<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="221.229.127.254"/>
        </slice>
        <from usec="0" sec="1467868139"/>
        <to usec="0" sec="1467868147"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="91.197.43.2" dst_ip="163.50.104.21" src_port="80" dst_port="62476" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867643"/>
        <to usec="0" sec="1467868401"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.35.119.254" dst_ip="17.108.239.226" src_port="58199" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867648"/>
        <to usec="0" sec="1467867653"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="130.225.120.0"/>
        </slice>
        <from usec="0" sec="1467867729"/>
        <to usec="0" sec="1467867731"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="155.153.215.1" dst_ip="163.50.152.137" src_port="80" dst_port="49271" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868494"/>
        <to usec="0" sec="1467868495"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="31.18.133.0" dst_ip="202.243.64.108" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868427"/>
        <to usec="0" sec="1467868492"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="155.153.215.0" dst_ip="163.50.152.137" src_port="80" dst_port="49272" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868494"/>
        <to usec="0" sec="1467868495"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="113.106.50.0" dst_ip="163.50.155.208" src_port="80" dst_port="30811" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868284"/>
        <to usec="0" sec="1467868285"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="61.242.107.8" dst_ip="163.50.155.202" src_port="80" dst_port="49545" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868172"/>
        <to usec="0" sec="1467868174"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.50.155.10"/>
        </slice>
        <from usec="0" sec="1467867805"/>
        <to usec="0" sec="1467867808"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.35.163.10"/>
        </slice>
        <from usec="0" sec="1467867891"/>
        <to usec="0" sec="1467867996"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="103.171.35.11" dst_ip="202.243.163.189" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868184"/>
        <to usec="0" sec="1467868373"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.106.59.11"/>
        </slice>
        <from usec="0" sec="1467868475"/>
        <to usec="0" sec="1467868478"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.50.4.14" dst_ip="207.173.118.117" src_port="80" dst_port="32826" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867947"/>
        <to usec="0" sec="1467867955"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="31.18.138.13" dst_ip="203.178.115.193" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868122"/>
        <to usec="0" sec="1467868443"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="70.95.43.13" dst_ip="202.243.170.116" src_port="6881" dst_port="39791" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867956"/>
        <to usec="0" sec="1467868100"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="60.196.36.14"/>
        </slice>
        <from usec="0" sec="1467867773"/>
        <to usec="0" sec="1467867782"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="157.35.123.15" dst_ip="17.66.155.175" src_port="64362" dst_port="993" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867959"/>
        <to usec="0" sec="1467868149"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.122.224.15" dst_ip="69.0.175.10" src_port="57308" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867728"/>
        <to usec="0" sec="1467867731"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="31.18.156.15" dst_ip="163.50.15.179" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867786"/>
        <to usec="0" sec="1467868274"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="220.154.171.15" dst_ip="163.50.125.204" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868420"/>
        <to usec="0" sec="1467868423"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.50.4.12"/>
        </slice>
        <from usec="0" sec="1467867624"/>
        <to usec="0" sec="1467868351"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="118.210.0.224"/>
        </slice>
        <from usec="0" sec="1467868257"/>
        <to usec="0" sec="1467868260"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="198.194.200.239" dst_ip="202.243.171.201" src_port="80" dst_port="64536" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868316"/>
        <to usec="0" sec="1467868318"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.106.9.30" dst_ip="17.206.7.235" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868264"/>
        <to usec="0" sec="1467868266"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.95.49.24" dst_ip="202.243.169.127" src_port="80" dst_port="49698" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867735"/>
        <to usec="0" sec="1467868495"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="69.248.132.26" dst_ip="163.50.152.71" src_port="443" dst_port="50179" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868405"/>
        <to usec="0" sec="1467868406"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.122.231.29" dst_ip="149.56.11.150" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868449"/>
        <to usec="0" sec="1467868454"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="101.73.13.228"/>
        </slice>
        <from usec="0" sec="1467868006"/>
        <to usec="0" sec="1467868027"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.26.93.26" dst_ip="203.178.120.204" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868166"/>
        <to usec="0" sec="1467868314"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.106.151.29"/>
        </slice>
        <from usec="0" sec="1467868022"/>
        <to usec="0" sec="1467868025"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.122.173.23"/>
        </slice>
        <from usec="0" sec="1467868302"/>
        <to usec="0" sec="1467868375"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="61.232.103.226" dst_ip="202.243.168.29" src_port="80" dst_port="54863" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868455"/>
        <to usec="0" sec="1467868466"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.50.104.230"/>
        </slice>
        <from usec="0" sec="1467867682"/>
        <to usec="0" sec="1467867737"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="198.194.200.229" dst_ip="202.243.171.141" src_port="80" dst_port="56007" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868484"/>
        <to usec="0" sec="1467868485"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="211.109.106.237" dst_ip="202.243.64.108" src_port="80" dst_port="49346" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867603"/>
        <to usec="0" sec="1467868343"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.38.212.225"/>
        </slice>
        <from usec="0" sec="1467867654"/>
        <to usec="0" sec="1467867657"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.50.152.236"/>
        </slice>
        <from usec="0" sec="1467867807"/>
        <to usec="0" sec="1467867809"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.50.24.239" dst_ip="210.125.2.194" dst_port="995" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867776"/>
        <to usec="0" sec="1467868147"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="23.94.169.29" dst_ip="202.243.163.109" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868427"/>
        <to usec="0" sec="1467868428"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="66.63.147.30"/>
        </slice>
        <from usec="0" sec="1467868160"/>
        <to usec="0" sec="1467868162"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="124.87.53.39" dst_ip="202.243.176.174" src_port="80" dst_port="50960" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867936"/>
        <to usec="0" sec="1467867937"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="45.186.69.62" dst_ip="202.249.77.61" src_port="443" dst_port="49927" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868396"/>
        <to usec="0" sec="1467868398"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.95.49.56" dst_ip="163.50.220.201" src_port="80" dst_port="53628" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868077"/>
        <to usec="0" sec="1467868078"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="206.67.196.218" dst_ip="163.50.88.97" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867942"/>
        <to usec="0" sec="1467868343"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.122.173.37" dst_ip="123.159.167.74" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867750"/>
        <to usec="0" sec="1467868091"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="199.172.33.58" dst_ip="163.50.187.195" src_port="443" dst_port="65382" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867885"/>
        <to usec="0" sec="1467867890"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="118.210.215.58"/>
        </slice>
        <from usec="0" sec="1467868196"/>
        <to usec="0" sec="1467868199"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="23.95.49.58" dst_ip="202.243.168.142" src_port="80" dst_port="62436" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868236"/>
        <to usec="0" sec="1467868427"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.122.237.219" dst_ip="63.139.80.197" src_port="64942" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868065"/>
        <to usec="0" sec="1467868067"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="210.126.73.36" dst_ip="202.243.64.108" src_port="80" dst_port="61864" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868159"/>
        <to usec="0" sec="1467868202"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="173.240.236.221" dst_ip="163.50.153.187" src_port="443" dst_port="60616" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867859"/>
        <to usec="0" sec="1467867861"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.50.240.222" dst_ip="58.121.224.153" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867914"/>
        <to usec="0" sec="1467868445"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.50.105.35" dst_ip="139.216.190.183" src_port="16402" dst_port="16402" proto="udp"/>
        </slice>
        <from usec="0" sec="1467867611"/>
        <to usec="0" sec="1467868361"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="188.180.173.218" dst_ip="202.243.170.116" src_port="40607" dst_port="58381" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868069"/>
        <to usec="0" sec="1467868070"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="38.149.35.41" dst_ip="163.50.52.240" src_port="80" dst_port="52285" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868175"/>
        <to usec="0" sec="1467868177"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.243.95.214"/>
        </slice>
        <from usec="0" sec="1467868455"/>
        <to usec="0" sec="1467868465"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.122.244.41" dst_ip="54.38.81.19" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867729"/>
        <to usec="0" sec="1467867811"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.122.74.215" dst_ip="23.105.137.118" src_port="42362" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868031"/>
        <to usec="0" sec="1467868058"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="104.175.132.42" dst_ip="203.178.116.76" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868310"/>
        <to usec="0" sec="1467868312"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="61.242.107.53" dst_ip="202.243.168.160" src_port="80" dst_port="64282" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867885"/>
        <to usec="0" sec="1467867888"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="61.242.76.212" dst_ip="163.50.7.47" src_port="80" dst_port="54356" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868335"/>
        <to usec="0" sec="1467868337"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="23.86.172.211" dst_ip="203.178.120.204" src_port="443" dst_port="54328" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868194"/>
        <to usec="0" sec="1467868196"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="198.194.200.206" dst_ip="202.243.171.201" src_port="80" dst_port="63603" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867814"/>
        <to usec="0" sec="1467867816"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="68.191.230.208"/>
        </slice>
        <from usec="0" sec="1467868022"/>
        <to usec="0" sec="1467868025"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.122.242.197"/>
        </slice>
        <from usec="0" sec="1467868352"/>
        <to usec="0" sec="1467868358"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="31.18.156.63" dst_ip="163.50.153.182" src_port="80" dst_port="57914" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867927"/>
        <to usec="0" sec="1467868446"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="88.52.245.36" dst_ip="202.243.170.116" src_port="80" dst_port="56118" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867633"/>
        <to usec="0" sec="1467867824"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="218.217.66.214"/>
        </slice>
        <from usec="0" sec="1467867677"/>
        <to usec="0" sec="1467867685"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.50.20.202" dst_ip="144.80.23.18" src_port="52852" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868117"/>
        <to usec="0" sec="1467868141"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.122.245.36" dst_ip="54.186.77.116" src_port="53729" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867756"/>
        <to usec="0" sec="1467867761"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="160.153.126.214" dst_ip="202.243.179.224" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868290"/>
        <to usec="0" sec="1467868292"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="207.164.48.53"/>
        </slice>
        <from usec="0" sec="1467868322"/>
        <to usec="0" sec="1467868324"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="104.175.209.36" dst_ip="202.243.66.208" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868436"/>
        <to usec="0" sec="1467868438"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="77.43.14.193"/>
        </slice>
        <from usec="0" sec="1467867779"/>
        <to usec="0" sec="1467867782"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.243.163.44" dst_ip="27.186.139.123" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868399"/>
        <to usec="0" sec="1467868470"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.35.250.129" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868173"/>
        <to usec="0" sec="1467868398"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="219.242.13.120"/>
        </slice>
        <from usec="0" sec="1467867960"/>
        <to usec="0" sec="1467868082"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="199.172.33.126" dst_ip="203.178.114.221" src_port="443" dst_port="60442" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868059"/>
        <to usec="0" sec="1467868227"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.106.180.186"/>
        </slice>
        <from usec="0" sec="1467868270"/>
        <to usec="0" sec="1467868273"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="165.230.135.69"/>
        </slice>
        <from usec="0" sec="1467868267"/>
        <to usec="0" sec="1467868270"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.50.83.122"/>
        </slice>
        <from usec="0" sec="1467867600"/>
        <to usec="0" sec="1467867678"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="27.186.139.123" dst_ip="202.243.163.44" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868465"/>
        <to usec="0" sec="1467868467"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.243.176.124"/>
        </slice>
        <from usec="0" sec="1467867675"/>
        <to usec="0" sec="1467867679"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.122.173.65"/>
        </slice>
        <from usec="0" sec="1467868117"/>
        <to usec="0" sec="1467868120"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="182.161.14.188" dst_ip="203.178.115.116" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867744"/>
        <to usec="0" sec="1467868174"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.243.171.68" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867763"/>
        <to usec="0" sec="1467867778"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.50.154.135"/>
        </slice>
        <from usec="0" sec="1467868037"/>
        <to usec="0" sec="1467868048"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.243.176.120"/>
        </slice>
        <from usec="0" sec="1467867766"/>
        <to usec="0" sec="1467867769"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="130.25.67.67" dst_ip="163.50.4.14" src_port="56403" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868045"/>
        <to usec="0" sec="1467868047"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.203.75.187"/>
        </slice>
        <from usec="0" sec="1467868249"/>
        <to usec="0" sec="1467868262"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.50.160.127"/>
        </slice>
        <from usec="0" sec="1467867606"/>
        <to usec="0" sec="1467868216"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.50.20.131" dst_ip="173.209.183.169" src_port="52438" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868115"/>
        <to usec="0" sec="1467868474"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.50.15.183"/>
        </slice>
        <from usec="0" sec="1467867879"/>
        <to usec="0" sec="1467868327"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="126.226.249.119" dst_ip="202.243.68.134" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867737"/>
        <to usec="0" sec="1467868025"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="175.172.15.73"/>
        </slice>
        <from usec="0" sec="1467867797"/>
        <to usec="0" sec="1467868032"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.243.173.72"/>
        </slice>
        <from usec="0" sec="1467867713"/>
        <to usec="0" sec="1467867715"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.122.245.78"/>
        </slice>
        <from usec="0" sec="1467867604"/>
        <to usec="0" sec="1467867880"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.243.171.78"/>
        </slice>
        <from usec="0" sec="1467867742"/>
        <to usec="0" sec="1467867759"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="188.99.4.141" dst_ip="163.50.152.119" src_port="80" dst_port="51336" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867610"/>
        <to usec="0" sec="1467868472"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="157.35.68.141" dst_ip="17.108.216.42" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867616"/>
        <to usec="0" sec="1467867617"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.50.155.112" dst_ip="54.37.105.110" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867862"/>
        <to usec="0" sec="1467867887"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.141.131.141"/>
        </slice>
        <from usec="0" sec="1467867842"/>
        <to usec="0" sec="1467867846"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="188.99.4.142" dst_ip="163.50.153.88" src_port="80" dst_port="50335" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867672"/>
        <to usec="0" sec="1467868379"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="210.81.91.112" dst_ip="163.50.237.154" src_port="80" dst_port="63293" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868459"/>
        <to usec="0" sec="1467868460"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.86.196.179" dst_ip="202.243.168.52" src_port="443" dst_port="43050" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867961"/>
        <to usec="0" sec="1467867963"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="70.136.183.179"/>
        </slice>
        <from usec="0" sec="1467868411"/>
        <to usec="0" sec="1467868433"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.122.133.87" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867634"/>
        <to usec="0" sec="1467868448"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="202.243.190.153" dst_ip="52.134.129.171" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867958"/>
        <to usec="0" sec="1467868266"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.50.152.158"/>
        </slice>
        <from usec="0" sec="1467868056"/>
        <to usec="0" sec="1467868496"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="203.154.56.147" dst_ip="202.243.170.130" src_port="80" dst_port="58812" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867792"/>
        <to usec="0" sec="1467867799"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.50.73.106" dst_ip="199.172.33.126" src_port="61127" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867795"/>
        <to usec="0" sec="1467867799"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.122.182.175" dst_port="80"/>
            <filter src_ip="133.122.182.175" dst_ip="194.147.192.36" src_port="8080"/>
            <filter src_ip="133.122.182.175" dst_ip="17.94.118.175" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867792"/>
        <to usec="0" sec="1467868352"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="23.86.207.103" dst_ip="202.243.168.4" src_port="80" dst_port="33684" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868384"/>
        <to usec="0" sec="1467868386"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.50.192.104"/>
        </slice>
        <from usec="0" sec="1467868478"/>
        <to usec="0" sec="1467868481"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.106.28.150"/>
        </slice>
        <from usec="0" sec="1467867915"/>
        <to usec="0" sec="1467867924"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="23.86.193.90" dst_ip="202.243.168.240" src_port="443" dst_port="61508" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867987"/>
        <to usec="0" sec="1467868255"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="103.51.230.164" dst_ip="163.50.26.190" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868307"/>
        <to usec="0" sec="1467868330"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.80.142.172" dst_ip="163.50.99.186" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868455"/>
        <to usec="0" sec="1467868457"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="31.16.40.158" dst_ip="163.50.172.13" src_port="8777" dst_port="55067" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867806"/>
        <to usec="0" sec="1467867808"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="49.37.137.96"/>
        </slice>
        <from usec="0" sec="1467868350"/>
        <to usec="0" sec="1467868353"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="203.154.56.158" dst_ip="202.243.170.130" src_port="80" dst_port="58843" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868241"/>
        <to usec="0" sec="1467868252"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="49.43.0.128" dst_ip="202.243.64.245" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868171"/>
        <to usec="0" sec="1467868187"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.122.124.160" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868335"/>
        <to usec="0" sec="1467868369"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="72.4.36.156" dst_ip="203.178.116.51" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868498"/>
        <to usec="0" sec="1467868499"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="103.51.230.134" dst_ip="163.50.26.190" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868069"/>
        <to usec="0" sec="1467868362"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.50.153.88" dst_ip="188.99.4.142" src_port="50335" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868076"/>
        <to usec="0" sec="1467868116"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.122.244.119" dst_ip="66.107.216.240" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867603"/>
        <to usec="0" sec="1467868364"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.50.152.174"/>
        </slice>
        <from usec="0" sec="1467868075"/>
        <to usec="0" sec="1467868079"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.50.71.141" dst_ip="52.247.248.173" src_port="51438" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868481"/>
        <to usec="0" sec="1467868485"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.50.39.147"/>
        </slice>
        <from usec="0" sec="1467868069"/>
        <to usec="0" sec="1467868075"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="157.35.159.177" dst_ip="139.129.249.16" dst_port="5228" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868315"/>
        <to usec="0" sec="1467868324"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.122.170.108" dst_ip="54.23.222.66" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868219"/>
        <to usec="0" sec="1467868224"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="69.248.132.126" dst_ip="163.50.153.73" src_port="80" dst_port="56886" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868478"/>
        <to usec="0" sec="1467868480"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="61.232.48.85" dst_ip="163.50.240.221" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868157"/>
        <to usec="0" sec="1467868159"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.50.155.82"/>
        </slice>
        <from usec="0" sec="1467867638"/>
        <to usec="0" sec="1467867841"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="166.178.167.171" dst_ip="163.50.153.90" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868218"/>
        <to usec="0" sec="1467868219"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.243.169.97"/>
        </slice>
        <from usec="0" sec="1467868183"/>
        <to usec="0" sec="1467868425"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.50.81.104" dst_ip="207.173.118.98" src_port="80" dst_port="3469" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868432"/>
        <to usec="0" sec="1467868434"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.50.12.172"/>
        </slice>
        <from usec="0" sec="1467868099"/>
        <to usec="0" sec="1467868102"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="163.50.154.182" src_port="59575"/>
        </slice>
        <from usec="0" sec="1467867623"/>
        <to usec="0" sec="1467868501"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="114.222.246.137" dst_ip="133.99.191.16" src_port="4234" dst_port="36617" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868035"/>
