="1465189355"/>
        <to usec="0" sec="1465190097"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="163.221.235.217" dst_ip="38.67.37.246" src_port="49217" dst_port="80"/>
            <filter src_ip="163.221.38.30" dst_ip="38.67.37.246" src_port="50536" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465190045"/>
        <to usec="0" sec="1465190049"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="211.254.139.51" dst_ip="203.114.145.218" src_port="36362" dst_port="443"/>
            <filter src_ip="211.254.139.51" dst_ip="203.114.145.218" src_port="36361" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189862"/>
        <to usec="0" sec="1465189867"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.221.95.146" dst_port="993"/>
        </slice>
        <from usec="0" sec="1465189453"/>
        <to usec="0" sec="1465190100"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="65.100.29.95" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189393"/>
        <to usec="0" sec="1465190040"/>
    </anomaly>
    <anomaly type="notice" value="1.052570,1.784150,504,1 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="202.244.35.11" dst_port="443"/>
            <filter src_ip="163.221.113.42" dst_port="443"/>
            <filter dst_ip="199.84.41.78" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,504,1 1 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="133.215.129.213" dst_port="443"/>
            <filter dst_ip="133.215.129.210" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189212"/>
        <to usec="0" sec="1465190099"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="104.237.68.207" dst_ip="203.114.155.218" dst_port="443"/>
            <filter src_ip="107.201.139.42" dst_ip="203.114.155.218" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189303"/>
        <to usec="0" sec="1465189701"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.114.145.186" dst_ip="199.84.41.105" src_port="49930" dst_port="443"/>
            <filter src_ip="203.114.145.186" dst_ip="199.84.41.105" src_port="49928" dst_port="443"/>
            <filter src_ip="203.114.145.186" dst_ip="199.84.41.105" src_port="49927" dst_port="443"/>
            <filter src_ip="203.114.145.186" dst_ip="199.84.41.105" src_port="49925" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189792"/>
        <to usec="0" sec="1465189857"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,503,1 1 1 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="157.77.238.244" dst_port="443"/>
            <filter src_ip="163.221.203.72" dst_port="80"/>
            <filter dst_ip="65.100.29.15" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189249"/>
        <to usec="0" sec="1465189983"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.219.199.48" dst_port="443"/>
            <filter dst_ip="17.154.113.24" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189212"/>
        <to usec="0" sec="1465189880"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.221.18.239"/>
        </slice>
        <from usec="0" sec="1465190045"/>
        <to usec="0" sec="1465190049"/>
    </anomaly>
    <anomaly type="notice" value="0.930962,1.812160,504,1 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.244.32.234" dst_ip="17.165.134.23" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189369"/>
        <to usec="0" sec="1465190075"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="202.244.32.11" dst_port="80"/>
            <filter dst_ip="31.105.76.116" dst_port="443"/>
            <filter dst_ip="31.105.76.116" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189222"/>
        <to usec="0" sec="1465190096"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.249.187.230"/>
        </slice>
        <from usec="0" sec="1465189237"/>
        <to usec="0" sec="1465189239"/>
    </anomaly>
    <anomaly type="notice" value="0.930962,1.812160,504,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.194.203.237" dst_port="443"/>
            <filter src_ip="133.194.164.78" dst_port="443"/>
            <filter dst_ip="192.96.43.17" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189207"/>
        <to usec="0" sec="1465190036"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="52.55.49.109"/>
        </slice>
        <from usec="0" sec="1465189304"/>
        <to usec="0" sec="1465189306"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="107.128.120.202" dst_ip="107.128.120.202" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189350"/>
        <to usec="0" sec="1465189741"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="219.4.196.219" dst_ip="203.114.157.58" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189307"/>
        <to usec="0" sec="1465189645"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="38.117.7.73" dst_ip="163.221.159.29" src_port="1935" dst_port="58184" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189820"/>
        <to usec="0" sec="1465189822"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="130.193.176.46" dst_ip="163.221.11.18" dst_port="80"/>
            <filter src_ip="126.188.135.27" dst_ip="163.221.11.18" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189537"/>
        <to usec="0" sec="1465190003"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="202.244.32.234" dst_ip="31.105.66.234" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189200"/>
        <to usec="0" sec="1465190082"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.142.23.131" dst_ip="163.221.113.194" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189201"/>
        <to usec="0" sec="1465189302"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="151.26.43.113" dst_ip="163.221.203.134" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189919"/>
        <to usec="0" sec="1465189920"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="217.192.55.90" dst_ip="203.114.153.148" src_port="3303"/>
        </slice>
        <from usec="0" sec="1465189384"/>
        <to usec="0" sec="1465189854"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.77.226.125"/>
        </slice>
        <from usec="0" sec="1465190002"/>
        <to usec="0" sec="1465190004"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.77.92.127"/>
        </slice>
        <from usec="0" sec="1465189773"/>
        <to usec="0" sec="1465189886"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.219.143.150" dst_ip="17.170.138.95" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465190008"/>
        <to usec="0" sec="1465190010"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="157.77.32.46" dst_ip="17.138.30.33" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465190013"/>
        <to usec="0" sec="1465190019"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.219.253.235"/>
        </slice>
        <from usec="0" sec="1465189860"/>
        <to usec="0" sec="1465189866"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.77.161.156"/>
        </slice>
        <from usec="0" sec="1465189759"/>
        <to usec="0" sec="1465189762"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="210.110.13.85" dst_ip="163.221.175.236" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189951"/>
        <to usec="0" sec="1465189956"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="160.78.148.67"/>
        </slice>
        <from usec="0" sec="1465189476"/>
        <to usec="0" sec="1465189480"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="218.229.212.89"/>
        </slice>
        <from usec="0" sec="1465189224"/>
        <to usec="0" sec="1465190098"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.194.168.71"/>
        </slice>
        <from usec="0" sec="1465189839"/>
        <to usec="0" sec="1465189841"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.244.184.57"/>
        </slice>
        <from usec="0" sec="1465189238"/>
        <to usec="0" sec="1465189788"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.221.114.188" dst_ip="104.228.233.212" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189872"/>
        <to usec="0" sec="1465189874"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="133.194.99.179" dst_ip="52.63.80.24" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189678"/>
        <to usec="0" sec="1465189679"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.194.169.199" dst_ip="17.170.139.221" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465190050"/>
        <to usec="0" sec="1465190053"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.219.22.48"/>
        </slice>
        <from usec="0" sec="1465189513"/>
        <to usec="0" sec="1465189515"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.221.193.168" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189715"/>
        <to usec="0" sec="1465189797"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.221.163.172"/>
        </slice>
        <from usec="0" sec="1465189376"/>
        <to usec="0" sec="1465189379"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="208.115.185.167"/>
        </slice>
        <from usec="0" sec="1465189522"/>
        <to usec="0" sec="1465189527"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.221.131.216"/>
        </slice>
        <from usec="0" sec="1465189344"/>
        <to usec="0" sec="1465189841"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.221.196.37" dst_ip="75.250.53.34" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189502"/>
        <to usec="0" sec="1465189504"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.77.139.160"/>
        </slice>
        <from usec="0" sec="1465189238"/>
        <to usec="0" sec="1465189242"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.244.35.160"/>
        </slice>
        <from usec="0" sec="1465189231"/>
        <to usec="0" sec="1465189235"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.221.210.24"/>
        </slice>
        <from usec="0" sec="1465189755"/>
        <to usec="0" sec="1465189757"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.194.168.14" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189779"/>
        <to usec="0" sec="1465189799"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.244.184.125" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189877"/>
        <to usec="0" sec="1465189940"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.194.173.155"/>
        </slice>
        <from usec="0" sec="1465189802"/>
        <to usec="0" sec="1465189804"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.221.203.135" dst_ip="13.76.242.228" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189717"/>
        <to usec="0" sec="1465189719"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.77.125.5"/>
        </slice>
        <from usec="0" sec="1465189629"/>
        <to usec="0" sec="1465189632"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="49.109.98.97"/>
        </slice>
        <from usec="0" sec="1465189200"/>
        <to usec="0" sec="1465189304"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.194.221.131" src_port="64851"/>
            <filter src_ip="133.194.221.131" dst_ip="17.138.31.11" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189761"/>
        <to usec="0" sec="1465189781"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="1.242.27.127"/>
        </slice>
        <from usec="0" sec="1465189325"/>
        <to usec="0" sec="1465189327"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="203.114.152.135"/>
        </slice>
        <from usec="0" sec="1465189208"/>
        <to usec="0" sec="1465189267"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.77.138.181" dst_ip="17.23.8.126" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189332"/>
        <to usec="0" sec="1465189376"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.221.91.122"/>
        </slice>
        <from usec="0" sec="1465189496"/>
        <to usec="0" sec="1465189503"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,012,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.219.148.128" dst_ip="17.170.139.221" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189870"/>
        <to usec="0" sec="1465189873"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="189.46.172.171"/>
        </slice>
        <from usec="0" sec="1465189976"/>
        <to usec="0" sec="1465189993"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.194.84.84"/>
        </slice>
        <from usec="0" sec="1465189860"/>
        <to usec="0" sec="1465189987"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="203.114.144.170" dst_ip="198.180.80.161" dst_port="443"/>
            <filter src_ip="133.194.131.130" dst_ip="198.180.80.161" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189209"/>
        <to usec="0" sec="1465190092"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="157.77.156.155"/>
        </slice>
        <from usec="0" sec="1465189758"/>
        <to usec="0" sec="1465189820"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.194.221.176" dst_ip="17.1.251.211" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189355"/>
        <to usec="0" sec="1465189359"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="210.66.28.175" dst_ip="202.244.32.197" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189890"/>
        <to usec="0" sec="1465189893"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.244.177.139"/>
        </slice>
        <from usec="0" sec="1465189668"/>
        <to usec="0" sec="1465189671"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.244.183.113"/>
        </slice>
        <from usec="0" sec="1465189478"/>
        <to usec="0" sec="1465189482"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="131.241.223.161"/>
        </slice>
        <from usec="0" sec="1465189448"/>
        <to usec="0" sec="1465189858"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.194.215.60" dst_port="443"/>
            <filter src_ip="133.194.215.60" dst_ip="216.17.127.20" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189293"/>
        <to usec="0" sec="1465189834"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="192.77.15.49"/>
        </slice>
        <from usec="0" sec="1465189818"/>
        <to usec="0" sec="1465189822"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="192.77.15.58"/>
        </slice>
        <from usec="0" sec="1465189601"/>
        <to usec="0" sec="1465189603"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.194.151.49"/>
        </slice>
        <from usec="0" sec="1465190011"/>
        <to usec="0" sec="1465190072"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.219.252.193" dst_ip="17.134.67.239" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465190026"/>
        <to usec="0" sec="1465190030"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.194.223.63"/>
        </slice>
        <from usec="0" sec="1465189462"/>
        <to usec="0" sec="1465189464"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="157.77.25.18" dst_port="443"/>
            <filter src_ip="133.219.47.221" dst_port="443"/>
            <filter dst_ip="17.141.23.242" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189316"/>
        <to usec="0" sec="1465190082"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="188.182.146.226"/>
        </slice>
        <from usec="0" sec="1465189963"/>
        <to usec="0" sec="1465189966"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.77.73.28" dst_ip="17.23.12.105" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189996"/>
        <to usec="0" sec="1465189998"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.219.5.6"/>
        </slice>
        <from usec="0" sec="1465189321"/>
        <to usec="0" sec="1465189962"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.221.195.25" dst_ip="208.85.21.212" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189985"/>
        <to usec="0" sec="1465189986"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.194.204.241"/>
        </slice>
        <from usec="0" sec="1465189622"/>
        <to usec="0" sec="1465189625"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="131.241.107.5"/>
        </slice>
        <from usec="0" sec="1465189433"/>
        <to usec="0" sec="1465189436"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.170.225.84" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189276"/>
        <to usec="0" sec="1465190070"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.221.130.56" dst_port="80"/>
            <filter src_ip="163.221.130.56" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189313"/>
        <to usec="0" sec="1465190096"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="208.115.174.190" dst_ip="163.221.9.81" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189516"/>
        <to usec="0" sec="1465189950"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="41.213.66.8" dst_ip="163.221.33.160" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189242"/>
        <to usec="0" sec="1465190054"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.219.117.239" dst_ip="17.134.67.218" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465190066"/>
        <to usec="0" sec="1465190097"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.221.211.82" dst_ip="72.46.33.251" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189453"/>
        <to usec="0" sec="1465189971"/>
    </anomaly>
    <anomaly type="notice" value="1.005010,1.809710,503,1 1 1 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.221.159.29" dst_ip="138.49.59.115" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189219"/>
        <to usec="0" sec="1465190093"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="193.193.225.70" dst_ip="193.193.225.70" proto="icmp"/>
        </slice>
        <from usec="0" sec="1465190038"/>
        <to usec="0" sec="1465190040"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="50.240.165.67"/>
        </slice>
        <from usec="0" sec="1465189353"/>
        <to usec="0" sec="1465189355"/>
    </anomaly>
    <anomaly type="notice" value="0.930962,1.812160,504,1 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.170.227.73" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189225"/>
        <to usec="0" sec="1465190042"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.249.187.81"/>
        </slice>
        <from usec="0" sec="1465189665"/>
        <to usec="0" sec="1465189667"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="220.191.59.203" dst_ip="202.244.166.139" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189679"/>
        <to usec="0" sec="1465190051"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="64.114.5.53"/>
        </slice>
        <from usec="0" sec="1465189313"/>
        <to usec="0" sec="1465189315"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.77.158.161" dst_ip="17.154.113.24" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189290"/>
        <to usec="0" sec="1465189292"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="209.125.247.214" src_port="6261" dst_port="5060" proto="udp"/>
        </slice>
        <from usec="0" sec="1465189526"/>
        <to usec="0" sec="1465190049"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.221.114.131"/>
        </slice>
        <from usec="0" sec="1465189636"/>
        <to usec="0" sec="1465189639"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="90.133.33.183" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189949"/>
        <to usec="0" sec="1465189958"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="116.122.202.57"/>
        </slice>
        <from usec="0" sec="1465189837"/>
        <to usec="0" sec="1465189868"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="188.253.97.112" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189345"/>
        <to usec="0" sec="1465189347"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="210.239.72.17"/>
        </slice>
        <from usec="0" sec="1465189795"/>
        <to usec="0" sec="1465189808"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="80.18.200.36" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1465189729"/>
        <to usec="0" sec="1465189737"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="95.203.190.7"/>
        </slice>
        <from usec="0" sec="1465189313"/>
        <to usec="0" sec="1465189324"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="110.35.111.182" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1465189840"/>
        <to usec="0" sec="1465189850"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="87.112.142.96" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465190081"/>
        <to usec="0" sec="1465190089"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="119.59.9.169"/>
        </slice>
        <from usec="0" sec="1465189476"/>
        <to usec="0" sec="1465189489"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="186.50.16.149" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1465189529"/>
        <to usec="0" sec="1465189531"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.153.57.209" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1465189389"/>
        <to usec="0" sec="1465189393"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="157.77.25.8" dst_port="443"/>
            <filter src_ip="133.194.223.241" dst_ip="17.170.224.55"/>
            <filter src_ip="133.194.223.241" dst_port="443"/>
            <filter dst_ip="17.170.224.55" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189709"/>