        <to usec="0" sec="1467868247"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="139.216.190.183" dst_ip="163.50.105.35" src_port="16402" dst_port="16402" proto="udp"/>
        </slice>
        <from usec="0" sec="1467867886"/>
        <to usec="0" sec="1467868119"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="163.50.23.151" dst_ip="168.194.108.230" src_port="54524" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867786"/>
        <to usec="0" sec="1467868437"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.50.153.68" dst_ip="17.80.32.52" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867839"/>
        <to usec="0" sec="1467867841"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.50.155.91"/>
        </slice>
        <from usec="0" sec="1467868277"/>
        <to usec="0" sec="1467868279"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.122.240.98" dst_port="80"/>
            <filter src_ip="133.122.240.98" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867644"/>
        <to usec="0" sec="1467867863"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="60.62.167.128" dst_ip="203.178.126.74" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868440"/>
        <to usec="0" sec="1467868450"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.122.230.179"/>
        </slice>
        <from usec="0" sec="1467868094"/>
        <to usec="0" sec="1467868287"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.106.180.147"/>
        </slice>
        <from usec="0" sec="1467867637"/>
        <to usec="0" sec="1467868434"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.106.223.96"/>
        </slice>
        <from usec="0" sec="1467867607"/>
        <to usec="0" sec="1467867906"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.50.152.191"/>
        </slice>
        <from usec="0" sec="1467868040"/>
        <to usec="0" sec="1467868046"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="126.254.139.255"/>
        </slice>
        <from usec="0" sec="1467867602"/>
        <to usec="0" sec="1467867955"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.122.6.120"/>
        </slice>
        <from usec="0" sec="1467867602"/>
        <to usec="0" sec="1467867678"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.50.154.121" dst_ip="188.230.236.91" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867817"/>
        <to usec="0" sec="1467867841"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="95.252.174.122" dst_ip="202.243.64.108" src_port="80" dst_port="57328" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867640"/>
        <to usec="0" sec="1467867645"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="151.94.248.1" dst_ip="202.249.116.110" src_port="443" dst_port="25622" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868446"/>
        <to usec="0" sec="1467868447"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.122.99.253" dst_ip="64.147.68.6" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868375"/>
        <to usec="0" sec="1467868409"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="210.112.36.254" dst_ip="202.243.169.6" src_port="443" dst_port="56224" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868405"/>
        <to usec="0" sec="1467868478"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="130.225.80.1"/>
        </slice>
        <from usec="0" sec="1467868283"/>
        <to usec="0" sec="1467868285"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.50.155.254" dst_ip="91.227.165.249" src_port="49576" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867874"/>
        <to usec="0" sec="1467867878"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.106.12.254" dst_ip="205.204.230.176" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867835"/>
        <to usec="0" sec="1467867836"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="37.110.54.121" dst_ip="202.243.170.116" src_port="33378" dst_port="44477" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868088"/>
        <to usec="0" sec="1467868089"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.35.54.0" dst_ip="65.156.1.61" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867783"/>
        <to usec="0" sec="1467867785"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="157.35.159.3" dst_ip="69.23.6.213" src_port="57198" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868195"/>
        <to usec="0" sec="1467868279"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="202.248.170.124" dst_ip="163.50.15.22" src_port="443" dst_port="54556" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868487"/>
        <to usec="0" sec="1467868488"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="54.56.227.120" dst_ip="202.243.170.27" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868434"/>
        <to usec="0" sec="1467868436"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="219.252.87.246"/>
        </slice>
        <from usec="0" sec="1467868455"/>
        <to usec="0" sec="1467868457"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="158.65.39.137" dst_ip="163.50.99.186" src_port="443" dst_port="50518" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868101"/>
        <to usec="0" sec="1467868205"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.50.152.119" dst_ip="103.168.86.66" dst_port="80"/>
            <filter src_ip="163.50.152.119" dst_ip="209.206.17.250" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867627"/>
        <to usec="0" sec="1467868470"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="61.242.86.8" dst_ip="163.50.204.44" src_port="443" dst_port="62589" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867849"/>
        <to usec="0" sec="1467868182"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="123.193.3.145"/>
        </slice>
        <from usec="0" sec="1467868461"/>
        <to usec="0" sec="1467868463"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.122.76.29"/>
        </slice>
        <from usec="0" sec="1467868067"/>
        <to usec="0" sec="1467868070"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="184.186.252.109" dst_ip="202.243.163.88" src_port="80" dst_port="56946" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867802"/>
        <to usec="0" sec="1467868435"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.241.247.226"/>
        </slice>
        <from usec="0" sec="1467868139"/>
        <to usec="0" sec="1467868221"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="88.118.248.99"/>
        </slice>
        <from usec="0" sec="1467868262"/>
        <to usec="0" sec="1467868273"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.50.104.107"/>
        </slice>
        <from usec="0" sec="1467867765"/>
        <to usec="0" sec="1467867773"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="61.242.86.20" dst_ip="202.243.171.231" src_port="80" dst_port="45630" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867644"/>
        <to usec="0" sec="1467868085"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.50.228.159"/>
        </slice>
        <from usec="0" sec="1467868275"/>
        <to usec="0" sec="1467868278"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.243.70.24"/>
        </slice>
        <from usec="0" sec="1467868261"/>
        <to usec="0" sec="1467868266"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.50.10.101"/>
        </slice>
        <from usec="0" sec="1467867951"/>
        <to usec="0" sec="1467867953"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="182.8.10.27" dst_ip="202.243.168.164" src_port="80" dst_port="58186" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867689"/>
        <to usec="0" sec="1467867942"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.50.154.107" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467868059"/>
        <to usec="0" sec="1467868480"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="61.242.86.27" dst_ip="163.50.16.169" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868042"/>
        <to usec="0" sec="1467868043"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.122.171.146"/>
        </slice>
        <from usec="0" sec="1467868466"/>
        <to usec="0" sec="1467868471"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="101.239.133.145" dst_ip="163.50.237.152" src_port="80" dst_port="50093" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867878"/>
        <to usec="0" sec="1467867883"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="133.122.76.17" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467868467"/>
        <to usec="0" sec="1467868482"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="202.236.6.30" dst_ip="202.243.168.142" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868222"/>
        <to usec="0" sec="1467868224"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="69.248.132.161" dst_ip="163.50.154.154" src_port="80" dst_port="54103" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867779"/>
        <to usec="0" sec="1467867781"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="198.210.169.193" dst_ip="163.50.105.137" src_port="80" dst_port="49854" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867833"/>
        <to usec="0" sec="1467868091"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.122.237.71" dst_ip="17.127.5.71" src_port="56587" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867778"/>
        <to usec="0" sec="1467867908"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="192.25.242.64" dst_ip="163.50.228.159" src_port="443" dst_port="56904" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868182"/>
        <to usec="0" sec="1467868183"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="61.242.86.61" dst_ip="202.243.171.83" src_port="80" dst_port="42975" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868412"/>
        <to usec="0" sec="1467868426"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="183.206.35.220" dst_ip="202.243.168.126" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867740"/>
        <to usec="0" sec="1467867847"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.122.152.221" dst_ip="52.157.45.59" src_port="45560" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868227"/>
        <to usec="0" sec="1467868409"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.122.247.194" dst_ip="107.180.189.38" src_port="55041" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868140"/>
        <to usec="0" sec="1467868148"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="202.234.109.185" dst_ip="202.249.77.61" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868498"/>
        <to usec="0" sec="1467868499"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="23.86.203.221" dst_ip="202.243.170.82" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867896"/>
        <to usec="0" sec="1467868465"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="133.122.244.217"/>
        </slice>
        <from usec="0" sec="1467868208"/>
        <to usec="0" sec="1467868228"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="173.180.111.222" dst_ip="203.178.122.251" dst_port="53"/>
            <filter src_ip="173.180.111.222" dst_ip="203.178.122.220" dst_port="53"/>
        </slice>
        <from usec="0" sec="1467867631"/>
        <to usec="0" sec="1467868494"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="202.248.240.188" dst_ip="163.50.154.228" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868070"/>
        <to usec="0" sec="1467868071"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="72.4.84.40" dst_ip="202.243.170.57" src_port="80" dst_port="53887" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868253"/>
        <to usec="0" sec="1467868255"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="122.186.46.42"/>
        </slice>
        <from usec="0" sec="1467867722"/>
        <to usec="0" sec="1467867726"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="202.248.240.181" dst_ip="163.50.154.228" src_port="80" dst_port="52932" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868070"/>
        <to usec="0" sec="1467868071"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="133.122.168.52" dst_ip="54.56.227.255" src_port="64492" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867936"/>
        <to usec="0" sec="1467867937"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="183.206.198.47" dst_ip="202.243.64.250" src_port="80" dst_port="58170" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867805"/>
        <to usec="0" sec="1467868133"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="210.111.127.86" dst_ip="74.233.84.28" src_port="52027" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867749"/>
        <to usec="0" sec="1467868493"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="126.136.72.169"/>
        </slice>
        <from usec="0" sec="1467867654"/>
        <to usec="0" sec="1467867895"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.122.246.82"/>
        </slice>
        <from usec="0" sec="1467868014"/>
        <to usec="0" sec="1467868016"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.242.142.43"/>
        </slice>
        <from usec="0" sec="1467867708"/>
        <to usec="0" sec="1467868415"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.122.144.59" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867899"/>
        <to usec="0" sec="1467868468"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="149.202.72.54" dst_ip="163.50.247.253" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868492"/>
        <to usec="0" sec="1467868499"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="104.138.166.73" dst_ip="202.243.64.108" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868078"/>
        <to usec="0" sec="1467868460"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.50.152.89"/>
        </slice>
        <from usec="0" sec="1467868404"/>
        <to usec="0" sec="1467868409"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="23.26.76.81" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868037"/>
        <to usec="0" sec="1467868465"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="184.158.163.219" dst_ip="202.243.64.108" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867808"/>
        <to usec="0" sec="1467867812"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.243.172.84"/>
        </slice>
        <from usec="0" sec="1467867682"/>
        <to usec="0" sec="1467867684"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.50.12.92"/>
        </slice>
        <from usec="0" sec="1467867861"/>
        <to usec="0" sec="1467867863"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.106.160.56"/>
        </slice>
        <from usec="0" sec="1467867610"/>
        <to usec="0" sec="1467867613"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="202.248.117.198" dst_ip="202.243.64.108" src_port="80" dst_port="64997" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867950"/>
        <to usec="0" sec="1467868386"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="163.50.105.198" src_port="63385"/>
        </slice>
        <from usec="0" sec="1467867785"/>
        <to usec="0" sec="1467868485"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="23.86.198.38" dst_ip="202.243.170.20" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867957"/>
        <to usec="0" sec="1467867996"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.122.240.216"/>
        </slice>
        <from usec="0" sec="1467867971"/>
        <to usec="0" sec="1467867974"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="68.191.230.37"/>
        </slice>
        <from usec="0" sec="1467868385"/>
        <to usec="0" sec="1467868387"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.122.168.47"/>
        </slice>
        <from usec="0" sec="1467868362"/>
        <to usec="0" sec="1467868370"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="118.140.25.45" dst_ip="202.243.170.20" src_port="80" dst_port="35706" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868003"/>
        <to usec="0" sec="1467868005"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.99.191.177" dst_ip="61.253.200.27" src_port="46563" dst_port="2248" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868483"/>
        <to usec="0" sec="1467868485"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="202.196.213.175" dst_ip="202.243.64.108" src_port="80" dst_port="57672" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868221"/>
        <to usec="0" sec="1467868222"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.50.59.255"/>
        </slice>
        <from usec="0" sec="1467868389"/>
        <to usec="0" sec="1467868396"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.122.240.187" dst_ip="69.0.175.10" src_port="51919" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867795"/>
        <to usec="0" sec="1467867797"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="199.84.12.67" dst_ip="163.50.155.21" src_port="80" dst_port="57772" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867650"/>
        <to usec="0" sec="1467867750"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="193.0.129.197"/>
        </slice>
        <from usec="0" sec="1467867649"/>
        <to usec="0" sec="1467868405"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,502,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="193.0.129.196" dst_ip="203.178.126.61" src_port="56380" dst_port="22" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867673"/>
        <to usec="0" sec="1467867978"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="198.228.230.61" dst_ip="163.50.104.129" src_port="1935" dst_port="53692" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867605"/>
        <to usec="0" sec="1467868139"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.35.113.189"/>
        </slice>
        <from usec="0" sec="1467868325"/>
        <to usec="0" sec="1467868331"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="133.122.243.182" dst_ip="208.242.6.115" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868252"/>
        <to usec="0" sec="1467868443"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="219.229.128.247" dst_ip="202.243.64.108" src_port="80" dst_port="49667" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868062"/>
        <to usec="0" sec="1467868069"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="131.62.122.72" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867753"/>
        <to usec="0" sec="1467868337"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.122.240.182"/>
        </slice>
        <from usec="0" sec="1467867767"/>
        <to usec="0" sec="1467867793"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.122.168.74" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867740"/>
        <to usec="0" sec="1467867756"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="31.18.134.75" dst_ip="163.50.155.63" src_port="443" dst_port="50498" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867911"/>
        <to usec="0" sec="1467868426"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.50.81.176"/>
        </slice>
        <from usec="0" sec="1467867919"/>
        <to usec="0" sec="1467867922"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.122.247.142"/>
        </slice>
        <from usec="0" sec="1467867600"/>
        <to usec="0" sec="1467867605"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.243.171.141" dst_ip="198.194.200.229" dst_port="80"/>
            <filter src_ip="202.243.171.141" dst_ip="188.230.239.209" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867602"/>
        <to usec="0" sec="1467868474"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="115.226.136.79" dst_ip="163.50.104.230" src_port="41003" dst_port="63274" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868108"/>
        <to usec="0" sec="1467868491"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="54.46.238.87" dst_ip="163.50.144.102" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868022"/>
        <to usec="0" sec="1467868024"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.50.167.21" dst_ip="54.46.238.87" src_port="60031" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868078"/>
        <to usec="0" sec="1467868470"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="94.159.68.220" dst_ip="202.249.77.61" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868340"/>
        <to usec="0" sec="1467868345"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="45.184.227.44" dst_ip="163.50.83.160" src_port="80" dst_port="53568" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867806"/>
        <to usec="0" sec="1467867822"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="203.178.124.228" dst_ip="101.73.13.228" src_port="80" dst_port="56923" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868013"/>
        <to usec="0" sec="1467868014"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="136.108.117.172"/>
        </slice>
        <from usec="0" sec="1467867952"/>
        <to usec="0" sec="1467867955"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.26.72.155" dst_ip="203.178.116.24" src_port="80" dst_port="63312" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868419"/>
        <to usec="0" sec="1467868420"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="49.37.117.169"/>
        </slice>
        <from usec="0" sec="1467867738"/>
        <to usec="0" sec="1467867913"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="101.239.141.160" dst_ip="202.243.163.88" src_port="80" dst_port="57102" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867990"/>
        <to usec="0" sec="1467867992"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.50.116.33"/>
        </slice>
        <from usec="0" sec="1467867807"/>
        <to usec="0" sec="1467867809"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.123.135.146" dst_ip="163.50.23.11" src_port="80" dst_port="50808" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868035"/>
        <to usec="0" sec="1467868081"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="203.178.124.226" dst_ip="128.136.138.155" src_port="60487" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867848"/>
        <to usec="0" sec="1467867894"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.243.173.167" dst_ip="162.48.85.13" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868425"/>
        <to usec="0" sec="1467868501"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.50.83.166"/>
        </slice>
        <from usec="0" sec="1467867628"/>
        <to usec="0" sec="1467867632"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.50.104.21" dst_ip="91.197.43.2" src_port="62476" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868136"/>
        <to usec="0" sec="1467868473"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.50.84.106"/>
        </slice>
        <from usec="0" sec="1467867801"/>
        <to usec="0" sec="1467868214"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.50.152.43" dst_ip="54.37.105.110" src_port="61279" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867792"/>
        <to usec="0" sec="1467867897"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="118.210.10.99"/>
        </slice>
        <from usec="0" sec="1467868021"/>
        <to usec="0" sec="1467868023"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.122.76.95" dst_ip="17.127.31.120" src_port="49447" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867634"/>
        <to usec="0" sec="1467867637"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="45.184.253.33" dst_ip="203.178.124.195" src_port="58048" dst_port="54633" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867733"/>
        <to usec="0" sec="1467868204"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="151.94.216.80" dst_ip="163.50.78.110" src_port="443" dst_port="50113" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867769"/>
        <to usec="0" sec="1467868490"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.35.152.208"/>
        </slice>
        <from usec="0" sec="1467867812"/>
        <to usec="0" sec="1467867814"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.122.233.249"/>
        </slice>
        <from usec="0" sec="1467868155"/>
        <to usec="0" sec="1467868158"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="126.243.114.25" dst_ip="163.50.240.196" src_port="62877" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868122"/>
        <to usec="0" sec="1467868123"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.106.162.34"/>
        </slice>
        <from usec="0" sec="1467867817"/>
        <to usec="0" sec="1467868316"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.122.237.57" dst_ip="173.247.103.82" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867754"/>
        <to usec="0" sec="1467867759"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.122.171.249"/>
        </slice>
        <from usec="0" sec="1467867600"/>
        <to usec="0" sec="1467868407"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.99.186.62"/>
        </slice>
        <from usec="0" sec="1467867771"/>
        <to usec="0" sec="1467867773"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.122.245.186" dst_ip="209.206.17.250" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867932"/>
        <to usec="0" sec="1467868385"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.122.243.159"/>
        </slice>
        <from usec="0" sec="1467868347"/>
        <to usec="0" sec="1467868388"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.80.137.233" dst_ip="202.243.170.116" src_port="80" dst_port="49738" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867874"/>
        <to usec="0" sec="1467867878"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="49.37.159.247"/>
        </slice>
        <from usec="0" sec="1467868220"/>
        <to usec="0" sec="1467868223"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="157.35.174.23"/>
        </slice>
        <from usec="0" sec="1467868165"/>
        <to usec="0" sec="1467868258"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="183.206.33.247" dst_ip="202.243.168.164" src_port="80" dst_port="58587" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868089"/>
        <to usec="0" sec="1467868111"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.106.78.115"/>
        </slice>
        <from usec="0" sec="1467868004"/>
        <to usec="0" sec="1467868016"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="107.29.213.175" dst_ip="163.50.154.203" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868049"/>
        <to usec="0" sec="1467868051"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="188.230.236.17" dst_ip="202.243.171.201" src_port="80" dst_port="64827" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868477"/>
        <to usec="0" sec="1467868479"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.178.124.205" src_port="6881" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868026"/>
        <to usec="0" sec="1467868379"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="163.50.47.77" dst_ip="211.104.103.194" src_port="49759" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867675"/>