        <to usec="0" sec="1465189954"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="221.43.237.205" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189335"/>
        <to usec="0" sec="1465189340"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.221.187.193"/>
        </slice>
        <from usec="0" sec="1465189337"/>
        <to usec="0" sec="1465189340"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="119.59.102.206"/>
        </slice>
        <from usec="0" sec="1465189419"/>
        <to usec="0" sec="1465189422"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.137.76.81" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465190059"/>
        <to usec="0" sec="1465190100"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="58.194.211.215" dst_port="22"/>
        </slice>
        <from usec="0" sec="1465189817"/>
        <to usec="0" sec="1465189915"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="151.251.45.81" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1465189474"/>
        <to usec="0" sec="1465189483"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="220.123.53.93"/>
        </slice>
        <from usec="0" sec="1465189747"/>
        <to usec="0" sec="1465189766"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.250.97.29" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1465189274"/>
        <to usec="0" sec="1465189285"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="119.58.165.129" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189765"/>
        <to usec="0" sec="1465189790"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.221.118.252"/>
        </slice>
        <from usec="0" sec="1465189958"/>
        <to usec="0" sec="1465189960"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="77.93.226.110" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1465189252"/>
        <to usec="0" sec="1465189263"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="190.68.253.118" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1465189966"/>
        <to usec="0" sec="1465189975"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="119.58.210.238"/>
        </slice>
        <from usec="0" sec="1465189615"/>
        <to usec="0" sec="1465189618"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.113.62.110" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1465189271"/>
        <to usec="0" sec="1465189273"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="178.132.174.114" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1465190099"/>
        <to usec="0" sec="1465190100"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="118.102.164.98" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189992"/>
        <to usec="0" sec="1465190002"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.71.81.114" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1465189243"/>
        <to usec="0" sec="1465189258"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.77.51.114"/>
        </slice>
        <from usec="0" sec="1465189205"/>
        <to usec="0" sec="1465189253"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="138.221.210.92" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1465189912"/>
        <to usec="0" sec="1465189919"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="62.35.79.96" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1465189393"/>
        <to usec="0" sec="1465189399"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.77.151.102"/>
        </slice>
        <from usec="0" sec="1465189850"/>
        <to usec="0" sec="1465189852"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="5.158.93.59" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189349"/>
        <to usec="0" sec="1465189377"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="70.72.212.46"/>
        </slice>
        <from usec="0" sec="1465189881"/>
        <to usec="0" sec="1465189909"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="2.116.96.211"/>
        </slice>
        <from usec="0" sec="1465190069"/>
        <to usec="0" sec="1465190071"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.59.186.40"/>
        </slice>
        <from usec="0" sec="1465189228"/>
        <to usec="0" sec="1465189242"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="119.58.210.44"/>
        </slice>
        <from usec="0" sec="1465189876"/>
        <to usec="0" sec="1465189888"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="27.211.187.39" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189304"/>
        <to usec="0" sec="1465189333"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="218.74.239.17"/>
        </slice>
        <from usec="0" sec="1465189232"/>
        <to usec="0" sec="1465189244"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="189.58.199.6" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1465189476"/>
        <to usec="0" sec="1465189482"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,011,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="14.130.209.211" src_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189601"/>
        <to usec="0" sec="1465189607"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="31.105.66.197" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189206"/>
        <to usec="0" sec="1465190099"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.77.124.191"/>
        </slice>
        <from usec="0" sec="1465189873"/>
        <to usec="0" sec="1465189875"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="126.253.102.164"/>
        </slice>
        <from usec="0" sec="1465189833"/>
        <to usec="0" sec="1465189835"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.207.71.61"/>
        </slice>
        <from usec="0" sec="1465189288"/>
        <to usec="0" sec="1465189290"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.194.173.18"/>
        </slice>
        <from usec="0" sec="1465189384"/>
        <to usec="0" sec="1465189386"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.194.85.231" dst_ip="81.35.46.202" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189916"/>
        <to usec="0" sec="1465189937"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="208.93.184.19"/>
        </slice>
        <from usec="0" sec="1465189407"/>
        <to usec="0" sec="1465190013"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="163.221.83.35" dst_port="443"/>
            <filter dst_ip="13.76.250.96" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189596"/>
        <to usec="0" sec="1465189666"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.194.237.248"/>
        </slice>
        <from usec="0" sec="1465189214"/>
        <to usec="0" sec="1465189216"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.194.211.189"/>
        </slice>
        <from usec="0" sec="1465190067"/>
        <to usec="0" sec="1465190069"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.194.168.104"/>
        </slice>
        <from usec="0" sec="1465189200"/>
        <to usec="0" sec="1465189202"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="51.5.70.85"/>
        </slice>
        <from usec="0" sec="1465189528"/>
        <to usec="0" sec="1465189530"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.221.114.205"/>
        </slice>
        <from usec="0" sec="1465189583"/>
        <to usec="0" sec="1465189585"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.244.178.77"/>
        </slice>
        <from usec="0" sec="1465189913"/>
        <to usec="0" sec="1465189915"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="49.176.208.190"/>
        </slice>
        <from usec="0" sec="1465189451"/>
        <to usec="0" sec="1465189616"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.194.223.187"/>
        </slice>
        <from usec="0" sec="1465189470"/>
        <to usec="0" sec="1465189472"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.77.150.195"/>
        </slice>
        <from usec="0" sec="1465190035"/>
        <to usec="0" sec="1465190037"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.221.219.170"/>
        </slice>
        <from usec="0" sec="1465189602"/>
        <to usec="0" sec="1465189604"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="119.58.47.166"/>
        </slice>
        <from usec="0" sec="1465189812"/>
        <to usec="0" sec="1465189814"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="131.241.233.221"/>
        </slice>
        <from usec="0" sec="1465189374"/>
        <to usec="0" sec="1465189376"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.194.155.222"/>
        </slice>
        <from usec="0" sec="1465189462"/>
        <to usec="0" sec="1465189464"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.221.154.93"/>
        </slice>
        <from usec="0" sec="1465189957"/>
        <to usec="0" sec="1465189959"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.194.127.136"/>
        </slice>
        <from usec="0" sec="1465189610"/>
        <to usec="0" sec="1465189613"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.77.25.24" dst_port="443"/>
            <filter src_ip="157.77.25.24" dst_ip="219.132.17.82" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189370"/>
        <to usec="0" sec="1465189843"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.194.222.29"/>
        </slice>
        <from usec="0" sec="1465189201"/>
        <to usec="0" sec="1465189204"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="64.109.94.104"/>
        </slice>
        <from usec="0" sec="1465189229"/>
        <to usec="0" sec="1465189231"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.249.148.4"/>
        </slice>
        <from usec="0" sec="1465189754"/>
        <to usec="0" sec="1465189757"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.221.115.117"/>
        </slice>
        <from usec="0" sec="1465189782"/>
        <to usec="0" sec="1465189785"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.77.124.180"/>
        </slice>
        <from usec="0" sec="1465189668"/>
        <to usec="0" sec="1465189671"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.221.216.151"/>
        </slice>
        <from usec="0" sec="1465189438"/>
        <to usec="0" sec="1465189440"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="220.73.108.149"/>
        </slice>
        <from usec="0" sec="1465189622"/>
        <to usec="0" sec="1465189625"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.194.219.107"/>
        </slice>
        <from usec="0" sec="1465189216"/>
        <to usec="0" sec="1465189219"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.215.92.170"/>
        </slice>
        <from usec="0" sec="1465189220"/>
        <to usec="0" sec="1465189234"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="176.94.36.162"/>
        </slice>
        <from usec="0" sec="1465189862"/>
        <to usec="0" sec="1465189864"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="126.244.90.200"/>
        </slice>
        <from usec="0" sec="1465190087"/>
        <to usec="0" sec="1465190089"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="50.243.199.59"/>
        </slice>
        <from usec="0" sec="1465189669"/>
        <to usec="0" sec="1465189671"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="81.188.87.55"/>
        </slice>
        <from usec="0" sec="1465189538"/>
        <to usec="0" sec="1465189540"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="50.243.199.48"/>
        </slice>
        <from usec="0" sec="1465189512"/>
        <to usec="0" sec="1465189514"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.114.158.227"/>
        </slice>
        <from usec="0" sec="1465189940"/>
        <to usec="0" sec="1465189961"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.219.136.231"/>
        </slice>
        <from usec="0" sec="1465189290"/>
        <to usec="0" sec="1465189292"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="2.189.130.234"/>
        </slice>
        <from usec="0" sec="1465189957"/>
        <to usec="0" sec="1465189959"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.194.220.232"/>
        </slice>
        <from usec="0" sec="1465189914"/>
        <to usec="0" sec="1465189916"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.77.124.249"/>
        </slice>
        <from usec="0" sec="1465189647"/>
        <to usec="0" sec="1465189649"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.221.115.7"/>
        </slice>
        <from usec="0" sec="1465189413"/>
        <to usec="0" sec="1465189415"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="203.114.150.79" dst_ip="36.248.5.80" src_port="123"/>
            <filter src_ip="203.114.140.47" dst_ip="36.248.5.80" src_port="123"/>
        </slice>
        <from usec="0" sec="1465189302"/>
        <to usec="0" sec="1465190091"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.194.49.9" src_port="35074"/>
            <filter src_ip="133.194.49.9" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189469"/>
        <to usec="0" sec="1465189748"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,010,1 0 0 0 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="150.52.126.168"/>
        </slice>
        <from usec="0" sec="1465189781"/>
        <to usec="0" sec="1465189783"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="143.7.138.171"/>
        </slice>
        <from usec="0" sec="1465189943"/>
        <to usec="0" sec="1465189946"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.163.118.189"/>
        </slice>
        <from usec="0" sec="1465189474"/>
        <to usec="0" sec="1465189476"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.130.26.134"/>
        </slice>
        <from usec="0" sec="1465189873"/>
        <to usec="0" sec="1465189875"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="72.13.118.219"/>
        </slice>
        <from usec="0" sec="1465189659"/>
        <to usec="0" sec="1465189661"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="66.72.175.248" dst_ip="163.221.33.1" src_port="1049" dst_port="61510"/>
        </slice>
        <from usec="0" sec="1465189811"/>
        <to usec="0" sec="1465189850"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="113.236.189.204"/>
        </slice>
        <from usec="0" sec="1465189950"/>
        <to usec="0" sec="1465189952"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="219.27.39.243" dst_ip="203.114.144.187" src_port="65499" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189777"/>
        <to usec="0" sec="1465189779"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="27.251.219.181" dst_ip="203.114.158.237" src_port="49909" dst_port="8080"/>
        </slice>
        <from usec="0" sec="1465189370"/>
        <to usec="0" sec="1465189377"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="23.95.58.181" dst_ip="202.244.177.65" src_port="80"/>
        </slice>
        <from usec="0" sec="1465189244"/>
        <to usec="0" sec="1465189247"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.228.251.188" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189780"/>
        <to usec="0" sec="1465189808"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.65.68.64" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465190015"/>
        <to usec="0" sec="1465190024"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,504,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="31.105.64.49" dst_ip="163.221.128.9" src_port="443" dst_port="58049"/>
        </slice>
        <from usec="0" sec="1465189882"/>
        <to usec="0" sec="1465189921"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,504,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="31.105.75.141" dst_ip="203.114.144.226" src_port="443" dst_port="65397"/>
        </slice>
        <from usec="0" sec="1465189758"/>
        <to usec="0" sec="1465190100"/>
    </anomaly>
    <anomaly type="notice" value="1.118590,1.781670,504,1 1 1 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="163.221.114.238" dst_ip="104.224.213.25" src_port="9227" dst_port="5900"/>
            <filter src_ip="163.221.114.238" dst_ip="104.224.213.25" src_port="1073" dst_port="5900"/>
            <filter src_ip="163.221.114.238" dst_ip="17.23.30.186" src_port="60386" dst_port="5223"/>
            <filter src_ip="163.221.114.238" dst_ip="54.26.250.8" src_port="55526" dst_port="443"/>
            <filter src_ip="163.221.114.238" dst_ip="37.7.13.133" src_port="53844" dst_port="5938"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="219.27.37.24" dst_ip="163.221.218.142" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189450"/>
        <to usec="0" sec="1465190093"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.194.204.101" dst_ip="38.67.37.247" src_port="51641" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189263"/>
        <to usec="0" sec="1465189324"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="108.5.220.28" dst_ip="203.114.158.212" src_port="38226" dst_port="80"/>
            <filter src_ip="108.5.220.28" dst_ip="203.114.158.212" src_port="38225" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189586"/>
        <to usec="0" sec="1465189600"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,503,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.221.9.95" dst_ip="40.218.166.37" src_port="80" dst_port="15439"/>
        </slice>
        <from usec="0" sec="1465189463"/>
        <to usec="0" sec="1465189759"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.221.251.214" dst_ip="207.213.242.132" src_port="80" dst_port="13237"/>
        </slice>
        <from usec="0" sec="1465189698"/>
        <to usec="0" sec="1465189704"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="118.236.56.68" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189507"/>
        <to usec="0" sec="1465189533"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.58.146.131" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189630"/>
        <to usec="0" sec="1465189659"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.53.39.140" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189968"/>
        <to usec="0" sec="1465189979"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="76.174.70.37" dst_ip="163.221.159.29" src_port="80"/>
        </slice>
        <from usec="0" sec="1465189410"/>
        <to usec="0" sec="1465189469"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,503,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="202.244.177.5" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189226"/>
        <to usec="0" sec="1465190042"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.221.212.99" dst_ip="31.105.73.71" src_port="53428" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465190098"/>
        <to usec="0" sec="1465190100"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.221.131.201" dst_ip="31.105.64.63" src_port="64311" dst_port="443"/>
            <filter src_ip="163.221.131.201" dst_ip="31.105.64.63" src_port="64310" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189244"/>
        <to usec="0" sec="1465189248"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,503,1 1 1 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="115.218.33.186" dst_ip="203.114.148.220" src_port="4276" dst_port="80"/>
            <filter src_ip="115.218.33.186" dst_ip="203.114.148.220" src_port="4275" dst_port="80"/>
            <filter src_ip="115.218.33.186" dst_ip="203.114.149.127" src_port="4429" dst_port="80"/>
            <filter src_ip="115.218.33.186" dst_ip="203.114.149.127" src_port="4428" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189826"/>
        <to usec="0" sec="1465189900"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="49.82.185.207" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189201"/>
        <to usec="0" sec="1465189955"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.17.172.110" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189641"/>
        <to usec="0" sec="1465190100"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="183.127.8.7" dst_ip="203.114.151.206" src_port="80" dst_port="123"/>
        </slice>
        <from usec="0" sec="1465189215"/>
        <to usec="0" sec="1465189667"/>
    </anomaly>
    <anomaly type="notice" value="1.118590,1.781670,010,1 1 1 0 0 0 0 0 0 1 0 0,ntscSYNt">
        <slice>
            <filter src_ip="111.243.240.2" src_port="12200" dst_port="10200"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.77.25.29" dst_ip="141.105.57.201" dst_port="80"/>
            <filter src_ip="157.77.25.29" dst_ip="61.3.27.66" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189214"/>
        <to usec="0" sec="1465189263"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="157.77.214.14" dst_ip="69.8.223.81" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189651"/>
        <to usec="0" sec="1465189661"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="212.147.15.117" dst_ip="203.114.155.208" src_port="873" dst_port="53446"/>
        </slice>
        <from usec="0" sec="1465189207"/>
        <to usec="0" sec="1465189210"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.25.211.129" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189613"/>
        <to usec="0" sec="1465189623"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.0.161.117" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189201"/>
        <to usec="0" sec="1465189863"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,503,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.194.84.101" dst_port="80"/>
            <filter src_ip="133.194.84.101" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189211"/>
        <to usec="0" sec="1465189843"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="1.242.31.103" dst_ip="163.221.28.59" src_port="58825" dst_port="1194"/>
        </slice>
        <from usec="0" sec="1465189564"/>
        <to usec="0" sec="1465190044"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,503,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="93.135.52.168" dst_ip="202.244.32.115" src_port="80" dst_port="53380"/>
        </slice>
        <from usec="0" sec="1465189614"/>
        <to usec="0" sec="1465189616"/>
    </anomaly>
    <anomaly type="notice" value="1.118590,1.781670,504,1 1 1 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="202.244.181.120" dst_ip="38.104.181.184" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="168.31.18.130" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189809"/>
        <to usec="0" sec="1465189819"/>
    </anomaly>
    <anomaly type="notice" value="0.872431,1.884600,999,0 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.77.146.49"/>
        </slice>
        <from usec="0" sec="1465189480"/>
        <to usec="0" sec="1465189483"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.215.95.60" dst_ip="122.239.173.62" src_port="41317" dst_port="6607"/>
        </slice>
        <from usec="0" sec="1465189633"/>
        <to usec="0" sec="1465189635"/>
    </anomaly>
    <anomaly type="notice" value="0.539836,1.795650,010,1 0 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.188.154.214" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189331"/>
        <to usec="0" sec="1465190098"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.33.149.46" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189855"/>
        <to usec="0" sec="1465189866"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.194.128.211" dst_ip="50.243.199.29" src_port="46394" dst_port="25"/>
            <filter src_ip="133.194.128.211" dst_ip="216.82.201.252" src_port="56143" dst_port="25"/>
        </slice>
        <from usec="0" sec="1465189412"/>
        <to usec="0" sec="1465189656"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="203.114.158.212" dst_ip="76.100.211.153" src_port="80" dst_port="57996"/>
        </slice>
        <from usec="0" sec="1465189519"/>
        <to usec="0" sec="1465189810"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="203.114.149.221" src_port="57355"/>
        </slice>
        <from usec="0" sec="1465189386"/>
        <to usec="0" sec="1465190086"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="220.219.137.20" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189835"/>
        <to usec="0" sec="1465189846"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="202.244.176.242" dst_ip="175.184.87.121" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189945"/>
        <to usec="0" sec="1465190076"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,503,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.194.49.24" dst_ip="69.172.219.159" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189311"/>
        <to usec="0" sec="1465190092"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="157.77.25.55" dst_ip="17.170.144.41" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189325"/>
        <to usec="0" sec="1465189908"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.221.128.27" dst_ip="31.105.73.71" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189422"/>
        <to usec="0" sec="1465190041"/>
    </anomaly>
    <anomaly type="notice" value="1.005010,1.809710,999,1 1 1 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="130.58.131.239" dst_port="25"/>
        </slice>
        <from usec="0" sec="1465189205"/>
        <to usec="0" sec="1465190100"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,503,1 1 1 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="163.221.211.27" dst_ip="38.67.37.249"/>
            <filter src_ip="163.221.211.27" dst_port="80"/>
            <filter src_ip="163.221.211.27" dst_port="443"/>
            <filter dst_ip="38.67.37.249" dst_port="80"/>
            <filter src_ip="163.221.211.27" src_port="59448" dst_port="3544"/>
        </slice>
        <from usec="0" sec="1465189886"/>
        <to usec="0" sec="1465189932"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="118.47.8.168" dst_ip="203.114.152.127" src_port="42237" dst_port="51772"/>
        </slice>
        <from usec="0" sec="1465189443"/>
        <to usec="0" sec="1465189968"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,503,1 1 1 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.194.205.122" dst_port="443"/>
            <filter src_ip="133.194.205.122" dst_port="80"/>
            <filter dst_ip="31.105.75.169" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189220"/>
        <to usec="0" sec="1465190099"/>
    </anomaly>
    <anomaly type="notice" value="1.005010,1.809710,999,1 1 1 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="203.114.147.232" dst_port="123"/>
            <filter dst_ip="203.114.140.47" dst_port="123"/>
            <filter src_ip="36.248.5.80" dst_ip="203.114.150.79" dst_port="123"/>
        </slice>
        <from usec="0" sec="1465189203"/>
        <to usec="0" sec="1465190100"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="192.76.82.103" dst_ip="203.114.154.136" dst_port="53"/>
            <filter src_ip="192.76.82.104" dst_ip="203.114.154.136" dst_port="53"/>
        </slice>
        <from usec="0" sec="1465189839"/>
        <to usec="0" sec="1465189843"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,502,1 1 1 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="58.194.211.251" dst_port="22"/>
            <filter dst_ip="202.244.39.155" dst_port="25"/>
        </slice>
        <from usec="0" sec="1465189374"/>
        <to usec="0" sec="1465190019"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,503,1 1 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.221.208.213" src_port="80"/>
            <filter dst_ip="163.221.208.213" src_port="443"/>
        </slice>
        <from usec="0" sec="1465189496"/>
        <to usec="0" sec="1465189498"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.31.159.135" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189263"/>
        <to usec="0" sec="1465189274"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.221.131.152" dst_port="80"/>
            <filter src_ip="163.221.131.152" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189720"/>
        <to usec="0" sec="1465190094"/>
    </anomaly>
    <anomaly type="notice" value="0.539836,1.795650,503,1 0 1 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.244.181.221" dst_ip="107.43.48.248" dst_port="80"/>
            <filter src_ip="202.244.181.221" dst_ip="54.24.215.244" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189221"/>
        <to usec="0" sec="1465189243"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.194.172.232" dst_ip="216.232.248.161" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189624"/>
        <to usec="0" sec="1465189629"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.233.170.3" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189903"/>
        <to usec="0" sec="1465189915"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.26.172.251" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189657"/>
        <to usec="0" sec="1465189669"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="107.174.55.163"/>
        </slice>
        <from usec="0" sec="1465189898"/>
        <to usec="0" sec="1465190028"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="111.248.49.132" src_port="12200" dst_port="37015"/>
        </slice>
        <from usec="0" sec="1465189922"/>
        <to usec="0" sec="1465189940"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="59.181.126.78" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189548"/>
        <to usec="0" sec="1465189559"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="41.221.39.188" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465190084"/>
        <to usec="0" sec="1465190098"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="213.5.103.98" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190093"/>
        <to usec="0" sec="1465190100"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="81.172.125.87" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190016"/>
        <to usec="0" sec="1465190029"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="110.255.108.166" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189709"/>
        <to usec="0" sec="1465189737"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.242.145.51" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189357"/>
        <to usec="0" sec="1465189367"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="60.44.196.57" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189375"/>
        <to usec="0" sec="1465189385"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="178.27.238.69" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189666"/>
        <to usec="0" sec="1465189676"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.43.192.66" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189932"/>
        <to usec="0" sec="1465189944"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="118.70.252.66" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189778"/>
        <to usec="0" sec="1465189790"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.44.126.76" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189397"/>
        <to usec="0" sec="1465189410"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.95.240.3" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189462"/>
        <to usec="0" sec="1465189473"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.233.12.126" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189402"/>
        <to usec="0" sec="1465189417"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="83.59.228.143" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189417"/>
        <to usec="0" sec="1465189428"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.101.147.200" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189211"/>
        <to usec="0" sec="1465189224"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="222.156.10.207" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189933"/>
        <to usec="0" sec="1465189943"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="181.59.143.182" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189817"/>
        <to usec="0" sec="1465189827"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.201.53.180" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189393"/>
        <to usec="0" sec="1465189406"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="124.218.131.248" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189803"/>
        <to usec="0" sec="1465189819"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="114.98.129.135" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189667"/>
        <to usec="0" sec="1465189680"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="114.97.163.134" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189295"/>
        <to usec="0" sec="1465189309"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.125.65.137" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189488"/>
        <to usec="0" sec="1465189496"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.230.239.71" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189752"/>
        <to usec="0" sec="1465189764"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="180.79.37.56" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189811"/>
        <to usec="0" sec="1465189826"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="101.222.231.247" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190048"/>
        <to usec="0" sec="1465190061"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.12.250.138" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190068"/>
        <to usec="0" sec="1465190079"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.125.53.245" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189240"/>
        <to usec="0" sec="1465189252"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.42.226.68" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189485"/>
        <to usec="0" sec="1465189496"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.228.19.244" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189591"/>
        <to usec="0" sec="1465189599"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="221.33.49.75" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189313"/>
        <to usec="0" sec="1465189324"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.244.33.63" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189295"/>
        <to usec="0" sec="1465189305"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="31.111.201.143" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189538"/>
        <to usec="0" sec="1465189549"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="200.37.161.253" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189698"/>
        <to usec="0" sec="1465189711"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="223.196.216.125" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189698"/>
        <to usec="0" sec="1465189709"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.13.179.205" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189639"/>
        <to usec="0" sec="1465189650"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="179.194.250.14" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189478"/>
        <to usec="0" sec="1465189488"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.95.8.131" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189248"/>
        <to usec="0" sec="1465189259"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.186.46.86" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189829"/>
        <to usec="0" sec="1465189839"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="222.188.118.168" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189556"/>
        <to usec="0" sec="1465189568"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.132.42.82" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189558"/>
        <to usec="0" sec="1465189569"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.17.18.237" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189223"/>
        <to usec="0" sec="1465189235"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="89.25.131.235" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190009"/>
        <to usec="0" sec="1465190020"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.247.40.44" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189290"/>
        <to usec="0" sec="1465189304"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="39.50.180.45" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189591"/>
        <to usec="0" sec="1465189607"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="189.103.155.210" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189373"/>
        <to usec="0" sec="1465189386"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="181.143.114.45" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189220"/>
        <to usec="0" sec="1465189231"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="89.200.106.102" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189518"/>
        <to usec="0" sec="1465189529"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="59.126.3.152" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189718"/>
        <to usec="0" sec="1465189742"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="39.41.33.89" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189979"/>
        <to usec="0" sec="1465189988"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="223.102.62.217" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189441"/>
        <to usec="0" sec="1465189452"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="222.21.132.37" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189973"/>
        <to usec="0" sec="1465189985"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.77.100.37" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465190055"/>
        <to usec="0" sec="1465190066"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="60.45.117.160" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189929"/>
        <to usec="0" sec="1465189941"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.153.153.159" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189718"/>
        <to usec="0" sec="1465189723"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="187.138.219.162" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189885"/>
        <to usec="0" sec="1465189894"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.128.219.225" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189971"/>
        <to usec="0" sec="1465189982"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="221.60.222.33" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189229"/>
        <to usec="0" sec="1465189244"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="76.139.178.160" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465190096"/>
        <to usec="0" sec="1465190099"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.169.57.223" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189748"/>
        <to usec="0" sec="1465189759"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="190.6.80.227" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189568"/>
        <to usec="0" sec="1465189577"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="193.159.32.156" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189744"/>
        <to usec="0" sec="1465189755"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="115.17.110.238" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189285"/>
        <to usec="0" sec="1465189294"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="157.55.88.229" dst_port="8080"/>
        </slice>
        <from usec="0" sec="1465189584"/>
        <to usec="0" sec="1465189586"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.50.173.69" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189867"/>
        <to usec="0" sec="1465189879"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="180.251.248.28" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189793"/>
        <to usec="0" sec="1465189815"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="210.38.252.36" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189746"/>
        <to usec="0" sec="1465189757"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="77.93.59.236" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189291"/>
        <to usec="0" sec="1465189299"/>
    </anomaly>
    <anomaly type="notice" value="0.946408,1.802350,010,1 1 0 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.233.175.149" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189201"/>
        <to usec="0" sec="1465189637"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.49.213.21" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189895"/>
        <to usec="0" sec="1465189913"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.128.191.230" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189373"/>
        <to usec="0" sec="1465189380"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="186.228.227.233" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189957"/>
        <to usec="0" sec="1465189968"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.244.15.249" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189459"/>
        <to usec="0" sec="1465189471"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="106.1.221.200" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189351"/>
        <to usec="0" sec="1465189381"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.171.43.246" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189582"/>
        <to usec="0" sec="1465189593"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="186.161.165.88" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189519"/>
        <to usec="0" sec="1465189530"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="219.140.17.166" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190092"/>
        <to usec="0" sec="1465190100"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="151.122.231.167" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190020"/>
        <to usec="0" sec="1465190032"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.73.180.117" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189239"/>
        <to usec="0" sec="1465189268"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.82.176.117" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189610"/>
        <to usec="0" sec="1465189620"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="31.167.248.116" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189507"/>
        <to usec="0" sec="1465189518"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.181.7.164" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189240"/>
        <to usec="0" sec="1465189251"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.125.35.228" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189228"/>
        <to usec="0" sec="1465189240"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.98.25.11" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189612"/>