        <to usec="0" sec="1467867676"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.122.171.224" dst_ip="198.194.200.245" src_port="54396" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868027"/>
        <to usec="0" sec="1467868108"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="46.96.55.129" dst_ip="163.50.154.208" src_port="443" dst_port="62888" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868424"/>
        <to usec="0" sec="1467868426"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.50.6.119"/>
        </slice>
        <from usec="0" sec="1467867974"/>
        <to usec="0" sec="1467868081"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.52.250.42"/>
        </slice>
        <from usec="0" sec="1467868451"/>
        <to usec="0" sec="1467868453"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.122.230.67" dst_ip="91.227.165.249" src_port="49460" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867944"/>
        <to usec="0" sec="1467867968"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.35.159.118"/>
        </slice>
        <from usec="0" sec="1467867702"/>
        <to usec="0" sec="1467868496"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.50.144.102" dst_ip="217.167.58.136" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867614"/>
        <to usec="0" sec="1467867970"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.50.125.125" dst_ip="54.33.38.116" src_port="34222" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867981"/>
        <to usec="0" sec="1467868311"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="124.5.146.86" dst_ip="202.243.163.116" src_port="80" dst_port="51671" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868079"/>
        <to usec="0" sec="1467868080"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.99.186.42"/>
        </slice>
        <from usec="0" sec="1467868022"/>
        <to usec="0" sec="1467868025"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.50.153.178" dst_ip="162.238.9.218" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868031"/>
        <to usec="0" sec="1467868036"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.243.170.96" dst_ip="124.103.38.37" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868261"/>
        <to usec="0" sec="1467868263"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.122.245.173"/>
        </slice>
        <from usec="0" sec="1467867787"/>
        <to usec="0" sec="1467867792"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.86.173.34" dst_ip="163.50.78.110" src_port="443" dst_port="49881" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867847"/>
        <to usec="0" sec="1467868168"/>
    </anomaly>
    <anomaly type="notice" value="1.835380,2.758580,504,1 1 0 0 0 0 1 0 0 1 0 0,mptmp">
        <slice>
            <filter dst_port="443"/>
            <filter dst_ip="64.203.137.25" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.50.105.246" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867727"/>
        <to usec="0" sec="1467868495"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,504,1 1 1 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_port="443"/>
            <filter src_ip="163.50.228.150" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867617"/>
        <to usec="0" sec="1467868499"/>
    </anomaly>
    <anomaly type="notice" value="1.425980,2.792780,504,1 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="202.249.113.133"/>
            <filter src_ip="203.178.120.204" src_port="23545"/>
            <filter src_ip="203.178.120.204" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.243.169.215" dst_port="443"/>
            <filter src_ip="202.243.169.215" dst_ip="202.248.117.216" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867743"/>
        <to usec="0" sec="1467867746"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="31.18.138.4" dst_port="80"/>
            <filter src_ip="202.243.64.108" dst_ip="31.18.138.4" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867622"/>
        <to usec="0" sec="1467868483"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,011,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="218.99.128.134" src_port="8080" dst_port="6000"/>
        </slice>
        <from usec="0" sec="1467867773"/>
        <to usec="0" sec="1467868404"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.35.254.199" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867779"/>
        <to usec="0" sec="1467868295"/>
    </anomaly>
    <anomaly type="notice" value="1.460660,2.770800,504,1 1 1 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="133.106.229.5" dst_port="443"/>
            <filter src_ip="133.106.166.11" dst_port="443"/>
            <filter dst_ip="17.81.2.68" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="31.18.137.14" dst_ip="31.18.137.14" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867690"/>
        <to usec="0" sec="1467868454"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.50.8.38" dst_ip="188.230.239.211" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867602"/>
        <to usec="0" sec="1467868501"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="163.50.116.22" dst_ip="91.227.164.232" src_port="55711" dst_port="80"/>
            <filter src_ip="163.50.155.134" dst_ip="91.227.164.232" src_port="50257" dst_port="80"/>
            <filter src_ip="163.50.88.165" dst_ip="91.227.164.232" src_port="64256" dst_port="80"/>
            <filter src_ip="163.50.4.40" dst_ip="91.227.164.232" src_port="53465" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867784"/>
        <to usec="0" sec="1467868017"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.50.15.26" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867614"/>
        <to usec="0" sec="1467868482"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="203.178.119.221" dst_port="53"/>
            <filter dst_ip="163.50.245.19" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867606"/>
        <to usec="0" sec="1467868501"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,504,1 1 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867600"/>
        <to usec="0" sec="1467868497"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.50.245.17"/>
        </slice>
        <from usec="0" sec="1467868309"/>
        <to usec="0" sec="1467868311"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.50.13.89" dst_port="80"/>
            <filter src_ip="163.50.13.89" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867842"/>
        <to usec="0" sec="1467868501"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.122.241.37" dst_port="443"/>
            <filter src_ip="133.122.236.70" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867637"/>
        <to usec="0" sec="1467868448"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.122.76.72" dst_port="443"/>
            <filter src_ip="163.50.187.195" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867610"/>
        <to usec="0" sec="1467868396"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="199.172.33.58" dst_ip="199.172.33.58" src_port="65382" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867869"/>
        <to usec="0" sec="1467867888"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="133.122.240.168" dst_ip="38.149.35.33" src_port="50545" dst_port="80"/>
            <filter src_ip="133.122.119.213" dst_ip="38.149.35.33" src_port="50114" dst_port="80"/>
            <filter src_ip="133.122.246.66" dst_ip="38.149.35.33" src_port="49730" dst_port="80"/>
            <filter src_ip="163.50.26.66" dst_ip="38.149.35.33" src_port="52866" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467868218"/>
        <to usec="0" sec="1467868239"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.50.160.37" dst_port="993"/>
            <filter dst_ip="163.50.160.37" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867600"/>
        <to usec="0" sec="1467868143"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.122.172.244" dst_ip="31.18.132.43"/>
            <filter src_ip="133.122.172.244" dst_ip="31.18.134.97" dst_port="80"/>
            <filter src_ip="133.122.171.143" dst_ip="31.18.132.43" dst_port="80"/>
            <filter src_ip="133.122.231.117" dst_ip="31.18.132.43" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867692"/>
        <to usec="0" sec="1467868154"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.122.227.26" dst_ip="31.18.133.45"/>
            <filter src_ip="133.122.227.26" dst_port="80"/>
            <filter dst_ip="31.18.133.45" dst_port="80"/>
            <filter src_ip="133.122.227.26" dst_ip="17.94.63.127" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867783"/>
        <to usec="0" sec="1467868075"/>
    </anomaly>
    <anomaly type="notice" value="1.425980,2.792780,503,1 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="202.243.64.202" dst_ip="31.18.137.42"/>
            <filter src_ip="202.243.64.202" dst_port="80"/>
            <filter src_ip="133.122.217.102" dst_port="80"/>
            <filter dst_ip="31.18.137.42" dst_port="80"/>
            <filter dst_ip="31.18.137.42" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.106.125.40" dst_port="80"/>
            <filter src_ip="133.106.125.40" dst_port="443"/>
            <filter src_ip="133.106.125.40" dst_port="5223"/>
            <filter dst_ip="65.156.1.51" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867749"/>
        <to usec="0" sec="1467868241"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,011,1 0 0 0 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="133.122.132.127" dst_ip="198.96.54.222" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867602"/>
        <to usec="0" sec="1467868351"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.50.151.217" dst_ip="199.172.33.126" src_port="38586" dst_port="443"/>
            <filter src_ip="163.50.151.217" dst_ip="199.172.33.126" src_port="37973" dst_port="443"/>
            <filter src_ip="163.50.151.217" dst_ip="199.172.33.126" src_port="37767" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867794"/>
        <to usec="0" sec="1467868445"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.106.115.179" dst_ip="17.127.5.69"/>
            <filter src_ip="133.106.115.179" dst_port="443"/>
            <filter dst_ip="17.127.5.69" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467868365"/>
        <to usec="0" sec="1467868501"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="52.156.80.133"/>
        </slice>
        <from usec="0" sec="1467868222"/>
        <to usec="0" sec="1467868257"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867609"/>
        <to usec="0" sec="1467868500"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,503,1 1 1 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.122.77.175" dst_port="80"/>
            <filter src_ip="133.122.77.175" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867616"/>
        <to usec="0" sec="1467868501"/>
    </anomaly>
    <anomaly type="notice" value="1.239720,2.779650,503,1 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="202.243.68.154" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867649"/>
        <to usec="0" sec="1467868478"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="163.50.238.155"/>
        </slice>
        <from usec="0" sec="1467867781"/>
        <to usec="0" sec="1467867783"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,504,1 1 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="31.18.143.180" dst_port="443"/>
            <filter src_ip="163.50.152.102" dst_ip="27.15.40.171" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867600"/>
        <to usec="0" sec="1467867782"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="54.37.105.110" dst_ip="54.37.105.110" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867882"/>
        <to usec="0" sec="1467868165"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.122.234.138" dst_port="80"/>
            <filter src_ip="133.122.234.138" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867710"/>
        <to usec="0" sec="1467867961"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.243.190.169" src_port="53"/>
            <filter dst_ip="202.243.190.169" dst_port="25"/>
        </slice>
        <from usec="0" sec="1467868021"/>
        <to usec="0" sec="1467868214"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.35.254.208" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867779"/>
        <to usec="0" sec="1467868431"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,999,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="162.17.109.130" dst_ip="202.243.68.139" dst_port="25"/>
        </slice>
        <from usec="0" sec="1467867631"/>
        <to usec="0" sec="1467868320"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_port="80"/>
            <filter src_ip="202.243.64.108" dst_ip="173.240.238.7" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867713"/>
        <to usec="0" sec="1467868458"/>
    </anomaly>
    <anomaly type="notice" value="1.425980,2.792780,503,1 0 0 0 0 0 0 0 0 1 0 0,ntscACK">
        <slice>
            <filter src_ip="202.243.171.254" dst_port="80"/>
            <filter src_ip="133.122.242.62" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.50.9.224" dst_ip="202.248.240.207" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867912"/>
        <to usec="0" sec="1467868437"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.243.66.79"/>
        </slice>
        <from usec="0" sec="1467867692"/>
        <to usec="0" sec="1467867694"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="163.50.19.109" dst_port="80"/>
            <filter src_ip="163.50.19.109" dst_port="443"/>
            <filter dst_ip="23.235.82.1" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867619"/>
        <to usec="0" sec="1467868356"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.50.78.110" dst_port="443"/>
            <filter src_ip="133.122.172.50" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867629"/>
        <to usec="0" sec="1467868498"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.106.209.42" dst_ip="74.15.191.157" dst_port="443"/>
            <filter src_ip="133.106.209.42" dst_ip="17.210.29.13" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867670"/>
        <to usec="0" sec="1467868368"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="203.178.97.153" dst_port="443"/>
            <filter src_ip="163.50.220.195" dst_ip="40.53.130.3" dst_port="443"/>
            <filter src_ip="163.50.220.195" dst_ip="13.236.38.228" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867612"/>
        <to usec="0" sec="1467868416"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="157.35.254.202" dst_port="443"/>
            <filter dst_ip="17.124.24.43" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867602"/>
        <to usec="0" sec="1467868501"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="210.83.77.93" dst_ip="203.178.126.74" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867902"/>
        <to usec="0" sec="1467868424"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="173.209.183.181" src_port="50994" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868176"/>
        <to usec="0" sec="1467868434"/>
    </anomaly>
    <anomaly type="notice" value="1.425980,2.792780,503,1 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter dst_port="80"/>
            <filter dst_ip="31.18.134.75" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="163.50.71.159" src_port="2570"/>
            <filter src_ip="163.50.71.159" dst_port="443"/>
            <filter dst_ip="204.80.58.41" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867614"/>
        <to usec="0" sec="1467868478"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="192.86.61.76" dst_ip="203.178.118.54" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467868239"/>
        <to usec="0" sec="1467868501"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="199.14.220.254" dst_ip="203.178.115.210" src_port="53" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868088"/>
        <to usec="0" sec="1467868090"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="211.109.106.223" dst_ip="202.243.179.186" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868156"/>
        <to usec="0" sec="1467868157"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="69.248.132.43" dst_ip="163.50.14.137" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868069"/>
        <to usec="0" sec="1467868221"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="111.170.34.164" dst_ip="202.243.169.87" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868495"/>
        <to usec="0" sec="1467868497"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.178.123.85" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867737"/>
        <to usec="0" sec="1467868485"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="111.170.58.164" dst_ip="163.50.12.92" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867953"/>
        <to usec="0" sec="1467867954"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="202.243.68.154" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867800"/>
        <to usec="0" sec="1467868454"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="183.206.35.223" dst_ip="202.243.168.209" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867752"/>
        <to usec="0" sec="1467867869"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="183.237.33.222" dst_ip="163.50.104.207" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868036"/>
        <to usec="0" sec="1467868038"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="192.57.185.90" dst_ip="163.50.105.32" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867667"/>
        <to usec="0" sec="1467867668"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="108.243.14.62" dst_ip="108.243.14.62" src_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868152"/>
        <to usec="0" sec="1467868153"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.50.155.7"/>
        </slice>
        <from usec="0" sec="1467867711"/>
        <to usec="0" sec="1467867713"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="218.85.146.255"/>
        </slice>
        <from usec="0" sec="1467868490"/>
        <to usec="0" sec="1467868493"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.254.149.251"/>
        </slice>
        <from usec="0" sec="1467868010"/>
        <to usec="0" sec="1467868303"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.122.144.244"/>
        </slice>
        <from usec="0" sec="1467868121"/>
        <to usec="0" sec="1467868124"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="130.225.115.242"/>
        </slice>
        <from usec="0" sec="1467867619"/>
        <to usec="0" sec="1467867623"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.106.207.22"/>
        </slice>
        <from usec="0" sec="1467868388"/>
        <to usec="0" sec="1467868404"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.122.227.27" dst_ip="17.66.152.121" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868092"/>
        <to usec="0" sec="1467868095"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.243.71.19"/>
        </slice>
        <from usec="0" sec="1467868193"/>
        <to usec="0" sec="1467868195"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="164.42.202.227"/>
        </slice>
        <from usec="0" sec="1467868311"/>
        <to usec="0" sec="1467868326"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="118.210.232.225"/>
        </slice>
        <from usec="0" sec="1467868205"/>
        <to usec="0" sec="1467868207"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.50.16.239"/>
        </slice>
        <from usec="0" sec="1467868352"/>
        <to usec="0" sec="1467868354"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="210.50.89.34"/>
        </slice>
        <from usec="0" sec="1467867810"/>
        <to usec="0" sec="1467867813"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="118.210.198.60"/>
        </slice>
        <from usec="0" sec="1467868498"/>
        <to usec="0" sec="1467868501"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.106.200.57"/>
        </slice>
        <from usec="0" sec="1467868251"/>
        <to usec="0" sec="1467868423"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.50.105.32" dst_port="443"/>
            <filter src_ip="163.50.105.32" dst_ip="95.139.124.22" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867667"/>
        <to usec="0" sec="1467868364"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.35.2.51"/>
        </slice>
        <from usec="0" sec="1467868146"/>
        <to usec="0" sec="1467868149"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.106.100.204"/>
        </slice>
        <from usec="0" sec="1467867910"/>
        <to usec="0" sec="1467868047"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.122.172.47" dst_ip="17.98.40.156" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868325"/>
        <to usec="0" sec="1467868327"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="49.37.143.39" dst_ip="202.243.64.245" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868269"/>
        <to usec="0" sec="1467868272"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="118.37.38.194"/>
        </slice>
        <from usec="0" sec="1467868262"/>
        <to usec="0" sec="1467868265"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.35.75.33"/>
        </slice>
        <from usec="0" sec="1467867762"/>
        <to usec="0" sec="1467868349"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.50.154.203"/>
        </slice>
        <from usec="0" sec="1467868156"/>
        <to usec="0" sec="1467868236"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.50.17.54"/>
        </slice>
        <from usec="0" sec="1467867805"/>
        <to usec="0" sec="1467867808"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="99.65.9.54"/>
        </slice>
        <from usec="0" sec="1467868059"/>
        <to usec="0" sec="1467868061"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.243.170.209"/>
        </slice>
        <from usec="0" sec="1467868191"/>
        <to usec="0" sec="1467868200"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.50.153.125"/>
        </slice>
        <from usec="0" sec="1467867652"/>
        <to usec="0" sec="1467867655"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.254.141.116"/>
        </slice>
        <from usec="0" sec="1467868458"/>
        <to usec="0" sec="1467868461"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.122.247.112" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867787"/>
        <to usec="0" sec="1467867788"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.164.240.143"/>
        </slice>
        <from usec="0" sec="1467867771"/>
        <to usec="0" sec="1467867773"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.35.109.79"/>
        </slice>
        <from usec="0" sec="1467868392"/>
        <to usec="0" sec="1467868395"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.50.152.140"/>
        </slice>
        <from usec="0" sec="1467868401"/>
        <to usec="0" sec="1467868404"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.243.169.87"/>
        </slice>
        <from usec="0" sec="1467868483"/>
        <to usec="0" sec="1467868497"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="49.43.0.173"/>
        </slice>
        <from usec="0" sec="1467868337"/>
        <to usec="0" sec="1467868339"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.35.158.152"/>
        </slice>
        <from usec="0" sec="1467867802"/>
        <to usec="0" sec="1467867805"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.50.18.103"/>
        </slice>
        <from usec="0" sec="1467867703"/>
        <to usec="0" sec="1467867705"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.106.158.171"/>
        </slice>
        <from usec="0" sec="1467868039"/>
        <to usec="0" sec="1467868043"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="208.245.1.88"/>
        </slice>
        <from usec="0" sec="1467867793"/>
        <to usec="0" sec="1467867828"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.242.108.107"/>
        </slice>
        <from usec="0" sec="1467868136"/>
        <to usec="0" sec="1467868140"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.35.111.95"/>
        </slice>
        <from usec="0" sec="1467867648"/>
        <to usec="0" sec="1467867652"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.242.104.89"/>
        </slice>
        <from usec="0" sec="1467868456"/>
        <to usec="0" sec="1467868496"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.50.24.168"/>
        </slice>
        <from usec="0" sec="1467867978"/>
        <to usec="0" sec="1467867982"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.161.30.171"/>
        </slice>
        <from usec="0" sec="1467868232"/>
        <to usec="0" sec="1467868234"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.106.59.114"/>
        </slice>
        <from usec="0" sec="1467867832"/>
        <to usec="0" sec="1467867978"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,503,1 1 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="65.156.1.97" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867648"/>
        <to usec="0" sec="1467868493"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="203.178.127.75" src_port="28179"/>
        </slice>
        <from usec="0" sec="1467868016"/>
        <to usec="0" sec="1467868189"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.122.243.99"/>
        </slice>
        <from usec="0" sec="1467868364"/>
        <to usec="0" sec="1467868368"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.50.107.102"/>
        </slice>
        <from usec="0" sec="1467867801"/>
        <to usec="0" sec="1467867803"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.122.246.139" dst_ip="17.98.35.96" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867838"/>
        <to usec="0" sec="1467867963"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.122.132.190"/>
        </slice>
        <from usec="0" sec="1467868330"/>
        <to usec="0" sec="1467868338"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.122.240.255" dst_ip="17.12.46.90" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867966"/>
        <to usec="0" sec="1467867967"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.35.196.122"/>
        </slice>
        <from usec="0" sec="1467867610"/>
        <to usec="0" sec="1467867613"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="110.90.235.4"/>
        </slice>
        <from usec="0" sec="1467868065"/>
        <to usec="0" sec="1467868091"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.50.59.129"/>
        </slice>
        <from usec="0" sec="1467868157"/>
        <to usec="0" sec="1467868460"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="163.50.52.240" dst_ip="38.149.35.41" src_port="52285" dst_port="80"/>
            <filter src_ip="163.50.14.140" dst_ip="38.149.35.41" src_port="51925" dst_port="80"/>
            <filter src_ip="163.50.13.93" dst_ip="38.149.35.41" src_port="50318" dst_port="80"/>
            <filter src_ip="163.50.19.113" dst_ip="38.149.35.41" src_port="62751" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467868171"/>
        <to usec="0" sec="1467868177"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.106.232.96"/>
        </slice>
        <from usec="0" sec="1467868405"/>
        <to usec="0" sec="1467868415"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.122.241.239" dst_ip="17.66.146.241" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868066"/>
        <to usec="0" sec="1467868067"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="202.243.171.231"/>
        </slice>
        <from usec="0" sec="1467867743"/>
        <to usec="0" sec="1467867760"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.122.232.237"/>
        </slice>
        <from usec="0" sec="1467867616"/>
        <to usec="0" sec="1467867618"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="218.217.154.89"/>
        </slice>
        <from usec="0" sec="1467868028"/>
        <to usec="0" sec="1467868452"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.35.41.165"/>
        </slice>
        <from usec="0" sec="1467868463"/>
        <to usec="0" sec="1467868467"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.249.94.83"/>
        </slice>
        <from usec="0" sec="1467867608"/>
        <to usec="0" sec="1467868414"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.122.6.79" dst_ip="17.98.41.81" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867665"/>
        <to usec="0" sec="1467867671"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.50.152.78"/>
        </slice>
        <from usec="0" sec="1467867940"/>
        <to usec="0" sec="1467867945"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.35.171.207"/>
        </slice>
        <from usec="0" sec="1467867746"/>
        <to usec="0" sec="1467867749"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.122.231.171"/>
        </slice>
        <from usec="0" sec="1467867923"/>
        <to usec="0" sec="1467867926"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.122.173.199"/>
        </slice>
        <from usec="0" sec="1467867601"/>
        <to usec="0" sec="1467867604"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.50.104.129" dst_port="443"/>
            <filter src_ip="163.50.104.129" dst_ip="52.239.96.1" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867671"/>
        <to usec="0" sec="1467868140"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.122.225.253"/>
        </slice>
        <from usec="0" sec="1467868436"/>
        <to usec="0" sec="1467868444"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="1.141.92.121"/>
        </slice>
        <from usec="0" sec="1467868178"/>
        <to usec="0" sec="1467868181"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.122.171.158" src_port="39748"/>
        </slice>
        <from usec="0" sec="1467867617"/>
        <to usec="0" sec="1467868499"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.50.95.202"/>
        </slice>
        <from usec="0" sec="1467867819"/>
        <to usec="0" sec="1467867822"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="192.186.33.204" dst_ip="17.210.24.58" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867814"/>
        <to usec="0" sec="1467868405"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.243.169.226"/>
        </slice>
        <from usec="0" sec="1467868279"/>
        <to usec="0" sec="1467868484"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.122.172.152"/>
        </slice>
        <from usec="0" sec="1467867975"/>
        <to usec="0" sec="1467868212"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="220.154.176.36" dst_ip="202.243.64.245" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867913"/>
        <to usec="0" sec="1467867919"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.207.43.94"/>
        </slice>
        <from usec="0" sec="1467868141"/>
        <to usec="0" sec="1467868144"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.50.154.29"/>
        </slice>
        <from usec="0" sec="1467868202"/>
        <to usec="0" sec="1467868205"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.122.172.162" dst_ip="17.98.32.218" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867697"/>
        <to usec="0" sec="1467868095"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.122.245.182"/>
        </slice>
        <from usec="0" sec="1467867683"/>
        <to usec="0" sec="1467867686"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.50.152.15" dst_ip="13.235.77.99" src_port="9345" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867952"/>
        <to usec="0" sec="1467867955"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.122.227.246"/>
        </slice>
        <from usec="0" sec="1467867735"/>
        <to usec="0" sec="1467867738"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.50.153.189"/>
        </slice>
        <from usec="0" sec="1467867611"/>
        <to usec="0" sec="1467867696"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.242.214.187"/>
        </slice>
        <from usec="0" sec="1467867787"/>
        <to usec="0" sec="1467867789"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="126.158.226.188" dst_ip="203.178.115.154" dst_port="143"/>
            <filter src_ip="17.252.147.233" dst_ip="203.178.115.154" dst_port="993"/>
        </slice>
        <from usec="0" sec="1467867715"/>
        <to usec="0" sec="1467868448"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="17.94.112.13"/>
        </slice>
        <from usec="0" sec="1467868395"/>
        <to usec="0" sec="1467868398"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.106.130.246" dst_ip="17.206.6.239" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467868347"/>
        <to usec="0" sec="1467868363"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.243.64.250" dst_ip="158.65.171.182" dst_port="443"/>
            <filter src_ip="202.243.64.250" dst_ip="172.251.140.67" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867963"/>
        <to usec="0" sec="1467867975"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.50.240.222" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867814"/>
        <to usec="0" sec="1467868452"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.50.240.221"/>
        </slice>
        <from usec="0" sec="1467867836"/>
        <to usec="0" sec="1467867854"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="130.225.197.3" dst_ip="74.15.191.157"/>
            <filter src_ip="130.225.197.3" dst_port="443"/>
            <filter dst_ip="74.15.191.157" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867992"/>
        <to usec="0" sec="1467868000"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="130.225.96.13" dst_port="443"/>
            <filter src_ip="130.225.83.12" dst_ip="17.94.61.233" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867625"/>
        <to usec="0" sec="1467868456"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="61.232.29.17" dst_ip="163.50.56.168" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467868310"/>
        <to usec="0" sec="1467868498"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="163.50.160.72"/>
        </slice>
        <from usec="0" sec="1467868401"/>
        <to usec="0" sec="1467868431"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="163.50.71.39" dst_ip="40.31.107.117" dst_port="443"/>
            <filter src_ip="163.50.15.26" dst_ip="40.31.107.117" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467868289"/>
        <to usec="0" sec="1467868292"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.106.207.88" dst_port="5223"/>
            <filter src_ip="133.106.172.158" dst_port="443"/>
            <filter src_ip="133.106.207.88" dst_ip="17.81.1.86" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467868331"/>
        <to usec="0" sec="1467868501"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="192.125.227.177"/>
        </slice>
        <from usec="0" sec="1467868481"/>
        <to usec="0" sec="1467868485"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="163.50.105.64" dst_ip="216.220.198.31" dst_port="443"/>
            <filter src_ip="163.50.155.117" dst_ip="216.220.198.31" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467868463"/>
        <to usec="0" sec="1467868467"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,ipv46tun">
        <slice>
            <filter src_ip="203.178.119.254" dst_ip="149.12.89.43"/>
        </slice>
        <from usec="0" sec="1467867603"/>
        <to usec="0" sec="1467868244"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,ipv46tun">
        <slice>
            <filter src_ip="149.12.89.43" dst_ip="203.178.119.254"/>
        </slice>
        <from usec="0" sec="1467867604"/>
        <to usec="0" sec="1467868173"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="111.200.81.223" src_port="12200" dst_port="48111" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867810"/>
        <to usec="0" sec="1467867811"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="113.106.73.3" proto="icmp"/>
        </slice>
        <from usec="0" sec="1467867705"/>
        <to usec="0" sec="1467867707"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.39.37.3" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868163"/>
        <to usec="0" sec="1467868167"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.122.220.4"/>
        </slice>
        <from usec="0" sec="1467867689"/>
        <to usec="0" sec="1467868476"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.213.136.247"/>
        </slice>
        <from usec="0" sec="1467867972"/>
        <to usec="0" sec="1467868053"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="180.182.96.247"/>
        </slice>
        <from usec="0" sec="1467868473"/>
        <to usec="0" sec="1467868496"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="106.211.39.10" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868313"/>
        <to usec="0" sec="1467868315"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="41.13.116.11"/>
        </slice>
        <from usec="0" sec="1467868142"/>
        <to usec="0" sec="1467868152"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="218.39.110.244"/>
        </slice>
        <from usec="0" sec="1467868475"/>
        <to usec="0" sec="1467868497"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.187.38.242" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867659"/>
        <to usec="0" sec="1467867661"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.252.120.241" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868492"/>
        <to usec="0" sec="1467868500"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="54.56.31.230"/>
        </slice>
        <from usec="0" sec="1467868265"/>
        <to usec="0" sec="1467868268"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="190.102.119.224" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1467867653"/>
        <to usec="0" sec="1467867654"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.116.107.24" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867609"/>
        <to usec="0" sec="1467867626"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="81.151.65.16" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1467867949"/>
        <to usec="0" sec="1467867958"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="125.221.202.226" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867688"/>
        <to usec="0" sec="1467867690"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="222.144.21.18" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1467867710"/>
        <to usec="0" sec="1467867719"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.212.37.226" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867637"/>
        <to usec="0" sec="1467867650"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="212.213.16.234"/>
        </slice>
        <from usec="0" sec="1467867736"/>
        <to usec="0" sec="1467867773"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="186.118.156.235" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1467867771"/>
        <to usec="0" sec="1467867782"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.79.161.28" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867779"/>
        <to usec="0" sec="1467867790"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.184.133.21"/>
        </slice>
        <from usec="0" sec="1467868265"/>
        <to usec="0" sec="1467868280"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.34.74.231" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867744"/>
        <to usec="0" sec="1467867745"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.134.168.22"/>
        </slice>
        <from usec="0" sec="1467868340"/>
        <to usec="0" sec="1467868358"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.251.38.231"/>
        </slice>
        <from usec="0" sec="1467867959"/>
        <to usec="0" sec="1467867974"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="183.174.173.29"/>
        </slice>
        <from usec="0" sec="1467868081"/>
        <to usec="0" sec="1467868107"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.2.195.34" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868430"/>
        <to usec="0" sec="1467868444"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="186.79.115.57"/>
        </slice>
        <from usec="0" sec="1467867617"/>
        <to usec="0" sec="1467867632"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.70.152.192"/>
        </slice>
        <from usec="0" sec="1467867853"/>
        <to usec="0" sec="1467867856"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.179.175.62" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867603"/>
        <to usec="0" sec="1467867614"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.80.171.55"/>
        </slice>
        <from usec="0" sec="1467868440"/>
        <to usec="0" sec="1467868453"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="185.209.160.55"/>
        </slice>
        <from usec="0" sec="1467868307"/>
        <to usec="0" sec="1467868330"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="173.97.208.41" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868205"/>
        <to usec="0" sec="1467868207"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.151.95.212" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868460"/>
        <to usec="0" sec="1467868482"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.41.156.211" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867603"/>
        <to usec="0" sec="1467867611"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="115.62.79.49"/>
        </slice>
        <from usec="0" sec="1467867706"/>
        <to usec="0" sec="1467867728"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.88.200.56" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868204"/>
        <to usec="0" sec="1467868205"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="124.219.37.37" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868097"/>
        <to usec="0" sec="1467868107"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="103.58.92.196" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868283"/>
        <to usec="0" sec="1467868285"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="94.6.20.211" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867862"/>
        <to usec="0" sec="1467867863"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="130.225.115.121" dst_ip="219.111.14.221" dst_port="80"/>
            <filter src_ip="130.225.115.121" dst_ip="219.111.14.221" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867864"/>
        <to usec="0" sec="1467868322"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="196.239.11.195" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868262"/>
        <to usec="0" sec="1467868281"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="187.100.176.37"/>
        </slice>
        <from usec="0" sec="1467867713"/>
        <to usec="0" sec="1467867723"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.141.94.212"/>
        </slice>
        <from usec="0" sec="1467868120"/>
        <to usec="0" sec="1467868125"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="179.217.165.219" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867627"/>
        <to usec="0" sec="1467867628"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="61.115.174.208" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868177"/>
        <to usec="0" sec="1467868196"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="181.94.60.51"/>
        </slice>
        <from usec="0" sec="1467868088"/>
        <to usec="0" sec="1467868109"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="89.83.214.47"/>
        </slice>
        <from usec="0" sec="1467868267"/>
        <to usec="0" sec="1467868279"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.45.120.127" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868108"/>
        <to usec="0" sec="1467868118"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="223.112.118.137" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868454"/>
        <to usec="0" sec="1467868466"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="218.118.16.178" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868319"/>
        <to usec="0" sec="1467868321"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.33.107.176"/>
        </slice>
        <from usec="0" sec="1467868139"/>
        <to usec="0" sec="1467868147"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.50.152.153"/>
        </slice>
        <from usec="0" sec="1467868347"/>
        <to usec="0" sec="1467868349"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.121.156.152"/>
        </slice>
        <from usec="0" sec="1467867711"/>
        <to usec="0" sec="1467867713"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.94.17.86"/>
        </slice>
        <from usec="0" sec="1467868097"/>
        <to usec="0" sec="1467868120"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="187.10.6.150" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867665"/>
        <to usec="0" sec="1467867687"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="124.206.98.148" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867734"/>
        <to usec="0" sec="1467867748"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="94.2.74.148"/>
        </slice>
        <from usec="0" sec="1467868193"/>
        <to usec="0" sec="1467868195"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.132.25.97"/>
        </slice>
        <from usec="0" sec="1467868182"/>
        <to usec="0" sec="1467868498"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="179.216.107.109"/>
        </slice>
        <from usec="0" sec="1467867705"/>
        <to usec="0" sec="1467867717"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.63.59.173" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868023"/>
        <to usec="0" sec="1467868041"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="218.116.134.185" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867987"/>
        <to usec="0" sec="1467867988"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="190.24.157.123"/>
        </slice>
        <from usec="0" sec="1467868242"/>
        <to usec="0" sec="1467868265"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="103.175.10.191" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868293"/>
        <to usec="0" sec="1467868303"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.14.251.85" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868119"/>
        <to usec="0" sec="1467868133"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="193.176.205.175"/>
        </slice>
        <from usec="0" sec="1467868112"/>
        <to usec="0" sec="1467868119"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="106.241.76.129" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867944"/>
        <to usec="0" sec="1467867945"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="72.12.123.114" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868172"/>
        <to usec="0" sec="1467868196"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="201.66.220.174" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868454"/>
        <to usec="0" sec="1467868455"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.8.71.96" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867791"/>
        <to usec="0" sec="1467867799"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.99.164.151"/>
        </slice>
        <from usec="0" sec="1467867912"/>
        <to usec="0" sec="1467867915"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="95.85.21.122" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867761"/>
        <to usec="0" sec="1467867776"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="50.159.38.178" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867953"/>
        <to usec="0" sec="1467867955"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.93.227.3"/>
        </slice>
        <from usec="0" sec="1467867608"/>
        <to usec="0" sec="1467867611"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.1.50.123" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868209"/>
        <to usec="0" sec="1467868226"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="64.74.228.122"/>
        </slice>
        <from usec="0" sec="1467868430"/>
        <to usec="0" sec="1467868442"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="95.138.93.123"/>
        </slice>
        <from usec="0" sec="1467868075"/>
        <to usec="0" sec="1467868084"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="113.94.150.9" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1467868352"/>
        <to usec="0" sec="1467868360"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.142.251.119" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867724"/>
        <to usec="0" sec="1467867734"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="181.234.10.15" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867910"/>
        <to usec="0" sec="1467867932"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="178.110.203.153" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868087"/>
        <to usec="0" sec="1467868095"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="119.61.174.105"/>
        </slice>
        <from usec="0" sec="1467868201"/>
        <to usec="0" sec="1467868211"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="152.54.226.16"/>
        </slice>
        <from usec="0" sec="1467867904"/>
        <to usec="0" sec="1467867912"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.122.156.23" dst_port="53"/>
            <filter src_ip="133.122.156.23" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467868418"/>
        <to usec="0" sec="1467868421"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.184.238.104"/>
        </slice>
        <from usec="0" sec="1467868325"/>
        <to usec="0" sec="1467868328"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.106.201.233"/>
        </slice>
        <from usec="0" sec="1467867912"/>
        <to usec="0" sec="1467867915"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="220.128.85.231" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868369"/>
        <to usec="0" sec="1467868370"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.246.19.231" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867692"/>
        <to usec="0" sec="1467867697"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.4.13.28" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867805"/>
        <to usec="0" sec="1467867814"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="41.212.121.145"/>
        </slice>
        <from usec="0" sec="1467867605"/>
        <to usec="0" sec="1467867608"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.184.149.156" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867680"/>
        <to usec="0" sec="1467867691"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="177.207.88.29" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867879"/>
        <to usec="0" sec="1467867881"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.94.124.147" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867709"/>
        <to usec="0" sec="1467867713"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="78.180.112.224" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868300"/>
        <to usec="0" sec="1467868339"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="59.183.43.95" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867779"/>
        <to usec="0" sec="1467867786"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.13.201.191" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867754"/>
        <to usec="0" sec="1467867762"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="103.144.27.167" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867952"/>
        <to usec="0" sec="1467867954"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.77.108.58"/>
        </slice>
        <from usec="0" sec="1467867795"/>
        <to usec="0" sec="1467867810"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.213.116.68" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867696"/>
        <to usec="0" sec="1467867710"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="177.45.37.199"/>
        </slice>
        <from usec="0" sec="1467868115"/>
        <to usec="0" sec="1467868142"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="108.243.14.62" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868152"/>
        <to usec="0" sec="1467868153"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="49.58.22.49" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867747"/>
        <to usec="0" sec="1467867755"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.33.222.63" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867811"/>
        <to usec="0" sec="1467867812"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.9.224.210" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868488"/>
        <to usec="0" sec="1467868500"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.147.79.79" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868255"/>
        <to usec="0" sec="1467868267"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="14.59.23.63"/>
        </slice>
        <from usec="0" sec="1467868053"/>
        <to usec="0" sec="1467868088"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="190.116.159.198" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868499"/>
        <to usec="0" sec="1467868501"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="119.61.138.57" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867926"/>
        <to usec="0" sec="1467867932"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.117.157.62" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868007"/>
        <to usec="0" sec="1467868017"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="150.12.56.69" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868117"/>
        <to usec="0" sec="1467868118"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.243.169.222" dst_ip="17.124.25.218" dst_port="443"/>