        <to usec="0" sec="1465189622"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.225.11.208" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189489"/>
        <to usec="0" sec="1465189503"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="101.26.170.124" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189467"/>
        <to usec="0" sec="1465189477"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.158.183.130" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189761"/>
        <to usec="0" sec="1465189775"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="218.67.45.243" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189853"/>
        <to usec="0" sec="1465189864"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.18.228.127" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189619"/>
        <to usec="0" sec="1465189630"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="179.133.210.140" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190071"/>
        <to usec="0" sec="1465190082"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="79.201.146.142" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189726"/>
        <to usec="0" sec="1465189737"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="218.55.248.29" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190036"/>
        <to usec="0" sec="1465190048"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.125.87.222" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189539"/>
        <to usec="0" sec="1465189551"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.105.63.66" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189743"/>
        <to usec="0" sec="1465189750"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.30.2.19" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189576"/>
        <to usec="0" sec="1465189588"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="211.238.43.223" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189480"/>
        <to usec="0" sec="1465189504"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.94.236.108" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189485"/>
        <to usec="0" sec="1465189497"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="149.29.152.47" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189224"/>
        <to usec="0" sec="1465189242"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.213.254.238" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189452"/>
        <to usec="0" sec="1465189469"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="27.86.225.142" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189283"/>
        <to usec="0" sec="1465189293"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.102.28.112" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189677"/>
        <to usec="0" sec="1465189690"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="87.55.51.238" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189672"/>
        <to usec="0" sec="1465189683"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.192.243.110" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465190088"/>
        <to usec="0" sec="1465190099"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="111.192.250.55" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189400"/>
        <to usec="0" sec="1465189410"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.122.12.84" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190059"/>
        <to usec="0" sec="1465190069"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.216.163.212" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189891"/>
        <to usec="0" sec="1465189902"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="118.182.220.23" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190032"/>
        <to usec="0" sec="1465190043"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="191.123.146.185" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190062"/>
        <to usec="0" sec="1465190076"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="117.212.113.185" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189614"/>
        <to usec="0" sec="1465189622"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.241.158.122" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189409"/>
        <to usec="0" sec="1465189420"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.198.181.154" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189401"/>
        <to usec="0" sec="1465189431"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="39.53.85.192" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189842"/>
        <to usec="0" sec="1465189852"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.181.64.63" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189231"/>
        <to usec="0" sec="1465189242"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="171.139.113.225" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189932"/>
        <to usec="0" sec="1465189943"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.119.33.66" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189833"/>
        <to usec="0" sec="1465189847"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="190.71.31.34" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189249"/>
        <to usec="0" sec="1465189260"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.18.142.128" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190074"/>
        <to usec="0" sec="1465190085"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.224.151.192" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465190040"/>
        <to usec="0" sec="1465190100"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.136.156.31" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465190092"/>
        <to usec="0" sec="1465190096"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="81.200.131.184" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189460"/>
        <to usec="0" sec="1465189469"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="110.25.124.49" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189752"/>
        <to usec="0" sec="1465189768"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="39.33.186.200" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189874"/>
        <to usec="0" sec="1465189885"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.123.200.57" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189239"/>
        <to usec="0" sec="1465189251"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.46.121.197" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189626"/>
        <to usec="0" sec="1465189652"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.236.190.51" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189290"/>
        <to usec="0" sec="1465189301"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="192.157.101.181" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465190095"/>
        <to usec="0" sec="1465190100"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="124.178.7.57" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189811"/>
        <to usec="0" sec="1465189823"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="175.141.157.186" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189816"/>
        <to usec="0" sec="1465189828"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="60.79.94.63" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190065"/>
        <to usec="0" sec="1465190076"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.37.4.73" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189819"/>
        <to usec="0" sec="1465189829"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="61.108.114.78" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189408"/>
        <to usec="0" sec="1465189418"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="218.48.107.183" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1465190090"/>
        <to usec="0" sec="1465190100"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="39.33.86.63" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189484"/>
        <to usec="0" sec="1465189496"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.79.181.57" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189406"/>
        <to usec="0" sec="1465189430"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.129.239.201" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189673"/>
        <to usec="0" sec="1465189700"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.211.56.71" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189594"/>
        <to usec="0" sec="1465189604"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.31.255.183" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190050"/>
        <to usec="0" sec="1465190060"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.128.105.55" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190057"/>
        <to usec="0" sec="1465190068"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.214.141.184" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465190065"/>
        <to usec="0" sec="1465190094"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.134.38.70" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189611"/>
        <to usec="0" sec="1465189621"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.249.60.69" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189384"/>
        <to usec="0" sec="1465189394"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="90.68.20.69" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189342"/>
        <to usec="0" sec="1465189367"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.78.244.69" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189806"/>
        <to usec="0" sec="1465189815"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.1.216.68" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189967"/>
        <to usec="0" sec="1465189979"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.233.142.75" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189771"/>
        <to usec="0" sec="1465189782"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="72.8.154.180" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189805"/>
        <to usec="0" sec="1465189817"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.202.88.63" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189391"/>
        <to usec="0" sec="1465189413"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.79.97.177" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190028"/>
        <to usec="0" sec="1465190041"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="188.210.134.76" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189732"/>
        <to usec="0" sec="1465189743"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="24.163.127.194" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189213"/>
        <to usec="0" sec="1465189223"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.142.207.189" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189542"/>
        <to usec="0" sec="1465189553"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.8.200.77" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189680"/>
        <to usec="0" sec="1465189691"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.76.63.193" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189464"/>
        <to usec="0" sec="1465189493"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.148.98.40" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189658"/>
        <to usec="0" sec="1465189667"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="83.206.116.81" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189433"/>
        <to usec="0" sec="1465189444"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.242.166.40" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189952"/>
        <to usec="0" sec="1465189964"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.53.199.173" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189707"/>
        <to usec="0" sec="1465189719"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="186.225.218.85" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190082"/>
        <to usec="0" sec="1465190091"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="82.6.117.44" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189777"/>
        <to usec="0" sec="1465189788"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="210.197.155.212" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189936"/>
        <to usec="0" sec="1465189950"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="106.1.181.44" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190067"/>
        <to usec="0" sec="1465190076"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.129.42.211" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189939"/>
        <to usec="0" sec="1465189952"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="83.64.116.214" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189795"/>
        <to usec="0" sec="1465189806"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="87.107.124.41" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189715"/>
        <to usec="0" sec="1465189725"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="43.230.50.208" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189873"/>
        <to usec="0" sec="1465189885"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="83.82.170.44" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189421"/>
        <to usec="0" sec="1465189433"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="187.146.77.174" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189562"/>
        <to usec="0" sec="1465189572"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="31.167.249.170" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189494"/>
        <to usec="0" sec="1465189502"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="90.140.100.89" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189486"/>
        <to usec="0" sec="1465189499"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="218.70.70.89" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189787"/>
        <to usec="0" sec="1465189799"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="1.21.179.217" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189836"/>
        <to usec="0" sec="1465189841"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="64.175.88.37" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189782"/>
        <to usec="0" sec="1465189794"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="175.207.162.91" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189252"/>
        <to usec="0" sec="1465189280"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="125.230.60.91" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190056"/>
        <to usec="0" sec="1465190067"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.159.76.36" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189833"/>
        <to usec="0" sec="1465189843"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.255.203.223" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190009"/>
        <to usec="0" sec="1465190020"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="49.88.111.160" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189634"/>
        <to usec="0" sec="1465189645"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="49.86.188.32" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189986"/>
        <to usec="0" sec="1465189996"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="85.25.50.163" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465190025"/>
        <to usec="0" sec="1465190038"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="220.120.206.34" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189290"/>
        <to usec="0" sec="1465189302"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.77.147.161" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189484"/>
        <to usec="0" sec="1465189495"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="101.219.241.161" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189200"/>
        <to usec="0" sec="1465189212"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="79.140.100.32" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189549"/>
        <to usec="0" sec="1465189557"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="81.201.141.160" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189350"/>
        <to usec="0" sec="1465189361"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.74.206.104" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189417"/>
        <to usec="0" sec="1465189430"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.133.123.229" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189277"/>
        <to usec="0" sec="1465189288"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="120.166.234.149" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189880"/>
        <to usec="0" sec="1465189891"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.186.37.131" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189895"/>
        <to usec="0" sec="1465189907"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="106.85.160.4" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190050"/>
        <to usec="0" sec="1465190058"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="218.57.43.227" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190049"/>
        <to usec="0" sec="1465190058"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="111.237.254.126" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189590"/>
        <to usec="0" sec="1465189604"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="2.114.49.155" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190065"/>
        <to usec="0" sec="1465190073"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="91.10.27.158" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189502"/>
        <to usec="0" sec="1465189513"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.18.108.117" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189241"/>
        <to usec="0" sec="1465189252"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="91.43.244.25" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189633"/>
        <to usec="0" sec="1465189645"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="58.155.228.103" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189598"/>
        <to usec="0" sec="1465189605"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.98.228.9" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189677"/>
        <to usec="0" sec="1465189689"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.58.247.153" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189457"/>
        <to usec="0" sec="1465189468"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.188.4.6" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189236"/>
        <to usec="0" sec="1465189263"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="49.187.211.234" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189994"/>
        <to usec="0" sec="1465190006"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.75.177.154" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189280"/>
        <to usec="0" sec="1465189292"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="27.93.187.250" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189650"/>
        <to usec="0" sec="1465189660"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.77.229.139" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189838"/>
        <to usec="0" sec="1465189851"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="125.148.201.254" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189260"/>
        <to usec="0" sec="1465189268"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.78.131.240" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189483"/>
        <to usec="0" sec="1465189496"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.162.148.1" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189740"/>
        <to usec="0" sec="1465189751"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="91.116.130.126" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190088"/>
        <to usec="0" sec="1465190099"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.61.9.238" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190064"/>
        <to usec="0" sec="1465190074"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="46.9.99.240" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189698"/>
        <to usec="0" sec="1465189704"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="191.120.130.243" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189851"/>
        <to usec="0" sec="1465189858"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.80.210.243" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189596"/>
        <to usec="0" sec="1465189605"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.24.26.14" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189898"/>
        <to usec="0" sec="1465189909"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.10.185.241" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189259"/>
        <to usec="0" sec="1465189270"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.180.231.238" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189497"/>