            <filter src_ip="202.243.169.222" dst_ip="17.124.64.145" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867917"/>
        <to usec="0" sec="1467867922"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.237.184.3" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868052"/>
        <to usec="0" sec="1467868056"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="179.143.99.68"/>
        </slice>
        <from usec="0" sec="1467868416"/>
        <to usec="0" sec="1467868427"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.178.126.64"/>
        </slice>
        <from usec="0" sec="1467868090"/>
        <to usec="0" sec="1467868093"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.158.60.72" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867765"/>
        <to usec="0" sec="1467867767"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="37.48.158.54"/>
        </slice>
        <from usec="0" sec="1467868031"/>
        <to usec="0" sec="1467868271"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.5.30.112"/>
        </slice>
        <from usec="0" sec="1467868295"/>
        <to usec="0" sec="1467868306"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.45.226.231" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867907"/>
        <to usec="0" sec="1467867919"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="179.147.215.157" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867712"/>
        <to usec="0" sec="1467867713"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="94.68.0.93"/>
        </slice>
        <from usec="0" sec="1467868471"/>
        <to usec="0" sec="1467868484"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.222.86.20" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868092"/>
        <to usec="0" sec="1467868107"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="179.151.151.231" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868138"/>
        <to usec="0" sec="1467868140"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="77.75.122.85" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868180"/>
        <to usec="0" sec="1467868182"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.50.154.36"/>
        </slice>
        <from usec="0" sec="1467867621"/>
        <to usec="0" sec="1467867623"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="120.249.231.157" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867814"/>
        <to usec="0" sec="1467867824"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="61.217.124.32" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868230"/>
        <to usec="0" sec="1467868245"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="103.189.91.37"/>
        </slice>
        <from usec="0" sec="1467867843"/>
        <to usec="0" sec="1467867863"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="187.40.250.125"/>
        </slice>
        <from usec="0" sec="1467867854"/>
        <to usec="0" sec="1467867868"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="58.157.158.78"/>
        </slice>
        <from usec="0" sec="1467868143"/>
        <to usec="0" sec="1467868151"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.94.110.20"/>
        </slice>
        <from usec="0" sec="1467867845"/>
        <to usec="0" sec="1467867858"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="162.2.100.51" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868274"/>
        <to usec="0" sec="1467868289"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.34.111.87"/>
        </slice>
        <from usec="0" sec="1467867690"/>
        <to usec="0" sec="1467867696"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="121.238.183.0"/>
        </slice>
        <from usec="0" sec="1467867696"/>
        <to usec="0" sec="1467867728"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="193.253.57.30" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868347"/>
        <to usec="0" sec="1467868357"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="183.171.127.206"/>
        </slice>
        <from usec="0" sec="1467867714"/>
        <to usec="0" sec="1467867724"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="109.166.242.15" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467868144"/>
        <to usec="0" sec="1467868145"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.178.116.138"/>
        </slice>
        <from usec="0" sec="1467868108"/>
        <to usec="0" sec="1467868111"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="189.191.219.131" dst_ip="189.191.219.131" src_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867910"/>
        <to usec="0" sec="1467867911"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,011,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="177.214.16.33" src_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867910"/>
        <to usec="0" sec="1467867911"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.122.241.122"/>
        </slice>
        <from usec="0" sec="1467868251"/>
        <to usec="0" sec="1467868254"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.50.71.116"/>
        </slice>
        <from usec="0" sec="1467867631"/>
        <to usec="0" sec="1467867633"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.35.123.232"/>
        </slice>
        <from usec="0" sec="1467867866"/>
        <to usec="0" sec="1467867868"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.178.115.157" src_port="25"/>
            <filter src_ip="203.178.115.157" dst_ip="172.208.200.44" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867735"/>
        <to usec="0" sec="1467868292"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="202.243.169.41" dst_port="443"/>
            <filter dst_ip="173.240.200.175" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467868151"/>
        <to usec="0" sec="1467868279"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="23.34.132.137" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467868406"/>
        <to usec="0" sec="1467868495"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.122.157.41" dst_port="8443"/>
            <filter src_ip="133.122.157.41" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867759"/>
        <to usec="0" sec="1467868491"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="49.140.231.31"/>
        </slice>
        <from usec="0" sec="1467867763"/>
        <to usec="0" sec="1467867765"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.122.244.23"/>
        </slice>
        <from usec="0" sec="1467868082"/>
        <to usec="0" sec="1467868189"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.50.52.24"/>
        </slice>
        <from usec="0" sec="1467867606"/>
        <to usec="0" sec="1467867608"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.243.168.234"/>
        </slice>
        <from usec="0" sec="1467868066"/>
        <to usec="0" sec="1467868069"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.50.7.41"/>
        </slice>
        <from usec="0" sec="1467867746"/>
        <to usec="0" sec="1467867749"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="104.66.202.214"/>
        </slice>
        <from usec="0" sec="1467867877"/>
        <to usec="0" sec="1467867880"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.212.115.214"/>
        </slice>
        <from usec="0" sec="1467868275"/>
        <to usec="0" sec="1467868278"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.50.20.195"/>
        </slice>
        <from usec="0" sec="1467867867"/>
        <to usec="0" sec="1467867869"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.122.99.66"/>
        </slice>
        <from usec="0" sec="1467867697"/>
        <to usec="0" sec="1467867699"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.243.172.185"/>
        </slice>
        <from usec="0" sec="1467868469"/>
        <to usec="0" sec="1467868471"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="208.245.22.183"/>
        </slice>
        <from usec="0" sec="1467868450"/>
        <to usec="0" sec="1467868453"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.35.68.138"/>
        </slice>
        <from usec="0" sec="1467867683"/>
        <to usec="0" sec="1467867686"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="59.215.96.79"/>
        </slice>
        <from usec="0" sec="1467868052"/>
        <to usec="0" sec="1467868054"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.50.16.174"/>
        </slice>
        <from usec="0" sec="1467867859"/>
        <to usec="0" sec="1467867862"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="130.225.103.37" dst_ip="17.80.32.52" src_port="60320" dst_port="443"/>
            <filter src_ip="130.225.103.37" dst_ip="17.80.32.52" src_port="60319" dst_port="443"/>
            <filter src_ip="130.225.103.37" dst_ip="17.80.32.52" src_port="60318" dst_port="443"/>
            <filter src_ip="130.225.103.37" dst_ip="17.80.32.52" src_port="60317" dst_port="443"/>
            <filter src_ip="130.225.103.37" dst_ip="17.80.203.128" src_port="60223" dst_port="993"/>
        </slice>
        <from usec="0" sec="1467868444"/>
        <to usec="0" sec="1467868447"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.122.124.156"/>
        </slice>
        <from usec="0" sec="1467867617"/>
        <to usec="0" sec="1467867620"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.122.246.162"/>
        </slice>
        <from usec="0" sec="1467868325"/>
        <to usec="0" sec="1467868327"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.111.241.97"/>
        </slice>
        <from usec="0" sec="1467868155"/>
        <to usec="0" sec="1467868168"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.50.13.99"/>
        </slice>
        <from usec="0" sec="1467868490"/>
        <to usec="0" sec="1467868493"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,999,1 1 1 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="192.227.31.152" dst_port="161"/>
            <filter src_ip="192.227.31.152" dst_ip="203.178.122.221" dst_port="53"/>
        </slice>
        <from usec="0" sec="1467867785"/>
        <to usec="0" sec="1467868368"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="171.47.77.78"/>
        </slice>
        <from usec="0" sec="1467867703"/>
        <to usec="0" sec="1467867717"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.106.209.48" dst_ip="17.94.61.233" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467868310"/>
        <to usec="0" sec="1467868313"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.122.245.254"/>
        </slice>
        <from usec="0" sec="1467868080"/>
        <to usec="0" sec="1467868082"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="46.14.177.129"/>
        </slice>
        <from usec="0" sec="1467868206"/>
        <to usec="0" sec="1467868209"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.100.7.249"/>
        </slice>
        <from usec="0" sec="1467868084"/>
        <to usec="0" sec="1467868097"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.184.186.119"/>
        </slice>
        <from usec="0" sec="1467868181"/>
        <to usec="0" sec="1467868184"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="197.208.135.11"/>
        </slice>
        <from usec="0" sec="1467867867"/>
        <to usec="0" sec="1467867869"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.122.99.244"/>
        </slice>
        <from usec="0" sec="1467867631"/>
        <to usec="0" sec="1467867633"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.50.114.23"/>
        </slice>
        <from usec="0" sec="1467867659"/>
        <to usec="0" sec="1467867662"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="188.142.73.224"/>
        </slice>
        <from usec="0" sec="1467868274"/>
        <to usec="0" sec="1467868276"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="80.240.151.234"/>
        </slice>
        <from usec="0" sec="1467867607"/>
        <to usec="0" sec="1467867609"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.50.153.227"/>
        </slice>
        <from usec="0" sec="1467868243"/>
        <to usec="0" sec="1467868246"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.243.171.227"/>
        </slice>
        <from usec="0" sec="1467868137"/>
        <to usec="0" sec="1467868139"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.106.230.37"/>
        </slice>
        <from usec="0" sec="1467867689"/>
        <to usec="0" sec="1467867691"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="42.71.130.203"/>
        </slice>
        <from usec="0" sec="1467867606"/>
        <to usec="0" sec="1467867608"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.122.216.203"/>
        </slice>
        <from usec="0" sec="1467868110"/>
        <to usec="0" sec="1467868112"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.122.241.204"/>
        </slice>
        <from usec="0" sec="1467867757"/>
        <to usec="0" sec="1467867759"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.187.131.163"/>
        </slice>
        <from usec="0" sec="1467868344"/>
        <to usec="0" sec="1467868347"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.35.196.58"/>
        </slice>
        <from usec="0" sec="1467868230"/>
        <to usec="0" sec="1467868233"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="181.237.209.185"/>
        </slice>
        <from usec="0" sec="1467867600"/>
        <to usec="0" sec="1467867607"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="95.58.183.64"/>
        </slice>
        <from usec="0" sec="1467867662"/>
        <to usec="0" sec="1467867675"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.50.115.252"/>
        </slice>
        <from usec="0" sec="1467868430"/>
        <to usec="0" sec="1467868433"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="133.122.134.118"/>
        </slice>
        <from usec="0" sec="1467868176"/>
        <to usec="0" sec="1467868179"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.122.227.203"/>
        </slice>
        <from usec="0" sec="1467867714"/>
        <to usec="0" sec="1467867716"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.122.134.97"/>
        </slice>
        <from usec="0" sec="1467867957"/>
        <to usec="0" sec="1467867960"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.187.182.26"/>
        </slice>
        <from usec="0" sec="1467867823"/>
        <to usec="0" sec="1467867825"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.35.122.47"/>
        </slice>
        <from usec="0" sec="1467868480"/>
        <to usec="0" sec="1467868482"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.122.171.254"/>
        </slice>
        <from usec="0" sec="1467868047"/>
        <to usec="0" sec="1467868050"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="124.41.118.31"/>
        </slice>
        <from usec="0" sec="1467868318"/>
        <to usec="0" sec="1467868321"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.106.9.216"/>
        </slice>
        <from usec="0" sec="1467867682"/>
        <to usec="0" sec="1467867684"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.107.190.253"/>
        </slice>
        <from usec="0" sec="1467867916"/>
        <to usec="0" sec="1467867918"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.178.120.241"/>
        </slice>
        <from usec="0" sec="1467867647"/>
        <to usec="0" sec="1467867650"/>
    </anomaly>
    <anomaly type="notice" value="1.239720,2.779650,999,1 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="133.122.134.240" dst_port="53"/>
        </slice>
        <from usec="0" sec="1467867825"/>
        <to usec="0" sec="1467868420"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="52.129.15.22"/>
        </slice>
        <from usec="0" sec="1467868435"/>
        <to usec="0" sec="1467868437"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="23.32.211.73"/>
        </slice>
        <from usec="0" sec="1467868337"/>
        <to usec="0" sec="1467868339"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.50.154.198" src_port="18327"/>
            <filter src_ip="163.50.154.198" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867602"/>
        <to usec="0" sec="1467868433"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.122.247.146" dst_ip="192.142.5.110" dst_port="443"/>
            <filter src_ip="133.122.247.146" dst_ip="17.66.146.241" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467868193"/>
        <to usec="0" sec="1467868451"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="163.50.56.182"/>
        </slice>
        <from usec="0" sec="1467868412"/>
        <to usec="0" sec="1467868415"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.81.2.69"/>
        </slice>
        <from usec="0" sec="1467867979"/>
        <to usec="0" sec="1467867982"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="54.35.120.26"/>
        </slice>
        <from usec="0" sec="1467867966"/>
        <to usec="0" sec="1467867969"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="23.106.58.109"/>
        </slice>
        <from usec="0" sec="1467867899"/>
        <to usec="0" sec="1467867901"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="202.60.116.253" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868088"/>
        <to usec="0" sec="1467868100"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="163.50.17.98" dst_port="80"/>
            <filter dst_ip="204.80.58.55" dst_port="80"/>
            <filter src_ip="163.50.17.98" dst_ip="192.78.39.26" dst_port="443"/>
            <filter src_ip="163.50.78.96" dst_ip="204.80.58.55" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867801"/>
        <to usec="0" sec="1467868473"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.122.217.2" dst_ip="192.0.0.228" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867725"/>
        <to usec="0" sec="1467868087"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,503,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.95.49.4" dst_ip="163.50.47.18" src_port="80" dst_port="57325"/>
            <filter src_ip="23.95.49.4" dst_ip="163.50.47.18" src_port="80" dst_port="57324"/>
        </slice>
        <from usec="0" sec="1467867798"/>
        <to usec="0" sec="1467868417"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="198.194.200.245" dst_ip="202.243.171.201" src_port="80" dst_port="64107"/>
        </slice>
        <from usec="0" sec="1467867989"/>
        <to usec="0" sec="1467868119"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,504,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="208.207.157.11" dst_ip="163.50.48.144" src_port="443" dst_port="24010"/>
        </slice>
        <from usec="0" sec="1467867885"/>
        <to usec="0" sec="1467868376"/>
    </anomaly>
    <anomaly type="notice" value="1.331100,3.005400,503,0 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="69.19.236.12" dst_ip="163.50.153.61" src_port="80" dst_port="56334"/>
        </slice>
        <from usec="0" sec="1467867686"/>
        <to usec="0" sec="1467867715"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.50.245.19" dst_ip="162.112.219.173" src_port="80"/>
        </slice>
        <from usec="0" sec="1467867735"/>
        <to usec="0" sec="1467868490"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="23.124.107.232" dst_ip="202.243.169.162" src_port="80" dst_port="57074"/>
        </slice>
        <from usec="0" sec="1467867768"/>
        <to usec="0" sec="1467867809"/>
    </anomaly>
    <anomaly type="notice" value="1.331100,3.005400,503,0 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="211.109.106.237" dst_ip="202.243.179.244" src_port="80" dst_port="53131" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867608"/>
        <to usec="0" sec="1467867609"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.213.71.239" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867966"/>
        <to usec="0" sec="1467867991"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,504,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="8.15.217.31" dst_ip="202.243.64.108" src_port="443" dst_port="58566"/>
        </slice>
        <from usec="0" sec="1467868089"/>
        <to usec="0" sec="1467868091"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="210.111.126.238" dst_ip="40.53.29.20" src_port="59368" dst_port="50004"/>
        </slice>
        <from usec="0" sec="1467867643"/>
        <to usec="0" sec="1467868427"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.50.245.31" dst_ip="207.173.118.117" src_port="80"/>
        </slice>
        <from usec="0" sec="1467868098"/>
        <to usec="0" sec="1467868498"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="111.241.139.39" dst_ip="202.243.168.205" src_port="443"/>
        </slice>
        <from usec="0" sec="1467868308"/>
        <to usec="0" sec="1467868471"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="113.69.201.38" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867944"/>
        <to usec="0" sec="1467867967"/>
    </anomaly>
    <anomaly type="notice" value="2.024510,3.148160,999,1 0 0 0 0 0 0 0 1 0 0 0,mptmp">
        <slice>
            <filter dst_ip="17.106.216.46"/>
            <filter src_ip="157.35.254.210" dst_port="443"/>
            <filter src_ip="157.35.254.213" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867604"/>
        <to usec="0" sec="1467868501"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.26.90.195" dst_ip="202.249.77.61" src_port="443" dst_port="50406"/>
        </slice>
        <from usec="0" sec="1467868179"/>
        <to usec="0" sec="1467868183"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,504,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="104.166.10.40" dst_ip="202.243.64.108" src_port="443" dst_port="55356"/>
        </slice>
        <from usec="0" sec="1467868369"/>
        <to usec="0" sec="1467868371"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="123.193.7.41" dst_ip="163.50.56.168" src_port="58427" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867766"/>
        <to usec="0" sec="1467867773"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="61.71.148.197" dst_ip="202.243.169.247" src_port="80"/>
        </slice>
        <from usec="0" sec="1467867793"/>
        <to usec="0" sec="1467868050"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,999,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.106.62.203" dst_ip="17.113.93.15" src_port="51242" dst_port="25"/>
        </slice>
        <from usec="0" sec="1467867960"/>
        <to usec="0" sec="1467867966"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.50.154.221" dst_port="80"/>
            <filter src_ip="163.50.154.221" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867892"/>
        <to usec="0" sec="1467868429"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="126.7.250.49" dst_ip="203.178.123.94" src_port="20989" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467868117"/>
        <to usec="0" sec="1467868473"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="54.56.253.70" dst_ip="202.243.169.109" src_port="443" dst_port="50070"/>
        </slice>
        <from usec="0" sec="1467867958"/>
        <to usec="0" sec="1467867970"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.122.241.67" dst_ip="31.18.130.197" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867717"/>
        <to usec="0" sec="1467867786"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.243.170.182" dst_ip="14.101.37.234" dst_port="80"/>
            <filter src_ip="202.243.170.182" dst_ip="163.73.79.222" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867606"/>
        <to usec="0" sec="1467867844"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="217.167.58.136" dst_ip="163.50.144.102" src_port="80"/>
        </slice>
        <from usec="0" sec="1467867960"/>
        <to usec="0" sec="1467867971"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.178.116.138" dst_ip="164.155.65.78" src_port="80" dst_port="47406"/>
        </slice>
        <from usec="0" sec="1467868491"/>
        <to usec="0" sec="1467868493"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,503,1 1 1 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="163.50.71.112" dst_ip="38.149.35.34" src_port="55657" dst_port="80"/>
            <filter src_ip="133.122.247.114" dst_ip="38.149.35.34" src_port="49879" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867709"/>
        <to usec="0" sec="1467867747"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.219.107.142" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867671"/>
        <to usec="0" sec="1467867683"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.166.79.165" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867850"/>
        <to usec="0" sec="1467867882"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.122.124.155" dst_ip="52.168.103.104" dst_port="443"/>
            <filter src_ip="133.122.124.155" dst_ip="52.160.184.178" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467868085"/>
        <to usec="0" sec="1467868086"/>
    </anomaly>
    <anomaly type="notice" value="1.279450,2.757570,503,1 1 1 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="163.50.5.100" dst_port="443"/>
            <filter src_ip="163.50.5.100" dst_port="80"/>
            <filter dst_ip="111.226.149.131" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867768"/>
        <to usec="0" sec="1467868428"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="23.86.162.159" dst_ip="163.50.154.100" src_port="443"/>
        </slice>
        <from usec="0" sec="1467867874"/>
        <to usec="0" sec="1467868457"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="124.41.95.89" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868141"/>
        <to usec="0" sec="1467868168"/>
    </anomaly>
    <anomaly type="notice" value="1.331100,3.005400,010,0 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="218.149.171.70" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868215"/>
        <to usec="0" sec="1467868238"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,999,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="210.121.154.89" dst_ip="203.178.119.215" src_port="39147" dst_port="25"/>
        </slice>
        <from usec="0" sec="1467868194"/>
        <to usec="0" sec="1467868197"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,999,1 1 1 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.50.160.119" dst_port="25"/>
        </slice>
        <from usec="0" sec="1467867666"/>
        <to usec="0" sec="1467868495"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,502,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="119.40.56.162" dst_ip="203.178.124.76" src_port="60073" dst_port="22"/>
        </slice>
        <from usec="0" sec="1467867608"/>
        <to usec="0" sec="1467868226"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,504,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="208.223.51.154" dst_ip="163.50.105.110" src_port="443" dst_port="51768"/>
        </slice>
        <from usec="0" sec="1467867801"/>
        <to usec="0" sec="1467867803"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.50.238.155" dst_ip="108.165.248.231" src_port="80" dst_port="53433"/>
        </slice>
        <from usec="0" sec="1467867781"/>
        <to usec="0" sec="1467867783"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,504,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="151.94.248.142" dst_ip="202.243.168.80" src_port="443" dst_port="57365"/>
        </slice>
        <from usec="0" sec="1467868358"/>
        <to usec="0" sec="1467868361"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.122.132.127" src_port="25"/>
            <filter src_ip="133.122.132.127" dst_ip="198.96.54.222" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867600"/>
        <to usec="0" sec="1467868493"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="120.165.228.123" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867644"/>
        <to usec="0" sec="1467867649"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.92.176.249" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867917"/>
        <to usec="0" sec="1467867928"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="210.112.36.247" dst_ip="202.243.169.6" src_port="443" dst_port="56206"/>
        </slice>
        <from usec="0" sec="1467868032"/>
        <to usec="0" sec="1467868453"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="88.71.56.246" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868186"/>
        <to usec="0" sec="1467868230"/>
    </anomaly>
    <anomaly type="notice" value="1.460660,2.770800,504,1 1 1 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="199.172.33.88" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="27.252.154.103" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867601"/>
        <to usec="0" sec="1467868206"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="23.86.162.93" dst_ip="202.243.170.96" src_port="443" dst_port="52786"/>
        </slice>
        <from usec="0" sec="1467867802"/>
        <to usec="0" sec="1467867844"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.122.242.57" dst_ip="173.209.183.176" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867986"/>
        <to usec="0" sec="1467868476"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="59.216.152.162" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868182"/>
        <to usec="0" sec="1467868194"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,503,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="118.37.78.74" dst_ip="203.178.118.83" src_port="48701" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867616"/>
        <to usec="0" sec="1467867617"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,504,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="69.248.131.177" dst_ip="163.50.152.154" src_port="443" dst_port="63577"/>
        </slice>
        <from usec="0" sec="1467867649"/>
        <to usec="0" sec="1467868371"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.122.172.205" dst_ip="188.99.4.140" src_port="64106" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867677"/>
        <to usec="0" sec="1467868361"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.63.183.198" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867601"/>
        <to usec="0" sec="1467868433"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,053,1 1 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="133.122.247.206" dst_ip="31.18.134.97" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867722"/>
        <to usec="0" sec="1467868501"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="184.186.249.197" dst_ip="163.50.155.171" src_port="443" dst_port="52360"/>
            <filter src_ip="184.186.249.197" dst_ip="163.50.155.171" src_port="443" dst_port="52359"/>
            <filter src_ip="184.186.249.197" dst_ip="163.50.155.171" src_port="443" dst_port="52358"/>
            <filter src_ip="184.186.249.197" dst_ip="163.50.155.171" src_port="443" dst_port="52357"/>
            <filter src_ip="184.186.249.197" dst_ip="163.50.155.171" src_port="443" dst_port="52356"/>
        </slice>
        <from usec="0" sec="1467867968"/>
        <to usec="0" sec="1467867969"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.207.180.120" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867775"/>
        <to usec="0" sec="1467867780"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="188.230.236.62" dst_ip="163.50.8.38" src_port="80" dst_port="56547"/>
        </slice>
        <from usec="0" sec="1467867623"/>
        <to usec="0" sec="1467868410"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.9.235.125" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868241"/>
        <to usec="0" sec="1467868254"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.122.232.180" dst_ip="108.167.171.126" src_port="64448" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467868036"/>
        <to usec="0" sec="1467868271"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="155.153.45.78" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867602"/>
        <to usec="0" sec="1467868335"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="61.24.209.145" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867746"/>
        <to usec="0" sec="1467867756"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="151.11.186.108" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868138"/>
        <to usec="0" sec="1467868179"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="100.95.81.154" dst_port="22"/>
        </slice>
        <from usec="0" sec="1467867989"/>
        <to usec="0" sec="1467868001"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="80.244.5.165" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868083"/>
        <to usec="0" sec="1467868107"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="218.152.92.82" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868127"/>
        <to usec="0" sec="1467868138"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="167.206.238.95" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868003"/>
        <to usec="0" sec="1467868015"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.134.62.73" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868089"/>
        <to usec="0" sec="1467868112"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,504,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.86.198.80" dst_ip="202.243.170.57" src_port="443" dst_port="53908"/>
            <filter src_ip="23.86.198.80" dst_ip="202.243.170.57" src_port="443" dst_port="53907"/>
            <filter src_ip="23.86.198.80" dst_ip="202.243.170.57" src_port="443" dst_port="53903"/>
            <filter src_ip="23.86.198.80" dst_ip="202.243.170.57" src_port="443" dst_port="53902"/>
        </slice>
        <from usec="0" sec="1467868464"/>
        <to usec="0" sec="1467868465"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.157.198.246" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868480"/>
        <to usec="0" sec="1467868491"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.122.246.212" dst_ip="17.124.64.149"/>
            <filter src_ip="133.122.246.212" dst_port="443"/>
            <filter src_ip="133.122.233.168" dst_ip="17.124.64.149" dst_port="443"/>
            <filter src_ip="133.122.233.168" dst_ip="17.124.24.44" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467868365"/>
        <to usec="0" sec="1467868431"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="109.138.241.155" dst_ip="202.243.170.116" src_port="11950" dst_port="56199"/>
        </slice>
        <from usec="0" sec="1467868019"/>
        <to usec="0" sec="1467868099"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.194.30.84" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868471"/>
        <to usec="0" sec="1467868483"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="182.8.28.80" dst_ip="202.249.77.61" src_port="80"/>
        </slice>
        <from usec="0" sec="1467867741"/>
        <to usec="0" sec="1467867751"/>
    </anomaly>
    <anomaly type="notice" value="1.836330,2.779880,503,1 0 0 0 0 0 1 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="31.18.156.1" src_port="443"/>
            <filter dst_ip="202.243.64.108" src_port="443"/>
            <filter dst_ip="202.243.64.108" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.331100,3.005400,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="203.178.118.179" dst_ip="203.178.118.179" proto="udp"/>
        </slice>
        <from usec="0" sec="1467867608"/>
        <to usec="0" sec="1467868496"/>
    </anomaly>
    <anomaly type="notice" value="1.331100,3.005400,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="203.178.123.94" dst_ip="203.178.123.94" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867617"/>
        <to usec="0" sec="1467868491"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,504,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="192.25.242.232" dst_ip="163.50.153.93" src_port="443"/>
        </slice>
        <from usec="0" sec="1467868055"/>
        <to usec="0" sec="1467868058"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="68.215.180.169" dst_ip="163.50.78.110" src_port="443"/>
        </slice>
        <from usec="0" sec="1467868184"/>
        <to usec="0" sec="1467868496"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="220.133.130.250" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868163"/>
        <to usec="0" sec="1467868188"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="189.217.5.19" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868417"/>
        <to usec="0" sec="1467868439"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="186.117.23.60" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867656"/>
        <to usec="0" sec="1467867679"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.7.6.201" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868331"/>
        <to usec="0" sec="1467868353"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="109.101.105.81" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868108"/>
        <to usec="0" sec="1467868122"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.9.187.172" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868200"/>
        <to usec="0" sec="1467868212"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.57.175.98" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867824"/>
        <to usec="0" sec="1467867847"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="114.218.29.163" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867727"/>
        <to usec="0" sec="1467867750"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="177.219.104.34" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867643"/>
        <to usec="0" sec="1467867657"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="90.19.90.74" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867753"/>
        <to usec="0" sec="1467867776"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="200.160.194.207" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868356"/>
        <to usec="0" sec="1467868379"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="188.53.130.32" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868291"/>
        <to usec="0" sec="1467868313"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.179.194.249" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867776"/>
        <to usec="0" sec="1467867789"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.28.248.3" src_port="12200" dst_port="48111"/>
            <filter src_ip="36.28.248.3" src_port="12200" dst_port="10200"/>
        </slice>
        <from usec="0" sec="1467868020"/>
        <to usec="0" sec="1467868023"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.239.190.228" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868142"/>
        <to usec="0" sec="1467868155"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="94.128.2.221" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868142"/>
        <to usec="0" sec="1467868165"/>
    </anomaly>
    <anomaly type="notice" value="1.331100,3.005400,010,0 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="109.100.42.186" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867682"/>
        <to usec="0" sec="1467867692"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="95.2.39.154" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867831"/>
        <to usec="0" sec="1467867868"/>
    </anomaly>
    <anomaly type="notice" value="1.279450,2.757570,999,1 1 1 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="216.86.192.71" src_port="40401" dst_port="161"/>
        </slice>
        <from usec="0" sec="1467868181"/>
        <to usec="0" sec="1467868501"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="31.161.123.145" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867828"/>
        <to usec="0" sec="1467867854"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="111.200.86.107" src_port="12200" dst_port="10200"/>
        </slice>
        <from usec="0" sec="1467868462"/>
        <to usec="0" sec="1467868491"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.153.111.94" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868185"/>
        <to usec="0" sec="1467868196"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.65.245.127" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868169"/>
        <to usec="0" sec="1467868182"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="58.80.82.122" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868030"/>
        <to usec="0" sec="1467868042"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.130.228.1" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868435"/>
        <to usec="0" sec="1467868445"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.29.68.7" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868371"/>
        <to usec="0" sec="1467868395"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="61.251.119.7" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867662"/>
        <to usec="0" sec="1467867676"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.191.156.253" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867847"/>
        <to usec="0" sec="1467867867"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.9.60.253" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868347"/>
        <to usec="0" sec="1467868359"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.211.22.250" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867743"/>
        <to usec="0" sec="1467867773"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.43.6.253" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868075"/>
        <to usec="0" sec="1467868088"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.233.136.253" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867675"/>
        <to usec="0" sec="1467867688"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="210.202.0.253" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868239"/>
        <to usec="0" sec="1467868251"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.131.194.253" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867665"/>
        <to usec="0" sec="1467867677"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="190.119.207.4" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867942"/>
        <to usec="0" sec="1467867965"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="94.207.60.252" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868172"/>
        <to usec="0" sec="1467868193"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.147.56.3" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868463"/>
        <to usec="0" sec="1467868476"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.95.37.3" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868402"/>
        <to usec="0" sec="1467868418"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="179.3.190.252" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867764"/>
        <to usec="0" sec="1467867786"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="180.11.32.5" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867601"/>
        <to usec="0" sec="1467868036"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.37.110.251" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867754"/>
        <to usec="0" sec="1467867767"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="77.106.170.248" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867788"/>
        <to usec="0" sec="1467867800"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.177.129.7" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868291"/>
        <to usec="0" sec="1467868305"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.187.158.253" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868125"/>
        <to usec="0" sec="1467868153"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.27.160.5" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868121"/>
        <to usec="0" sec="1467868156"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="179.147.233.3" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868476"/>
        <to usec="0" sec="1467868489"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="80.19.26.251" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867673"/>
        <to usec="0" sec="1467867684"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="188.131.1.0" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867601"/>
        <to usec="0" sec="1467867624"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="125.221.42.250" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868401"/>
        <to usec="0" sec="1467868425"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="218.74.71.6" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868164"/>
        <to usec="0" sec="1467868186"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.13.192.4" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868019"/>
        <to usec="0" sec="1467868032"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="179.71.199.4" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868088"/>
        <to usec="0" sec="1467868112"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="221.94.6.253" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867884"/>
        <to usec="0" sec="1467867912"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="79.82.41.1" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867707"/>
        <to usec="0" sec="1467867731"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.45.57.6" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868146"/>
        <to usec="0" sec="1467868159"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.75.145.249" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867944"/>
        <to usec="0" sec="1467867958"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="67.79.176.6" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868237"/>
        <to usec="0" sec="1467868275"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.111.30.253" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867881"/>
        <to usec="0" sec="1467867895"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="182.188.129.4" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868396"/>
        <to usec="0" sec="1467868424"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.133.2.246" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867603"/>
        <to usec="0" sec="1467867605"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="190.244.164.246" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467868035"/>
        <to usec="0" sec="1467868046"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="200.115.200.247" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868082"/>
        <to usec="0" sec="1467868093"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="108.130.125.8" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867728"/>
        <to usec="0" sec="1467867746"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="200.177.50.247" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868208"/>
        <to usec="0" sec="1467868233"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.84.144.246" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867836"/>
        <to usec="0" sec="1467867847"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="110.59.156.246" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868354"/>
        <to usec="0" sec="1467868396"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="220.132.110.247" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868016"/>
        <to usec="0" sec="1467868039"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.9.198.246" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467867720"/>
        <to usec="0" sec="1467867729"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="152.54.43.8" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867734"/>
        <to usec="0" sec="1467867753"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,502,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="91.231.160.245" dst_port="22"/>
        </slice>
        <from usec="0" sec="1467868117"/>
        <to usec="0" sec="1467868471"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="78.166.84.10" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867986"/>
        <to usec="0" sec="1467868008"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.110.74.245" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868357"/>
        <to usec="0" sec="1467868371"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="220.133.46.245" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867692"/>
        <to usec="0" sec="1467867704"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="219.243.113.11" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868466"/>
        <to usec="0" sec="1467868478"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.55.74.244" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868411"/>
        <to usec="0" sec="1467868424"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="183.138.167.11" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867680"/>
        <to usec="0" sec="1467867719"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="181.40.52.243" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867685"/>
        <to usec="0" sec="1467867736"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="189.124.164.241" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868125"/>
        <to usec="0" sec="1467868164"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.166.75.12" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867661"/>
        <to usec="0" sec="1467867665"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.226.52.13" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467867830"/>
        <to usec="0" sec="1467867840"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="220.135.62.241" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868101"/>
        <to usec="0" sec="1467868147"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="189.84.204.241" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867748"/>
        <to usec="0" sec="1467867769"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="217.105.98.241" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868407"/>
        <to usec="0" sec="1467868436"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="220.35.193.14" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867841"/>
        <to usec="0" sec="1467867866"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.170.17.13" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867769"/>
        <to usec="0" sec="1467867782"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="121.210.252.12" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868263"/>
        <to usec="0" sec="1467868274"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.70.106.240" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868437"/>
        <to usec="0" sec="1467868463"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.185.37.24" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868075"/>
        <to usec="0" sec="1467868087"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.53.50.231" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867924"/>
        <to usec="0" sec="1467867950"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.176.191.16" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868254"/>
        <to usec="0" sec="1467868265"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="79.239.123.233" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868004"/>
        <to usec="0" sec="1467868015"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="95.156.168.225" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867603"/>
        <to usec="0" sec="1467867624"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.124.37.16" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868267"/>
        <to usec="0" sec="1467868290"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.7.236.231" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868094"/>
        <to usec="0" sec="1467868109"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="61.155.66.29" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868298"/>
        <to usec="0" sec="1467868310"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="93.198.121.237" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868427"/>
        <to usec="0" sec="1467868451"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="190.154.117.226" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867784"/>
        <to usec="0" sec="1467867807"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="187.190.87.237" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868169"/>
        <to usec="0" sec="1467868171"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.97.59.226" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868396"/>
        <to usec="0" sec="1467868420"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="217.92.136.236" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868240"/>
        <to usec="0" sec="1467868263"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="94.109.106.19" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467868409"/>
        <to usec="0" sec="1467868419"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.37.177.19" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868106"/>
        <to usec="0" sec="1467868118"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.49.183.228" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867884"/>
        <to usec="0" sec="1467867895"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.178.57.19" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868142"/>
        <to usec="0" sec="1467868155"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.158.150.238" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868291"/>
        <to usec="0" sec="1467868304"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="115.24.78.232" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868263"/>
        <to usec="0" sec="1467868301"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.152.99.234" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867918"/>
        <to usec="0" sec="1467867931"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="109.99.181.30" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867672"/>