        <to usec="0" sec="1465189508"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="2.124.69.151" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189894"/>
        <to usec="0" sec="1465189905"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="128.193.176.118" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189262"/>
        <to usec="0" sec="1465189272"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="188.11.22.245" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190071"/>
        <to usec="0" sec="1465190084"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.129.81.18" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189771"/>
        <to usec="0" sec="1465189785"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.21.57.242" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189771"/>
        <to usec="0" sec="1465189784"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="124.115.215.148" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189695"/>
        <to usec="0" sec="1465189722"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.82.134.19" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189400"/>
        <to usec="0" sec="1465189413"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.24.58.149" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189704"/>
        <to usec="0" sec="1465189716"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="83.157.133.235" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190059"/>
        <to usec="0" sec="1465190070"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="23.121.254.18" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189424"/>
        <to usec="0" sec="1465189435"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.99.60.108" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189301"/>
        <to usec="0" sec="1465189311"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="27.211.227.237" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189921"/>
        <to usec="0" sec="1465189932"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.59.176.243" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189619"/>
        <to usec="0" sec="1465189632"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="49.81.234.108" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190056"/>
        <to usec="0" sec="1465190066"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.26.159.241" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189396"/>
        <to usec="0" sec="1465189408"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="190.241.173.233" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189559"/>
        <to usec="0" sec="1465189571"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="218.103.165.12" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189831"/>
        <to usec="0" sec="1465189844"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="67.130.106.6" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189890"/>
        <to usec="0" sec="1465189898"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="116.112.50.102" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189700"/>
        <to usec="0" sec="1465189711"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="36.37.22.134" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189746"/>
        <to usec="0" sec="1465189756"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.81.121.122" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189698"/>
        <to usec="0" sec="1465189722"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="27.10.92.229" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189971"/>
        <to usec="0" sec="1465189983"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="179.250.186.122" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189841"/>
        <to usec="0" sec="1465189851"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="180.55.22.132" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189250"/>
        <to usec="0" sec="1465189261"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.10.150.0" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189788"/>
        <to usec="0" sec="1465189799"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="41.6.49.158" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189818"/>
        <to usec="0" sec="1465189830"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.135.212.1" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189245"/>
        <to usec="0" sec="1465189259"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="202.56.115.225" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465190029"/>
        <to usec="0" sec="1465190052"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="2.190.112.78" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189479"/>
        <to usec="0" sec="1465189490"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="218.34.20.135" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190050"/>
        <to usec="0" sec="1465190059"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="106.25.184.189" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189239"/>
        <to usec="0" sec="1465189248"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.128.72.178" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189388"/>
        <to usec="0" sec="1465189406"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="41.17.174.181" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189956"/>
        <to usec="0" sec="1465189967"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="200.122.239.117" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189932"/>
        <to usec="0" sec="1465189940"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.118.176.179" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189906"/>
        <to usec="0" sec="1465189917"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="82.1.46.177" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189788"/>
        <to usec="0" sec="1465189797"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.202.96.130" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189209"/>
        <to usec="0" sec="1465189219"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.196.117.186" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189744"/>
        <to usec="0" sec="1465189753"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.164.150.118" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189468"/>
        <to usec="0" sec="1465189480"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="184.189.165.124" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189632"/>
        <to usec="0" sec="1465189643"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="189.57.196.132" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189853"/>
        <to usec="0" sec="1465189863"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="176.19.114.116" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189216"/>
        <to usec="0" sec="1465189225"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="82.229.65.69" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189957"/>
        <to usec="0" sec="1465189968"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="168.227.161.65" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189835"/>
        <to usec="0" sec="1465189848"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="86.148.187.113" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189770"/>
        <to usec="0" sec="1465189778"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="156.47.214.176" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189861"/>
        <to usec="0" sec="1465189869"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.190.108.137" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189607"/>
        <to usec="0" sec="1465189621"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="184.87.237.118" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189946"/>
        <to usec="0" sec="1465189958"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="179.130.155.118" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189473"/>
        <to usec="0" sec="1465189484"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.136.178.118" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189558"/>
        <to usec="0" sec="1465189570"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="80.74.211.71" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189453"/>
        <to usec="0" sec="1465189462"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="179.201.155.183" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189994"/>
        <to usec="0" sec="1465189999"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="180.252.83.74" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189443"/>
        <to usec="0" sec="1465189454"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.17.88.139" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465190014"/>
        <to usec="0" sec="1465190025"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.209.58.75" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189779"/>
        <to usec="0" sec="1465189790"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="27.120.233.187" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189631"/>
        <to usec="0" sec="1465189642"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.132.124.189" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190064"/>
        <to usec="0" sec="1465190074"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="60.171.38.131" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189200"/>
        <to usec="0" sec="1465189202"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.182.15.127" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189529"/>
        <to usec="0" sec="1465189542"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.152.3.77" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189858"/>
        <to usec="0" sec="1465189868"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="218.50.80.189" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189915"/>
        <to usec="0" sec="1465189927"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="186.37.7.65" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189863"/>
        <to usec="0" sec="1465189873"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.68.216.128" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189950"/>
        <to usec="0" sec="1465189960"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.69.37.64" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465190036"/>
        <to usec="0" sec="1465190041"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="119.58.160.87" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189712"/>
        <to usec="0" sec="1465189724"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="176.88.12.174" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189450"/>
        <to usec="0" sec="1465189463"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.240.240.145" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189675"/>
        <to usec="0" sec="1465189706"/>
    </anomaly>
    <anomaly type="notice" value="0.946408,1.802350,010,1 1 0 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.133.14.168" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189923"/>
        <to usec="0" sec="1465189944"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.144.231.82" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189687"/>
        <to usec="0" sec="1465189705"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.97.45.85" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189203"/>
        <to usec="0" sec="1465189213"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.139.160.151" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189429"/>
        <to usec="0" sec="1465189431"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.156.226.108" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189246"/>
        <to usec="0" sec="1465189258"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.127.93.170" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189623"/>
        <to usec="0" sec="1465189633"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="49.170.33.85" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189669"/>
        <to usec="0" sec="1465189681"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="31.126.156.169" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189854"/>
        <to usec="0" sec="1465189864"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.137.110.172" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189866"/>
        <to usec="0" sec="1465189875"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="186.41.125.168" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189874"/>
        <to usec="0" sec="1465189882"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.183.24.171" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189638"/>
        <to usec="0" sec="1465189650"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.119.221.167" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189265"/>
        <to usec="0" sec="1465189275"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="81.194.138.152" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189584"/>
        <to usec="0" sec="1465189595"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.98.223.103" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189514"/>
        <to usec="0" sec="1465189523"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="89.12.222.91" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189465"/>
        <to usec="0" sec="1465189489"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.129.213.91" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189991"/>
        <to usec="0" sec="1465190005"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="210.130.79.100" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189678"/>
        <to usec="0" sec="1465189690"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="31.182.182.97" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190048"/>
        <to usec="0" sec="1465190059"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.235.225.156" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189797"/>
        <to usec="0" sec="1465189807"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="77.92.176.158" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189957"/>
        <to usec="0" sec="1465189968"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.100.3.169" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189512"/>
        <to usec="0" sec="1465189536"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.77.240.94" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189683"/>
        <to usec="0" sec="1465189695"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.174.34.70" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189971"/>
        <to usec="0" sec="1465189983"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="1.1.180.134" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189988"/>
        <to usec="0" sec="1465190011"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="191.113.198.150" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190027"/>
        <to usec="0" sec="1465190037"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="186.33.84.160" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189235"/>
        <to usec="0" sec="1465189246"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="110.171.235.105" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189840"/>
        <to usec="0" sec="1465189852"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.111.129.69" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189645"/>
        <to usec="0" sec="1465189675"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.89.223.124" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189334"/>
        <to usec="0" sec="1465189346"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.117.59.91" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189974"/>
        <to usec="0" sec="1465189984"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="218.158.104.156" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189435"/>
        <to usec="0" sec="1465189446"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.20.124.191" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189419"/>
        <to usec="0" sec="1465189432"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.247.68.156" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189658"/>
        <to usec="0" sec="1465189669"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="1.162.219.110" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189845"/>
        <to usec="0" sec="1465189856"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.129.37.140" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189628"/>
        <to usec="0" sec="1465189639"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="59.124.43.69" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189705"/>
        <to usec="0" sec="1465189718"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="84.92.71.122" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189963"/>
        <to usec="0" sec="1465189975"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="139.199.227.71" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189530"/>
        <to usec="0" sec="1465189540"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.137.211.80" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189915"/>
        <to usec="0" sec="1465189927"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="116.18.72.150" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189299"/>
        <to usec="0" sec="1465189310"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="223.102.59.70" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189506"/>
        <to usec="0" sec="1465189518"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="198.83.152.149" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189312"/>
        <to usec="0" sec="1465189331"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.132.86.138" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189464"/>
        <to usec="0" sec="1465189475"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.182.90.139" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189629"/>
        <to usec="0" sec="1465189642"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.212.38.180" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189520"/>
        <to usec="0" sec="1465189530"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.78.80.171" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189201"/>
        <to usec="0" sec="1465189725"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="42.233.151.68" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190002"/>
        <to usec="0" sec="1465190014"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="222.127.85.76" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189531"/>
        <to usec="0" sec="1465189544"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.204.103.96" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189300"/>
        <to usec="0" sec="1465189308"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.134.53.190" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189874"/>
        <to usec="0" sec="1465189882"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="91.133.252.158" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189701"/>
        <to usec="0" sec="1465189711"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.255.200.137" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189718"/>
        <to usec="0" sec="1465189729"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="200.161.88.143" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189629"/>
        <to usec="0" sec="1465189640"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="218.40.53.175" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189800"/>
        <to usec="0" sec="1465189811"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.116.175.142" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189829"/>
        <to usec="0" sec="1465189839"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="46.249.235.168" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189816"/>
        <to usec="0" sec="1465189828"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="46.172.209.150" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189270"/>
        <to usec="0" sec="1465189279"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.0.3.109" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189859"/>
        <to usec="0" sec="1465189871"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.111.253.106" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189578"/>
        <to usec="0" sec="1465189589"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="179.138.45.82" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190004"/>
        <to usec="0" sec="1465190010"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.68.33.77" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465190010"/>
        <to usec="0" sec="1465190035"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="218.236.149.85" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189447"/>