        <to usec="0" sec="1467867684"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.191.206.227" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867666"/>
        <to usec="0" sec="1467867680"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="58.208.36.236" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467868155"/>
        <to usec="0" sec="1467868167"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="81.45.234.25" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868091"/>
        <to usec="0" sec="1467868104"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.252.80.25" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867781"/>
        <to usec="0" sec="1467867816"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.198.234.235" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867610"/>
        <to usec="0" sec="1467867626"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.199.119.229" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867861"/>
        <to usec="0" sec="1467867872"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.237.155.239" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868429"/>
        <to usec="0" sec="1467868446"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="190.246.97.17" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868329"/>
        <to usec="0" sec="1467868352"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="176.255.95.21" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868157"/>
        <to usec="0" sec="1467868159"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="78.68.218.224" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868299"/>
        <to usec="0" sec="1467868323"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="79.82.45.22" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868146"/>
        <to usec="0" sec="1467868169"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="109.253.120.239" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867636"/>
        <to usec="0" sec="1467867648"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.184.18.231" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867823"/>
        <to usec="0" sec="1467867836"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.88.135.23" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868343"/>
        <to usec="0" sec="1467868362"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="74.29.93.230" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868325"/>
        <to usec="0" sec="1467868337"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="189.60.52.25" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467867768"/>
        <to usec="0" sec="1467867777"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="187.13.236.233" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467867771"/>
        <to usec="0" sec="1467867779"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="211.93.217.22" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868495"/>
        <to usec="0" sec="1467868501"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="131.222.159.22" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868224"/>
        <to usec="0" sec="1467868252"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="87.210.218.231" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868020"/>
        <to usec="0" sec="1467868030"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="190.29.136.23" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867743"/>
        <to usec="0" sec="1467867765"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.141.225.25" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867713"/>
        <to usec="0" sec="1467867725"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="103.186.174.234" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868395"/>
        <to usec="0" sec="1467868407"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.137.7.26" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868178"/>
        <to usec="0" sec="1467868202"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.53.108.234" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867695"/>
        <to usec="0" sec="1467867718"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.144.157.21" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868196"/>
        <to usec="0" sec="1467868207"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="78.9.17.21" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867822"/>
        <to usec="0" sec="1467867846"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="177.147.115.234" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868417"/>
        <to usec="0" sec="1467868441"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="200.130.78.234" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867855"/>
        <to usec="0" sec="1467867892"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.84.81.26" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868372"/>
        <to usec="0" sec="1467868395"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="220.134.39.20" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868149"/>
        <to usec="0" sec="1467868172"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.79.238.225" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868080"/>
        <to usec="0" sec="1467868090"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.193.134.224" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867955"/>
        <to usec="0" sec="1467867979"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.14.141.28" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467867600"/>
        <to usec="0" sec="1467867611"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="49.150.49.19" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868019"/>
        <to usec="0" sec="1467868032"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="194.178.61.17" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867891"/>
        <to usec="0" sec="1467867924"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="191.181.90.29" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467867946"/>
        <to usec="0" sec="1467867957"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="92.242.129.17" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868196"/>
        <to usec="0" sec="1467868224"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="89.136.91.238" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868454"/>
        <to usec="0" sec="1467868467"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="59.130.65.17" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868108"/>
        <to usec="0" sec="1467868121"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="177.145.225.17" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867820"/>
        <to usec="0" sec="1467867845"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.45.57.17" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867709"/>
        <to usec="0" sec="1467867722"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="216.122.170.225" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867914"/>
        <to usec="0" sec="1467867928"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.148.44.17" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868214"/>
        <to usec="0" sec="1467868226"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="86.134.197.227" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868037"/>
        <to usec="0" sec="1467868050"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.214.198.239" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868491"/>
        <to usec="0" sec="1467868498"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.184.21.16" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868289"/>
        <to usec="0" sec="1467868301"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.217.184.224" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868215"/>
        <to usec="0" sec="1467868228"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.55.64.239" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868254"/>
        <to usec="0" sec="1467868262"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.43.221.28" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467867705"/>
        <to usec="0" sec="1467867713"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="112.16.159.223" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868469"/>
        <to usec="0" sec="1467868493"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.14.100.193" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868195"/>
        <to usec="0" sec="1467868207"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.224.160.216" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867913"/>
        <to usec="0" sec="1467867938"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="68.178.15.56" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868003"/>
        <to usec="0" sec="1467868015"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.24.8.223" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867673"/>
        <to usec="0" sec="1467867696"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.225.109.33" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867759"/>
        <to usec="0" sec="1467867788"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="110.57.130.223" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867942"/>
        <to usec="0" sec="1467867953"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="176.42.114.193" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868347"/>
        <to usec="0" sec="1467868369"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.246.65.57" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868065"/>
        <to usec="0" sec="1467868079"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="186.16.163.193" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467867892"/>
        <to usec="0" sec="1467867900"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.134.88.198" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868079"/>
        <to usec="0" sec="1467868096"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.136.173.222" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868111"/>
        <to usec="0" sec="1467868123"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.127.202.217" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867811"/>
        <to usec="0" sec="1467867835"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="139.245.122.218" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868236"/>
        <to usec="0" sec="1467868258"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="83.225.95.34" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868119"/>
        <to usec="0" sec="1467868162"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.43.170.218" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868491"/>
        <to usec="0" sec="1467868501"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="45.254.139.196" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867935"/>
        <to usec="0" sec="1467867963"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="61.138.207.59" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867934"/>
        <to usec="0" sec="1467867955"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.233.155.60" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868023"/>
        <to usec="0" sec="1467868034"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="114.217.173.60" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868427"/>
        <to usec="0" sec="1467868450"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="120.116.43.35" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868057"/>
        <to usec="0" sec="1467868070"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.123.11.217" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868366"/>
        <to usec="0" sec="1467868377"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="101.138.211.32" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867928"/>
        <to usec="0" sec="1467867941"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="27.43.89.63" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868276"/>
        <to usec="0" sec="1467868289"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="109.101.219.192" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868106"/>
        <to usec="0" sec="1467868129"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="91.34.141.217" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867936"/>
        <to usec="0" sec="1467867959"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.170.60.32" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868353"/>
        <to usec="0" sec="1467868365"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="27.181.17.58" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467867683"/>
        <to usec="0" sec="1467867695"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="203.218.4.221" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868158"/>
        <to usec="0" sec="1467868181"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="212.242.133.57" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868031"/>
        <to usec="0" sec="1467868042"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="46.222.236.218" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867633"/>
        <to usec="0" sec="1467867641"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.92.122.198" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867894"/>
        <to usec="0" sec="1467867906"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="220.133.30.217" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868339"/>
        <to usec="0" sec="1467868363"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="120.136.7.216" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867881"/>
        <to usec="0" sec="1467867894"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="77.82.174.219" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867744"/>
        <to usec="0" sec="1467867758"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.42.239.36" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867908"/>
        <to usec="0" sec="1467867921"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.60.118.216" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867854"/>
        <to usec="0" sec="1467867867"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="181.194.200.192" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868484"/>
        <to usec="0" sec="1467868495"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.37.129.39" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867733"/>
        <to usec="0" sec="1467867747"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.45.129.39" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868260"/>
        <to usec="0" sec="1467868270"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="59.183.159.219" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867668"/>
        <to usec="0" sec="1467867676"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="179.233.207.223" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867977"/>
        <to usec="0" sec="1467867991"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="181.197.218.199" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868252"/>
        <to usec="0" sec="1467868274"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="175.83.242.41" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867635"/>
        <to usec="0" sec="1467867651"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="175.239.250.200" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868001"/>
        <to usec="0" sec="1467868014"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.38.153.54" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867918"/>
        <to usec="0" sec="1467867942"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.133.43.214" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467867804"/>
        <to usec="0" sec="1467867816"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.234.119.53" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867631"/>
        <to usec="0" sec="1467867633"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.142.213.42" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867629"/>
        <to usec="0" sec="1467867642"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="179.69.109.202" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868166"/>
        <to usec="0" sec="1467868190"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="120.191.155.42" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467867885"/>
        <to usec="0" sec="1467867897"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.68.167.53" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868038"/>
        <to usec="0" sec="1467868042"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.191.50.213" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867986"/>
        <to usec="0" sec="1467868009"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.152.198.43" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867781"/>
        <to usec="0" sec="1467867793"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.183.204.43" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868236"/>
        <to usec="0" sec="1467868261"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="119.61.94.212" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867606"/>
        <to usec="0" sec="1467867609"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.82.51.52" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867653"/>
        <to usec="0" sec="1467867665"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="186.222.102.203" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868260"/>
        <to usec="0" sec="1467868301"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="58.204.68.203" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868406"/>
        <to usec="0" sec="1467868410"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.19.15.211" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867741"/>
        <to usec="0" sec="1467867771"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.43.150.204" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868426"/>
        <to usec="0" sec="1467868439"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="27.221.153.44" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868345"/>
        <to usec="0" sec="1467868356"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="222.13.94.211" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868191"/>
        <to usec="0" sec="1467868215"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="190.154.79.46" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868047"/>
        <to usec="0" sec="1467868071"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="79.123.212.47" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467867601"/>
        <to usec="0" sec="1467867603"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="111.161.245.50" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867778"/>
        <to usec="0" sec="1467867792"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.79.250.208" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867829"/>
        <to usec="0" sec="1467867841"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="124.133.201.44" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868218"/>
        <to usec="0" sec="1467868236"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.252.159.205" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868378"/>
        <to usec="0" sec="1467868390"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.13.173.47" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868194"/>
        <to usec="0" sec="1467868206"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="220.135.173.207" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868026"/>
        <to usec="0" sec="1467868050"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.114.7.208" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868109"/>
        <to usec="0" sec="1467868133"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.141.38.205" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867870"/>
        <to usec="0" sec="1467867885"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.227.68.50" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868210"/>
        <to usec="0" sec="1467868227"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.210.152.209" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868169"/>
        <to usec="0" sec="1467868184"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="201.194.128.210" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868287"/>
        <to usec="0" sec="1467868344"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="87.48.135.206" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868094"/>
        <to usec="0" sec="1467868109"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="223.247.112.210" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867848"/>
        <to usec="0" sec="1467867862"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="213.2.116.205" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867986"/>
        <to usec="0" sec="1467868001"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.231.64.46" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867739"/>
        <to usec="0" sec="1467867763"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="59.181.74.209" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867997"/>
        <to usec="0" sec="1467868007"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="81.72.75.45" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868203"/>
        <to usec="0" sec="1467868214"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.1.186.205" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868309"/>
        <to usec="0" sec="1467868332"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.178.12.210" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868419"/>
        <to usec="0" sec="1467868434"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="80.231.181.44" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867753"/>
        <to usec="0" sec="1467867765"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.8.58.204" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868248"/>
        <to usec="0" sec="1467868263"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.154.76.204" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868123"/>
        <to usec="0" sec="1467868138"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.224.187.44" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467868430"/>
        <to usec="0" sec="1467868443"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.119.238.207" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868111"/>
        <to usec="0" sec="1467868142"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.254.48.51" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867850"/>
        <to usec="0" sec="1467867862"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="221.58.23.211" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868106"/>
        <to usec="0" sec="1467868119"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.132.225.57" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867887"/>
        <to usec="0" sec="1467867916"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.34.58.214" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867653"/>
        <to usec="0" sec="1467867665"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.180.200.40" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867647"/>
        <to usec="0" sec="1467867658"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="85.226.230.199" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867678"/>
        <to usec="0" sec="1467867696"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="41.169.158.197" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867648"/>
        <to usec="0" sec="1467867662"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="177.133.49.42" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868392"/>
        <to usec="0" sec="1467868393"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="93.192.245.58" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868125"/>
        <to usec="0" sec="1467868148"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.173.121.43" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867747"/>
        <to usec="0" sec="1467867771"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.54.157.52" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868037"/>
        <to usec="0" sec="1467868060"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.132.204.36" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868060"/>
        <to usec="0" sec="1467868071"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.30.216.195" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867938"/>
        <to usec="0" sec="1467867952"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="189.11.154.211" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868239"/>
        <to usec="0" sec="1467868280"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="181.202.150.221" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867772"/>
        <to usec="0" sec="1467867784"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="179.122.118.206" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868062"/>
        <to usec="0" sec="1467868086"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.85.222.192" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867948"/>
        <to usec="0" sec="1467867975"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.176.75.203" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868179"/>
        <to usec="0" sec="1467868192"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="187.233.227.35" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867841"/>
        <to usec="0" sec="1467867864"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="220.50.48.61" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867704"/>
        <to usec="0" sec="1467867716"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.18.44.54" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867738"/>
        <to usec="0" sec="1467867750"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="105.157.28.206" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868250"/>
        <to usec="0" sec="1467868279"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="181.95.66.205" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868093"/>
        <to usec="0" sec="1467868122"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="94.210.85.202" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867915"/>
        <to usec="0" sec="1467867925"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="179.127.118.192" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867730"/>
        <to usec="0" sec="1467867742"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.191.59.39" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867847"/>