        <to usec="0" sec="1465189458"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="39.44.168.146" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189298"/>
        <to usec="0" sec="1465189309"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="118.80.212.117" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189995"/>
        <to usec="0" sec="1465190009"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.132.240.172" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465190074"/>
        <to usec="0" sec="1465190098"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="179.133.62.148" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189341"/>
        <to usec="0" sec="1465189351"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.186.24.172" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189201"/>
        <to usec="0" sec="1465189203"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="179.226.91.83" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189583"/>
        <to usec="0" sec="1465189593"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.234.223.108" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189977"/>
        <to usec="0" sec="1465189988"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="187.222.18.76" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189501"/>
        <to usec="0" sec="1465189514"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="202.21.46.108" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189810"/>
        <to usec="0" sec="1465189822"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="220.208.9.116" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189233"/>
        <to usec="0" sec="1465189246"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.203.239.150" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189225"/>
        <to usec="0" sec="1465189235"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.137.88.169" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189433"/>
        <to usec="0" sec="1465189444"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="151.56.107.80" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465190048"/>
        <to usec="0" sec="1465190059"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.65.228.175" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189202"/>
        <to usec="0" sec="1465189591"/>
    </anomaly>
    <anomaly type="notice" value="0.539836,1.795650,999,1 0 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.132.213.169" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189415"/>
        <to usec="0" sec="1465189426"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="120.155.78.83" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189861"/>
        <to usec="0" sec="1465189871"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="176.88.13.150" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189541"/>
        <to usec="0" sec="1465189554"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="187.119.186.82" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189410"/>
        <to usec="0" sec="1465189419"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.91.236.136" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189341"/>
        <to usec="0" sec="1465189348"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="46.231.253.116" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189639"/>
        <to usec="0" sec="1465189652"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="190.235.59.134" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189943"/>
        <to usec="0" sec="1465189955"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.131.222.152" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189802"/>
        <to usec="0" sec="1465189813"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="223.98.184.134" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189446"/>
        <to usec="0" sec="1465189466"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="189.3.23.71" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189530"/>
        <to usec="0" sec="1465189541"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="222.152.185.90" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189694"/>
        <to usec="0" sec="1465189704"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.213.55.122" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189444"/>
        <to usec="0" sec="1465189455"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.122.83.90" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189916"/>
        <to usec="0" sec="1465189928"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.168.107.69" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189210"/>
        <to usec="0" sec="1465189222"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="60.87.103.122" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189848"/>
        <to usec="0" sec="1465189859"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.240.29.155" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189249"/>
        <to usec="0" sec="1465189261"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="42.219.254.187" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189398"/>
        <to usec="0" sec="1465189408"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="124.191.86.91" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189301"/>
        <to usec="0" sec="1465189312"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.91.4.187" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190072"/>
        <to usec="0" sec="1465190084"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.16.77.65" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189310"/>
        <to usec="0" sec="1465189323"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.223.111.98" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189926"/>
        <to usec="0" sec="1465189936"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="60.168.183.64" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189879"/>
        <to usec="0" sec="1465189888"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.136.123.129" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189427"/>
        <to usec="0" sec="1465189437"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="218.85.245.127" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189747"/>
        <to usec="0" sec="1465189757"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="181.42.54.188" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189873"/>
        <to usec="0" sec="1465189883"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="209.182.200.163" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189223"/>
        <to usec="0" sec="1465189235"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="36.109.38.131" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190035"/>
        <to usec="0" sec="1465190048"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.223.97.94" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189435"/>
        <to usec="0" sec="1465189441"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.162.141.161" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189332"/>
        <to usec="0" sec="1465189343"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.111.96.96" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189612"/>
        <to usec="0" sec="1465189624"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.156.199.92" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189326"/>
        <to usec="0" sec="1465189335"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.110.233.63" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189357"/>
        <to usec="0" sec="1465189368"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="115.166.95.63" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189871"/>
        <to usec="0" sec="1465189899"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.108.137.56" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189941"/>
        <to usec="0" sec="1465189964"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.125.178.49" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189681"/>
        <to usec="0" sec="1465189690"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="178.20.8.53" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189668"/>
        <to usec="0" sec="1465189680"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.181.67.50" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189552"/>
        <to usec="0" sec="1465189563"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="110.13.60.205" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189389"/>
        <to usec="0" sec="1465189401"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="116.239.64.52" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189594"/>
        <to usec="0" sec="1465189604"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="180.58.222.59" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189467"/>
        <to usec="0" sec="1465189861"/>
    </anomaly>
    <anomaly type="notice" value="0.990475,1.819480,999,1 0 1 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="193.31.250.204" dst_ip="203.114.157.101" dst_port="161"/>
        </slice>
        <from usec="0" sec="1465189202"/>
        <to usec="0" sec="1465190065"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.108.24.48" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189720"/>
        <to usec="0" sec="1465189729"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="203.114.150.201"/>
        </slice>
        <from usec="0" sec="1465189244"/>
        <to usec="0" sec="1465189919"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="186.32.192.57" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189380"/>
        <to usec="0" sec="1465189390"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.125.9.54" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189873"/>
        <to usec="0" sec="1465189883"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="90.154.214.197" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189609"/>
        <to usec="0" sec="1465189622"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.17.114.192" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189541"/>
        <to usec="0" sec="1465189567"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.35.171.52" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189779"/>
        <to usec="0" sec="1465189790"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.195.23.53" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189552"/>
        <to usec="0" sec="1465189566"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.218.253.200" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189800"/>
        <to usec="0" sec="1465189814"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.234.47.57" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189349"/>
        <to usec="0" sec="1465189362"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.157.18.201" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189744"/>
        <to usec="0" sec="1465189761"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="79.203.0.199" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189982"/>
        <to usec="0" sec="1465189993"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="90.133.65.54" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189245"/>
        <to usec="0" sec="1465189255"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.11.108.197" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189547"/>
        <to usec="0" sec="1465189558"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.165.244.196" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189563"/>
        <to usec="0" sec="1465189573"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="222.61.156.192" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189994"/>
        <to usec="0" sec="1465190005"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="1.20.64.207" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189295"/>
        <to usec="0" sec="1465189308"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.31.38.194" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189219"/>
        <to usec="0" sec="1465189231"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.87.4.192" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189230"/>
        <to usec="0" sec="1465189244"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="219.137.190.60" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189601"/>
        <to usec="0" sec="1465189611"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="218.130.242.204" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189863"/>
        <to usec="0" sec="1465189874"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="108.94.164.193" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189698"/>
        <to usec="0" sec="1465189707"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="42.222.102.207" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189698"/>
        <to usec="0" sec="1465189720"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="187.116.163.60" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189551"/>
        <to usec="0" sec="1465189580"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.25.95.51" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189951"/>
        <to usec="0" sec="1465189961"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.193.64.195" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189633"/>
        <to usec="0" sec="1465189642"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="176.88.6.49" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189719"/>
        <to usec="0" sec="1465189727"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="41.145.109.62" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189638"/>
        <to usec="0" sec="1465189649"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="171.130.103.48" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189253"/>
        <to usec="0" sec="1465189264"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="144.11.71.51" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189845"/>
        <to usec="0" sec="1465189856"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="176.96.85.215" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465190036"/>
        <to usec="0" sec="1465190100"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="197.189.24.41" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189493"/>
        <to usec="0" sec="1465189504"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="1.162.190.40" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189209"/>
        <to usec="0" sec="1465189219"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="36.97.68.208" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189244"/>
        <to usec="0" sec="1465189254"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.250.137.213" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189706"/>
        <to usec="0" sec="1465189716"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.254.230.45" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189845"/>
        <to usec="0" sec="1465189854"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="49.70.36.211" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190039"/>
        <to usec="0" sec="1465190048"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.180.179.42" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189254"/>
        <to usec="0" sec="1465189265"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="187.149.216.214" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189957"/>
        <to usec="0" sec="1465189967"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.203.44.210" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189908"/>
        <to usec="0" sec="1465189920"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="92.182.40.44" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189493"/>
        <to usec="0" sec="1465189508"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.97.221.208" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189799"/>
        <to usec="0" sec="1465189810"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="99.0.96.213" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189319"/>
        <to usec="0" sec="1465189331"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="119.58.106.42" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189654"/>
        <to usec="0" sec="1465189667"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.192.60.210" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189729"/>
        <to usec="0" sec="1465189740"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.181.229.45" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189580"/>
        <to usec="0" sec="1465189592"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.226.67.46" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189326"/>
        <to usec="0" sec="1465189358"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="181.142.127.209" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190030"/>
        <to usec="0" sec="1465190043"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="222.61.4.213" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189694"/>
        <to usec="0" sec="1465189705"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="91.133.20.208" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190063"/>
        <to usec="0" sec="1465190072"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="181.192.197.43" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465190093"/>
        <to usec="0" sec="1465190097"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.192.0.216" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189392"/>
        <to usec="0" sec="1465189411"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.128.63.39" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189263"/>
        <to usec="0" sec="1465189274"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.195.238.217" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190085"/>
        <to usec="0" sec="1465190095"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.87.3.39" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189357"/>
        <to usec="0" sec="1465189363"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="222.175.30.217" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189870"/>
        <to usec="0" sec="1465189878"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.5.245.38" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189776"/>
        <to usec="0" sec="1465189786"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="222.149.231.39" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189709"/>
        <to usec="0" sec="1465189720"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="58.44.132.217" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189689"/>
        <to usec="0" sec="1465189719"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="191.2.75.38" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190040"/>
        <to usec="0" sec="1465190050"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="97.59.148.37" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189735"/>
        <to usec="0" sec="1465189743"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.212.242.37" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190044"/>
        <to usec="0" sec="1465190056"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="39.44.247.37" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189665"/>
        <to usec="0" sec="1465189677"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.4.127.36" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190017"/>
        <to usec="0" sec="1465190027"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.96.191.36" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189483"/>
        <to usec="0" sec="1465189495"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.68.255.36" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189414"/>
        <to usec="0" sec="1465189440"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.25.40.36" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189273"/>
        <to usec="0" sec="1465189284"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="152.89.229.220" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189461"/>
        <to usec="0" sec="1465189471"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="176.88.7.32" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465190066"/>
        <to usec="0" sec="1465190071"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.78.109.35" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189977"/>
        <to usec="0" sec="1465189990"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.255.205.221" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190083"/>
        <to usec="0" sec="1465190093"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.201.143.35" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189293"/>
        <to usec="0" sec="1465189304"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.137.147.32" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189700"/>
        <to usec="0" sec="1465189710"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.94.110.241" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189419"/>
        <to usec="0" sec="1465189433"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.128.42.225" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189744"/>
        <to usec="0" sec="1465189756"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.222.174.249" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189881"/>
        <to usec="0" sec="1465189890"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.137.231.232" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189219"/>
        <to usec="0" sec="1465189232"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="124.159.197.242" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189675"/>
        <to usec="0" sec="1465189686"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="37.245.209.29" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189535"/>
        <to usec="0" sec="1465189543"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="82.156.158.244" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189841"/>
        <to usec="0" sec="1465189851"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="120.191.60.244" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189221"/>
        <to usec="0" sec="1465189234"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="151.58.11.4" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465190016"/>
        <to usec="0" sec="1465190048"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="41.155.81.5" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189496"/>
        <to usec="0" sec="1465189499"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.137.184.236" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189830"/>
        <to usec="0" sec="1465189839"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.232.224.255" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189947"/>
        <to usec="0" sec="1465189961"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.133.48.237" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189249"/>
        <to usec="0" sec="1465189260"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="118.64.86.250" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189447"/>
        <to usec="0" sec="1465189457"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="128.89.105.10" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189750"/>
        <to usec="0" sec="1465189763"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="92.152.50.249" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189377"/>
        <to usec="0" sec="1465189388"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="81.201.203.24" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189872"/>
        <to usec="0" sec="1465189886"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.170.197.248" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189373"/>
        <to usec="0" sec="1465189383"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="138.152.29.231" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189748"/>
        <to usec="0" sec="1465189759"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.209.124.230" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189393"/>
        <to usec="0" sec="1465189405"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="190.106.212.245" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189948"/>
        <to usec="0" sec="1465189958"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.132.46.20" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189859"/>
        <to usec="0" sec="1465189870"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="82.8.86.19" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189862"/>
        <to usec="0" sec="1465189873"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="79.203.247.18" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189352"/>
        <to usec="0" sec="1465189362"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="180.249.209.30" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190074"/>
        <to usec="0" sec="1465190085"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.27.204.226" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189483"/>
        <to usec="0" sec="1465189492"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="202.100.123.14" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189572"/>
        <to usec="0" sec="1465189586"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="178.197.118.241" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189425"/>
        <to usec="0" sec="1465189434"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="1.219.244.224" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189767"/>
        <to usec="0" sec="1465189776"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="109.226.104.227" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189945"/>
        <to usec="0" sec="1465189955"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.10.248.240" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189347"/>
        <to usec="0" sec="1465189357"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.241.73.9" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189495"/>
        <to usec="0" sec="1465189505"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="151.51.84.246" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189211"/>
        <to usec="0" sec="1465189230"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="62.220.46.241" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189254"/>
        <to usec="0" sec="1465189267"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="221.36.31.10" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189985"/>
        <to usec="0" sec="1465189995"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.172.207.18" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189805"/>
        <to usec="0" sec="1465190091"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="186.225.46.245" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189976"/>
        <to usec="0" sec="1465189986"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.88.43.235" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189704"/>
        <to usec="0" sec="1465189714"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.136.223.12" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189343"/>
        <to usec="0" sec="1465189354"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="36.43.4.245" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189320"/>
        <to usec="0" sec="1465189331"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.74.190.246" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189984"/>
        <to usec="0" sec="1465189995"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.238.207.234" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190051"/>
        <to usec="0" sec="1465190063"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="124.18.56.14" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189685"/>
        <to usec="0" sec="1465189696"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.68.72.233" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189436"/>
        <to usec="0" sec="1465189450"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="197.198.162.237" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189516"/>
        <to usec="0" sec="1465189527"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.5.251.19" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189872"/>
        <to usec="0" sec="1465189885"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.97.250.24" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189294"/>
        <to usec="0" sec="1465189304"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="179.185.201.6" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189261"/>
        <to usec="0" sec="1465189268"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="1.189.67.5" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189930"/>
        <to usec="0" sec="1465189941"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="186.140.7.26" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189722"/>
        <to usec="0" sec="1465189727"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.125.119.29" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189771"/>
        <to usec="0" sec="1465189782"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.94.207.253" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189555"/>
        <to usec="0" sec="1465189568"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="159.173.214.253" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189892"/>
        <to usec="0" sec="1465189905"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="110.248.75.2" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189359"/>
        <to usec="0" sec="1465189369"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="61.11.170.2" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189573"/>
        <to usec="0" sec="1465189585"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.18.184.252" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189816"/>
        <to usec="0" sec="1465189847"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="103.185.14.3" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189244"/>
        <to usec="0" sec="1465189256"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="189.30.53.30" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189279"/>
        <to usec="0" sec="1465189289"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="187.157.207.29" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190081"/>
        <to usec="0" sec="1465190092"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="223.170.37.226" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189722"/>
        <to usec="0" sec="1465189732"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="101.178.21.255" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189575"/>
        <to usec="0" sec="1465189585"/>
    </anomaly>
    <anomaly type="notice" value="0.872431,1.884600,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="14.130.209.211" dst_ip="14.130.209.211" src_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1465189601"/>
        <to usec="0" sec="1465189603"/>
    </anomaly>
    <anomaly type="notice" value="0.539836,1.795650,011,1 0 1 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="193.193.224.48" src_port="22"/>
        </slice>
        <from usec="0" sec="1465189970"/>
        <to usec="0" sec="1465189972"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,011,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="106.116.6.99" src_port="23"/>
        </slice>
        <from usec="0" sec="1465189664"/>
        <to usec="0" sec="1465189666"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="46.229.237.169"/>
        </slice>
        <from usec="0" sec="1465189710"/>
        <to usec="0" sec="1465189713"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.222.39.246" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189646"/>
        <to usec="0" sec="1465189657"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.16.160.53" dst_port="22"/>
        </slice>
        <from usec="0" sec="1465189301"/>
        <to usec="0" sec="1465189961"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.194.233.190" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189747"/>
        <to usec="0" sec="1465190100"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="179.202.151.16" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189761"/>
        <to usec="0" sec="1465189769"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="183.23.25.191" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189612"/>
        <to usec="0" sec="1465189635"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="49.109.115.199" dst_ip="202.249.187.221" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189546"/>
        <to usec="0" sec="1465189607"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,503,1 1 1 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="163.221.209.195" dst_ip="52.60.246.97"/>
            <filter dst_ip="52.60.246.97" dst_port="80"/>
            <filter src_ip="163.221.209.195" dst_ip="198.69.128.167" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189417"/>
        <to usec="0" sec="1465190064"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.221.95.196" dst_port="25"/>
        </slice>
        <from usec="0" sec="1465189211"/>
        <to usec="0" sec="1465190042"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.194.200.71" dst_ip="50.169.209.101" dst_port="81"/>
        </slice>
        <from usec="0" sec="1465189265"/>
        <to usec="0" sec="1465190057"/>
    </anomaly>
    <anomaly type="notice" value="0.539836,1.795650,503,1 0 1 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.221.115.218" dst_port="80"/>
            <filter src_ip="163.221.115.224" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189269"/>
        <to usec="0" sec="1465189714"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="202.244.181.219" dst_ip="175.184.93.190" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189272"/>
        <to usec="0" sec="1465189322"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,504,1 1 1 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="23.51.66.245" dst_ip="202.244.178.55"/>
            <filter src_ip="23.51.66.245" src_port="80"/>
            <filter src_ip="23.51.66.245" src_port="443"/>
            <filter dst_ip="202.244.178.55" src_port="80"/>
        </slice>
        <from usec="0" sec="1465189870"/>
        <to usec="0" sec="1465189873"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,504,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="157.77.168.177" dst_ip="31.105.64.63" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189484"/>
        <to usec="0" sec="1465189774"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.244.39.155" dst_ip="54.59.190.49" dst_port="25"/>
        </slice>
        <from usec="0" sec="1465189467"/>
        <to usec="0" sec="1465189967"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,504,1 1 1 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="31.105.64.63" dst_port="443"/>
            <filter src_ip="157.77.161.93" dst_ip="31.105.64.63" dst_port="80"/>
            <filter src_ip="157.77.161.93" dst_ip="17.130.26.67" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189204"/>
        <to usec="0" sec="1465189693"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="61.54.74.110" dst_ip="202.244.32.115" src_port="80" dst_port="53404"/>
        </slice>
        <from usec="0" sec="1465189513"/>
        <to usec="0" sec="1465189516"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,503,1 1 1 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.221.131.72" dst_ip="54.54.98.13" dst_port="80"/>
            <filter src_ip="163.221.131.72" dst_ip="54.125.68.203" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189559"/>
        <to usec="0" sec="1465189711"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.251.13.204" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189679"/>
        <to usec="0" sec="1465189688"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="212.4.159.63" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189658"/>
        <to usec="0" sec="1465189669"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,503,1 1 1 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.221.131.43" dst_port="80"/>
            <filter src_ip="163.221.131.43" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189712"/>
        <to usec="0" sec="1465189937"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="203.114.154.47" dst_ip="199.116.187.85" dst_port="53"/>
            <filter src_ip="203.114.154.132" dst_ip="199.116.187.85" dst_port="53"/>
            <filter src_ip="203.114.154.141" dst_ip="199.116.187.85" dst_port="53"/>
            <filter src_ip="203.114.154.136" dst_ip="199.116.187.85" dst_port="53"/>
            <filter dst_ip="199.116.187.85" src_port="53" dst_port="53"/>
        </slice>
        <from usec="0" sec="1465189834"/>
        <to usec="0" sec="1465189839"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,504,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.77.183.179" dst_ip="17.134.91.234" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189700"/>
        <to usec="0" sec="1465189944"/>
    </anomaly>
    <anomaly type="notice" value="0.872431,1.884600,503,0 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.244.181.221" dst_ip="107.43.48.248" dst_port="80"/>
            <filter src_ip="202.244.181.221" dst_ip="54.24.215.244" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189230"/>
        <to usec="0" sec="1465189233"/>
    </anomaly>
    <anomaly type="notice" value="0.935674,1.891640,503,0 1 1 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="125.64.65.213" dst_ip="163.221.217.189" dst_port="80"/>
            <filter src_ip="219.27.37.24" dst_ip="163.221.217.189" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189236"/>
        <to usec="0" sec="1465189238"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="42.182.162.208" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189711"/>
        <to usec="0" sec="1465189722"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="111.248.49.50" src_port="12200" dst_port="21320"/>
            <filter src_ip="111.248.49.50" src_port="12200" dst_port="8118"/>
            <filter src_ip="111.248.49.50" src_port="12200" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189236"/>
        <to usec="0" sec="1465189381"/>
    </anomaly>
    <anomaly type="notice" value="0.872431,1.884600,010,0 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.188.154.214" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189331"/>
        <to usec="0" sec="1465190098"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.19.46.248" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189953"/>
        <to usec="0" sec="1465189963"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="186.27.100.49" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189869"/>
        <to usec="0" sec="1465189880"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="220.121.14.124" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189790"/>
        <to usec="0" sec="1465189802"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="89.255.5.53" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189856"/>
        <to usec="0" sec="1465189867"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="93.123.134.122" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189645"/>
        <to usec="0" sec="1465189656"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="87.110.45.24" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189894"/>
        <to usec="0" sec="1465189908"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.124.168.162" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189988"/>
        <to usec="0" sec="1465189998"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="79.223.229.22" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189753"/>
        <to usec="0" sec="1465189765"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="125.50.99.229" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189698"/>
        <to usec="0" sec="1465189708"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="103.128.200.22" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189426"/>
        <to usec="0" sec="1465189438"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="117.125.248.104" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189955"/>
        <to usec="0" sec="1465189966"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="27.88.22.203" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189529"/>
        <to usec="0" sec="1465189540"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.193.136.90" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189816"/>
        <to usec="0" sec="1465189827"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.131.196.30" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189989"/>
        <to usec="0" sec="1465190000"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.57.69.29" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189541"/>
        <to usec="0" sec="1465189551"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.26.204.72" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189947"/>
        <to usec="0" sec="1465189959"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.127.193.205" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189785"/>
        <to usec="0" sec="1465189799"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="39.53.199.178" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189922"/>
        <to usec="0" sec="1465189932"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="59.16.47.84" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189225"/>
        <to usec="0" sec="1465189238"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="27.121.196.110" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189707"/>
        <to usec="0" sec="1465189737"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="180.249.30.120" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189883"/>
        <to usec="0" sec="1465189894"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="175.161.31.253" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189600"/>
        <to usec="0" sec="1465189613"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="37.166.77.138" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189373"/>
        <to usec="0" sec="1465189385"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="178.180.61.86" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189461"/>
        <to usec="0" sec="1465189472"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="157.122.148.150" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189738"/>
        <to usec="0" sec="1465189749"/>
    </anomaly>
    <anomaly type="notice" value="0.872431,1.884600,999,0 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.132.213.169" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189415"/>
        <to usec="0" sec="1465189426"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.139.98.82" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189911"/>
        <to usec="0" sec="1465189922"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="179.227.128.167" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189651"/>
        <to usec="0" sec="1465189657"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.160.6.71" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189727"/>
        <to usec="0" sec="1465190100"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.80.74.203" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189476"/>
        <to usec="0" sec="1465189483"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.124.181.58" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189244"/>
        <to usec="0" sec="1465189256"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="27.210.201.60" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189469"/>
        <to usec="0" sec="1465189480"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="118.176.228.212" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189719"/>
        <to usec="0" sec="1465189732"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="190.36.35.34" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189458"/>
        <to usec="0" sec="1465189468"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="187.77.199.19" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189215"/>
        <to usec="0" sec="1465189241"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.238.227.26" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189436"/>
        <to usec="0" sec="1465189445"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="217.235.212.234" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189924"/>
        <to usec="0" sec="1465189936"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.50.86.242" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190025"/>
        <to usec="0" sec="1465190035"/>
    </anomaly>
    <anomaly type="notice" value="0.872431,1.884600,011,0 1 0 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="193.193.224.48" src_port="22"/>
        </slice>
        <from usec="0" sec="1465189970"/>
        <to usec="0" sec="1465189972"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,010,0 0 0 1 0 0 0 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="203.114.154.242" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189200"/>
        <to usec="0" sec="1465189308"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="46.71.174.226"/>
        </slice>
        <from usec="0" sec="1465189222"/>
        <to usec="0" sec="1465189307"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.108.23.234"/>
        </slice>
        <from usec="0" sec="1465189250"/>
        <to usec="0" sec="1465189307"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.248.111.116"/>
        </slice>
        <from usec="0" sec="1465189260"/>
        <to usec="0" sec="1465189300"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,011,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPRSTrp">
        <slice>
            <filter dst_ip="51.5.218.33" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189200"/>
        <to usec="0" sec="1465189398"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="17.147.88.110"/>
        </slice>
        <from usec="0" sec="1465189200"/>
        <to usec="0" sec="1465189391"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.221.95.154"/>
        </slice>
        <from usec="0" sec="1465189200"/>
        <to usec="0" sec="1465189398"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="62.71.205.58"/>
        </slice>
        <from usec="0" sec="1465189200"/>
        <to usec="0" sec="1465189668"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="133.215.64.111"/>
        </slice>
        <from usec="0" sec="1465189200"/>
        <to usec="0" sec="1465189385"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.221.44.231"/>
        </slice>
        <from usec="0" sec="1465189202"/>
        <to usec="0" sec="1465189398"/>
    </anomaly>
    <anomaly type="notice" value="0.872431,1.884600,502,0 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="193.31.250.205" dst_ip="203.114.157.101" src_port="57713" dst_port="22"/>
            <filter src_ip="193.31.250.205" dst_ip="203.114.157.100" src_port="35815" dst_port="22"/>
            <filter src_ip="193.31.250.205" dst_ip="203.114.157.99" src_port="42332" dst_port="22"/>
        </slice>
        <from usec="0" sec="1465189320"/>
        <to usec="0" sec="1465189571"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.77.100.8"/>
        </slice>
        <from usec="0" sec="1465189208"/>
        <to usec="0" sec="1465189396"/>
    </anomaly>
    <anomaly type="notice" value="1.005010,1.809710,504,1 1 1 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.194.130.9" dst_port="443"/>
            <filter src_ip="133.194.130.9" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189204"/>
        <to usec="0" sec="1465190097"/>
    </anomaly>
    <anomaly type="notice" value="0.930962,1.812160,503,1 0 0 1 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="133.194.169.178" dst_ip="221.55.87.250" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189279"/>
        <to usec="0" sec="1465189962"/>
    </anomaly>
    <anomaly type="notice" value="0.930962,1.812160,999,1 0 0 1 0 0 0 0 0 0 0 0,ipv46tun">
        <slice>
            <filter dst_ip="203.114.151.199"/>
        </slice>
        <from usec="0" sec="1465189200"/>
        <to usec="0" sec="1465189553"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.194.215.219"/>
        </slice>
        <from usec="0" sec="1465189200"/>
        <to usec="0" sec="1465189486"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="125.48.231.253"/>
        </slice>
        <from usec="0" sec="1465189202"/>
        <to usec="0" sec="1465189488"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.244.37.119"/>
        </slice>
        <from usec="0" sec="1465189209"/>
        <to usec="0" sec="1465189487"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.221.112.73"/>
        </slice>
        <from usec="0" sec="1465189212"/>
        <to usec="0" sec="1465189578"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="76.61.165.45"/>
        </slice>
        <from usec="0" sec="1465189227"/>
        <to usec="0" sec="1465189488"/>
    </anomaly>
    <anomaly type="notice" value="0.930962,1.812160,504,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.246.31.195" dst_ip="163.221.95.146" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189291"/>
        <to usec="0" sec="1465189319"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="117.72.138.118"/>
        </slice>
        <from usec="0" sec="1465189311"/>
        <to usec="0" sec="1465189488"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="50.240.165.67"/>
        </slice>
        <from usec="0" sec="1465189325"/>
        <to usec="0" sec="1465189363"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="52.84.255.34"/>
        </slice>
        <from usec="0" sec="1465189379"/>
        <to usec="0" sec="1465189462"/>
    </anomaly>
    <anomaly type="notice" value="1.005010,1.809710,999,1 1 1 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="41.6.251.182" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189416"/>
        <to usec="0" sec="1465189428"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,502,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.219.211.67"/>
        </slice>
        <from usec="0" sec="1465189200"/>
        <to usec="0" sec="1465189578"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="50.176.193.24"/>
        </slice>
        <from usec="0" sec="1465189200"/>
        <to usec="0" sec="1465189571"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.77.25.102" dst_port="443"/>
            <filter src_ip="157.77.25.102" dst_port="5223"/>
        </slice>
        <from usec="0" sec="1465189200"/>
        <to usec="0" sec="1465189578"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="188.164.125.37"/>
        </slice>
        <from usec="0" sec="1465189200"/>
        <to usec="0" sec="1465189578"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="133.215.87.167"/>
        </slice>
        <from usec="0" sec="1465189200"/>
        <to usec="0" sec="1465189566"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="203.123.213.45"/>
        </slice>
        <from usec="0" sec="1465189200"/>
        <to usec="0" sec="1465189567"/>
    </anomaly>
    <anomaly type="notice" value="0.930962,1.812160,999,1 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.221.95.190" dst_port="53"/>
        </slice>
        <from usec="0" sec="1465189200"/>
        <to usec="0" sec="1465189578"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="59.120.110.101"/>
        </slice>
        <from usec="0" sec="1465189201"/>
        <to usec="0" sec="1465189577"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="50.177.200.106"/>
        </slice>
        <from usec="0" sec="1465189205"/>
        <to usec="0" sec="1465189844"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.219.233.249"/>
        </slice>
        <from usec="0" sec="1465189206"/>
        <to usec="0" sec="1465189499"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="17.254.170.237"/>
        </slice>
        <from usec="0" sec="1465189215"/>
        <to usec="0" sec="1465189526"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="54.33.125.228"/>
        </slice>
        <from usec="0" sec="1465189239"/>
        <to usec="0" sec="1465189540"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="17.23.27.95"/>
        </slice>
        <from usec="0" sec="1465189306"/>
        <to usec="0" sec="1465189492"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="40.197.138.109"/>
        </slice>
        <from usec="0" sec="1465189325"/>
        <to usec="0" sec="1465189570"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter src_ip="112.148.212.69"/>
        </slice>
        <from usec="0" sec="1465189533"/>
        <to usec="0" sec="1465189578"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="179.202.36.189"/>
        </slice>
        <from usec="0" sec="1465189200"/>
        <to usec="0" sec="1465189666"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.22.216.211" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189203"/>
        <to usec="0" sec="1465189934"/>
    </anomaly>
    <anomaly type="notice" value="0.930962,1.812160,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.221.112.8" dst_ip="91.23.95.222" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189206"/>
        <to usec="0" sec="1465189668"/>
    </anomaly>
    <anomaly type="notice" value="0.946408,1.802350,504,1 1 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="163.221.130.181" dst_port="80"/>
            <filter dst_ip="66.199.124.75" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189204"/>
        <to usec="0" sec="1465190088"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.84.158.2" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189271"/>
        <to usec="0" sec="1465189282"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="78.167.78.60"/>
        </slice>
        <from usec="0" sec="1465189494"/>
        <to usec="0" sec="1465189540"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="108.5.220.28"/>
        </slice>
        <from usec="0" sec="1465189579"/>
        <to usec="0" sec="1465189610"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="202.249.190.15"/>
        </slice>
        <from usec="0" sec="1465189200"/>
        <to usec="0" sec="1465189758"/>
    </anomaly>
    <anomaly type="notice" value="0.930962,1.812160,504,1 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.194.211.150" dst_ip="52.37.159.176" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189226"/>
        <to usec="0" sec="1465190062"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,504,0 0 0 1 0 0 0 0 0 0 0 0,ntscACKt">
        <slice>
            <filter src_ip="131.241.166.70"/>
        </slice>
        <from usec="0" sec="1465189430"/>
        <to usec="0" sec="1465189741"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="210.127.203.241"/>
        </slice>
        <from usec="0" sec="1465189502"/>
        <to usec="0" sec="1465189647"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="123.203.136.143"/>
        </slice>
        <from usec="0" sec="1465189586"/>
        <to usec="0" sec="1465189710"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="66.240.236.19"/>
        </slice>
        <from usec="0" sec="1465189200"/>
        <to usec="0" sec="1465189848"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="121.151.137.225"/>
        </slice>
        <from usec="0" sec="1465189202"/>
        <to usec="0" sec="1465189848"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.221.212.115" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189202"/>
        <to usec="0" sec="1465190099"/>
    </anomaly>
    <anomaly type="notice" value="0.566057,1.785750,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.28.134.35" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189473"/>
        <to usec="0" sec="1465189484"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="157.77.32.114" dst_port="443"/>
            <filter src_ip="157.77.39.17" dst_ip="17.153.211.172" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189247"/>
        <to usec="0" sec="1465189874"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="117.1.48.238"/>
        </slice>
        <from usec="0" sec="1465189426"/>
        <to usec="0" sec="1465189848"/>
    </anomaly>
    <anomaly type="notice" value="0.930962,1.812160,504,1 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.221.112.67" src_port="22139"/>
            <filter src_ip="163.221.112.67" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189324"/>
        <to usec="0" sec="1465190064"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="93.121.116.122"/>
        </slice>
        <from usec="0" sec="1465189669"/>
        <to usec="0" sec="1465189676"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="185.129.11.190"/>
        </slice>
        <from usec="0" sec="1465189200"/>
        <to usec="0" sec="1465189938"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="198.142.7.192"/>
        </slice>
        <from usec="0" sec="1465189200"/>
        <to usec="0" sec="1465189938"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="111.249.78.237"/>
        </slice>
        <from usec="0" sec="1465189200"/>
        <to usec="0" sec="1465189938"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="112.173.232.233"/>
        </slice>
        <from usec="0" sec="1465189201"/>
        <to usec="0" sec="1465189938"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="17.163.49.87" dst_ip="203.114.144.149" src_port="53"/>
        </slice>
        <from usec="0" sec="1465189202"/>
        <to usec="0" sec="1465189916"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.194.149.219"/>
        </slice>
        <from usec="0" sec="1465189203"/>
        <to usec="0" sec="1465189936"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.221.190.47"/>
        </slice>
        <from usec="0" sec="1465189205"/>
        <to usec="0" sec="1465189936"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="59.125.66.59"/>
        </slice>
        <from usec="0" sec="1465189207"/>
        <to usec="0" sec="1465189936"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="59.125.16.192"/>
        </slice>
        <from usec="0" sec="1465189218"/>
        <to usec="0" sec="1465189937"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.83.11.37"/>
        </slice>
        <from usec="0" sec="1465189824"/>
        <to usec="0" sec="1465189851"/>
    </anomaly>
    <anomaly type="notice" value="0.930962,1.812160,504,1 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.194.167.218" dst_ip="17.170.128.153" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189832"/>
        <to usec="0" sec="1465189883"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="217.121.4.227"/>
        </slice>
        <from usec="0" sec="1465189200"/>
        <to usec="0" sec="1465190028"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="114.99.56.118"/>
        </slice>
        <from usec="0" sec="1465189207"/>
        <to usec="0" sec="1465190020"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="223.55.89.165"/>
        </slice>
        <from usec="0" sec="1465189792"/>
        <to usec="0" sec="1465189961"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,1.916590,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="175.184.88.110"/>
        </slice>
        <from usec="0" sec="1465189905"/>
        <to usec="0" sec="1465189907"/>
    </anomaly>
    <anomaly type="notice" value="1.118590,1.781670,504,1 1 1 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="108.159.83.193" dst_ip="203.114.152.127" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.052570,1.784150,504,1 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="133.219.248.108" dst_ip="17.154.112.225" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.066250,1.774190,999,1 1 0 0 0 0 0 0 0 1 0 0,ntscUDP">
        <slice>
            <filter src_ip="133.194.213.14" src_port="25992"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.066250,1.774190,503,1 1 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="163.221.112.103" dst_port="80"/>
            <filter dst_ip="173.7.148.164" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.052570,1.784150,020,1 0 0 0 0 0 0 0 0 1 0 0,icmp_error">
        <slice>
            <filter dst_ip="203.114.150.201"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.052570,1.784150,999,1 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="203.114.147.232" dst_ip="124.107.160.150" src_port="123"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.066250,1.774190,999,1 1 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="203.114.140.47" dst_ip="124.107.160.150"/>
            <filter dst_ip="124.107.160.150" src_port="123"/>
            <filter src_ip="203.114.140.47" dst_ip="36.248.5.80" src_port="123"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.118590,1.781670,010,1 1 1 0 0 0 0 0 0 1 0 0,ntscSYNt">
        <slice>
            <filter src_ip="175.170.14.65" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.052570,1.784150,504,1 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="163.221.114.40" dst_ip="17.23.6.43" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.118590,1.781670,999,1 1 1 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="98.46.82.76" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.052570,1.784150,504,1 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="38.104.181.184" dst_ip="202.244.181.120" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.052570,1.784150,503,1 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="202.249.148.14" src_port="80"/>
            <filter dst_ip="202.249.148.14" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.052570,1.784150,504,1 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="163.221.131.240" dst_ip="4.162.56.137" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.946408,1.802350,504,1 1 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.77.25.115" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189203"/>
        <to usec="0" sec="1465190099"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="192.19.62.56" dst_ip="202.244.181.13" src_port="80" dst_port="49575"/>
        </slice>
        <from usec="0" sec="1465189228"/>
        <to usec="0" sec="1465189233"/>
    </anomaly>
    <anomaly type="notice" value="0.420801,1.788230,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.114.145.186" dst_ip="199.84.41.105" src_port="49930" dst_port="443"/>
            <filter src_ip="203.114.145.186" dst_ip="199.84.41.105" src_port="49928" dst_port="443"/>
            <filter src_ip="203.114.145.186" dst_ip="199.84.41.105" src_port="49927" dst_port="443"/>
            <filter src_ip="203.114.145.186" dst_ip="199.84.41.105" src_port="49925" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189791"/>
        <to usec="0" sec="1465190043"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.253.162.95" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189786"/>
        <to usec="0" sec="1465189798"/>
    </anomaly>
    <anomaly type="notice" value="0.453950,1.778290,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.207.3.51" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465190035"/>
        <to usec="0" sec="1465190041"/>
    </anomaly>
</admd:annotation>