        <to usec="0" sec="1467867855"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.26.48.60" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467868054"/>
        <to usec="0" sec="1467868064"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.120.190.199" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867779"/>
        <to usec="0" sec="1467867793"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="189.194.113.41" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867850"/>
        <to usec="0" sec="1467867882"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="220.134.54.217" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867862"/>
        <to usec="0" sec="1467867885"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="114.217.218.55" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868359"/>
        <to usec="0" sec="1467868384"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="189.159.25.40" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867980"/>
        <to usec="0" sec="1467867994"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="27.41.226.54" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867969"/>
        <to usec="0" sec="1467867980"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="62.145.19.58" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867793"/>
        <to usec="0" sec="1467867820"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.156.161.58" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868141"/>
        <to usec="0" sec="1467868172"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="218.109.205.58" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867891"/>
        <to usec="0" sec="1467867903"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.247.51.53" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868272"/>
        <to usec="0" sec="1467868284"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="171.245.219.218" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868327"/>
        <to usec="0" sec="1467868341"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="118.87.114.219" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868148"/>
        <to usec="0" sec="1467868171"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.192.210.207" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867811"/>
        <to usec="0" sec="1467867832"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="81.163.122.207" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867626"/>
        <to usec="0" sec="1467867645"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.238.214.223" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867676"/>
        <to usec="0" sec="1467867701"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.48.98.209" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867885"/>
        <to usec="0" sec="1467867901"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="223.191.141.60" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867962"/>
        <to usec="0" sec="1467867967"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.45.79.223" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867885"/>
        <to usec="0" sec="1467867897"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.112.54.221" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867891"/>
        <to usec="0" sec="1467867903"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.107.187.209" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868326"/>
        <to usec="0" sec="1467868337"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="61.62.44.194" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868212"/>
        <to usec="0" sec="1467868225"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="181.234.22.206" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867696"/>
        <to usec="0" sec="1467867710"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="49.31.169.195" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868462"/>
        <to usec="0" sec="1467868485"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="41.9.200.63" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868237"/>
        <to usec="0" sec="1467868260"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.123.100.135" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867958"/>
        <to usec="0" sec="1467867970"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.40.74.70" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867745"/>
        <to usec="0" sec="1467867757"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="181.237.17.127" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867600"/>
        <to usec="0" sec="1467867609"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.150.27.121" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867707"/>
        <to usec="0" sec="1467867730"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.69.25.71" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867627"/>
        <to usec="0" sec="1467867640"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.200.72.122" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867905"/>
        <to usec="0" sec="1467867923"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.155.156.130" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868022"/>
        <to usec="0" sec="1467868046"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.219.238.189" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868275"/>
        <to usec="0" sec="1467868299"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.176.248.122" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867680"/>
        <to usec="0" sec="1467867703"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.124.212.130" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867737"/>
        <to usec="0" sec="1467867749"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.84.2.187" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467867683"/>
        <to usec="0" sec="1467867695"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="124.253.122.132" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868244"/>
        <to usec="0" sec="1467868279"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="152.46.144.68" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868338"/>
        <to usec="0" sec="1467868341"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.184.21.124" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868257"/>
        <to usec="0" sec="1467868270"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="59.130.0.188" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868378"/>
        <to usec="0" sec="1467868419"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="109.98.25.124" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867917"/>
        <to usec="0" sec="1467867928"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.19.221.126" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868358"/>
        <to usec="0" sec="1467868359"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.68.141.66" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867602"/>
        <to usec="0" sec="1467867613"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="221.47.9.126" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867984"/>
        <to usec="0" sec="1467867995"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="42.61.40.187" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867892"/>
        <to usec="0" sec="1467867897"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.55.231.135" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868027"/>
        <to usec="0" sec="1467868054"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.188.169.69" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868449"/>
        <to usec="0" sec="1467868461"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.51.251.185" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867995"/>
        <to usec="0" sec="1467868020"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.119.87.121" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868374"/>
        <to usec="0" sec="1467868385"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.5.85.70" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867977"/>
        <to usec="0" sec="1467867996"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.219.227.133" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868473"/>
        <to usec="0" sec="1467868485"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.133.142.187" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868018"/>
        <to usec="0" sec="1467868034"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="71.19.84.135" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867916"/>
        <to usec="0" sec="1467867940"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="92.4.68.131" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868053"/>
        <to usec="0" sec="1467868064"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="218.121.208.67" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867730"/>
        <to usec="0" sec="1467867753"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.92.17.71" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867747"/>
        <to usec="0" sec="1467867778"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="94.59.76.137" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868247"/>
        <to usec="0" sec="1467868259"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.121.15.137" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867883"/>
        <to usec="0" sec="1467867895"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="79.252.175.183" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867645"/>
        <to usec="0" sec="1467867667"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.194.87.74" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868479"/>
        <to usec="0" sec="1467868497"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.67.172.181" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868040"/>
        <to usec="0" sec="1467868064"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="90.54.183.176" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867781"/>
        <to usec="0" sec="1467867816"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.96.15.143" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868453"/>
        <to usec="0" sec="1467868470"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.149.152.77" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868391"/>
        <to usec="0" sec="1467868402"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="87.110.205.114" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868454"/>
        <to usec="0" sec="1467868465"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.87.180.114" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867600"/>
        <to usec="0" sec="1467867611"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.101.233.77" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868222"/>
        <to usec="0" sec="1467868234"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.140.53.178" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868003"/>
        <to usec="0" sec="1467868015"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.114.203.79" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868416"/>
        <to usec="0" sec="1467868430"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="190.226.252.76" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867986"/>
        <to usec="0" sec="1467867987"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.45.101.115" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868050"/>
        <to usec="0" sec="1467868063"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="189.247.29.96" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868003"/>
        <to usec="0" sec="1467868027"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="179.22.30.151" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867839"/>
        <to usec="0" sec="1467867882"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="41.9.210.175" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868081"/>
        <to usec="0" sec="1467868095"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="216.239.0.105" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867602"/>
        <to usec="0" sec="1467867610"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="120.140.122.169" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867807"/>
        <to usec="0" sec="1467867819"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="27.61.26.144" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868306"/>
        <to usec="0" sec="1467868322"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="220.131.73.103" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868443"/>
        <to usec="0" sec="1467868467"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.221.248.111" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868249"/>
        <to usec="0" sec="1467868272"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.72.35.111" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867686"/>
        <to usec="0" sec="1467867704"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="37.23.6.144" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867836"/>
        <to usec="0" sec="1467867875"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="177.27.122.173" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868437"/>
        <to usec="0" sec="1467868461"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="41.12.91.93" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868347"/>
        <to usec="0" sec="1467868369"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="185.250.153.90" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867930"/>
        <to usec="0" sec="1467867941"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="88.1.128.165" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867932"/>
        <to usec="0" sec="1467867955"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.198.69.93" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868418"/>
        <to usec="0" sec="1467868441"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="171.179.160.109" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868315"/>
        <to usec="0" sec="1467868324"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="77.161.221.98" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868024"/>
        <to usec="0" sec="1467868047"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.100.236.164" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467868491"/>
        <to usec="0" sec="1467868499"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.120.162.83" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868110"/>
        <to usec="0" sec="1467868121"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="200.149.155.147" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867751"/>
        <to usec="0" sec="1467867763"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="49.4.140.155" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868361"/>
        <to usec="0" sec="1467868389"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.52.221.151" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467868446"/>
        <to usec="0" sec="1467868457"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.100.36.161" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868209"/>
        <to usec="0" sec="1467868211"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.211.218.100" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867692"/>
        <to usec="0" sec="1467867703"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.199.120.168" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868471"/>
        <to usec="0" sec="1467868484"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.51.154.172" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867749"/>
        <to usec="0" sec="1467867764"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.198.42.158" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868253"/>
        <to usec="0" sec="1467868281"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="96.128.210.110" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868351"/>
        <to usec="0" sec="1467868364"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.238.202.162" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868454"/>
        <to usec="0" sec="1467868489"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="85.224.247.101" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868035"/>
        <to usec="0" sec="1467868049"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.167.154.157" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867663"/>
        <to usec="0" sec="1467867677"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.114.142.174" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867661"/>
        <to usec="0" sec="1467867692"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="14.60.148.154" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867976"/>
        <to usec="0" sec="1467867989"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="187.106.79.110" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868215"/>
        <to usec="0" sec="1467868255"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.212.58.149" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868435"/>
        <to usec="0" sec="1467868465"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="190.45.214.165" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868228"/>
        <to usec="0" sec="1467868251"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.25.210.162" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868428"/>
        <to usec="0" sec="1467868453"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.105.16.156" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868462"/>
        <to usec="0" sec="1467868485"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="110.176.226.83" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868362"/>
        <to usec="0" sec="1467868386"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="77.82.103.164" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868133"/>
        <to usec="0" sec="1467868144"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.241.163.83" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867863"/>
        <to usec="0" sec="1467867877"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.21.255.152" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868375"/>
        <to usec="0" sec="1467868386"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.64.11.80" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867601"/>
        <to usec="0" sec="1467867604"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.143.33.103" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868254"/>
        <to usec="0" sec="1467868273"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.195.137.105" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867634"/>
        <to usec="0" sec="1467867644"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.249.86.166" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868068"/>
        <to usec="0" sec="1467868079"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="81.203.58.149" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867999"/>
        <to usec="0" sec="1467868011"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.63.139.154" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867719"/>
        <to usec="0" sec="1467867768"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.43.94.149" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868287"/>
        <to usec="0" sec="1467868298"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="186.131.4.85" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867914"/>
        <to usec="0" sec="1467867959"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="185.247.162.100" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868306"/>
        <to usec="0" sec="1467868317"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.115.39.91" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868417"/>
        <to usec="0" sec="1467868439"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="168.182.205.164" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868073"/>
        <to usec="0" sec="1467868097"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.1.230.155" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868462"/>
        <to usec="0" sec="1467868474"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="186.26.249.108" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867717"/>
        <to usec="0" sec="1467867741"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="179.64.226.174" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467867828"/>
        <to usec="0" sec="1467867840"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="124.130.247.145" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868261"/>
        <to usec="0" sec="1467868273"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="197.209.159.158" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867901"/>
        <to usec="0" sec="1467867926"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.123.253.83" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868468"/>
        <to usec="0" sec="1467868481"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="82.105.206.158" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867862"/>
        <to usec="0" sec="1467867885"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="183.126.4.147" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867687"/>
        <to usec="0" sec="1467867698"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="109.91.109.83" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868481"/>
        <to usec="0" sec="1467868501"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="27.34.22.147" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868061"/>
        <to usec="0" sec="1467868072"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.189.211.146" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868166"/>
        <to usec="0" sec="1467868185"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.71.192.110" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868046"/>
        <to usec="0" sec="1467868056"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.147.202.156" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867767"/>
        <to usec="0" sec="1467867793"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.202.196.173" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868307"/>
        <to usec="0" sec="1467868322"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.141.51.97" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868473"/>
        <to usec="0" sec="1467868484"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.217.234.145" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868120"/>
        <to usec="0" sec="1467868131"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="89.136.34.161" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868303"/>
        <to usec="0" sec="1467868326"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="85.227.213.96" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868226"/>
        <to usec="0" sec="1467868265"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="177.218.118.160" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868319"/>
        <to usec="0" sec="1467868374"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.216.84.163" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867669"/>
        <to usec="0" sec="1467867680"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.42.93.108" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867843"/>
        <to usec="0" sec="1467867854"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.218.1.111" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868452"/>
        <to usec="0" sec="1467868474"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="203.1.89.103" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867953"/>
        <to usec="0" sec="1467867992"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.188.160.158" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868375"/>
        <to usec="0" sec="1467868410"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.29.153.64" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868293"/>
        <to usec="0" sec="1467868305"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.186.67.65" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868307"/>
        <to usec="0" sec="1467868336"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.180.89.126" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467868395"/>
        <to usec="0" sec="1467868408"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.216.245.97" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467867781"/>
        <to usec="0" sec="1467867794"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="58.187.14.191" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868460"/>
        <to usec="0" sec="1467868484"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.98.142.160" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467868207"/>
        <to usec="0" sec="1467868216"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.19.237.135" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867676"/>
        <to usec="0" sec="1467867690"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.161.123.133" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867671"/>
        <to usec="0" sec="1467867682"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.59.109.93" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868286"/>
        <to usec="0" sec="1467868303"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="188.131.89.189" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868252"/>
        <to usec="0" sec="1467868294"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="120.133.107.90" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868247"/>
        <to usec="0" sec="1467868264"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.133.201.92" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868323"/>
        <to usec="0" sec="1467868334"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.184.9.124" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868290"/>
        <to usec="0" sec="1467868292"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="181.234.96.124" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867606"/>
        <to usec="0" sec="1467867608"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.73.164.132" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867843"/>
        <to usec="0" sec="1467867850"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="111.248.222.155" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467867600"/>
        <to usec="0" sec="1467867607"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.81.29.126" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867865"/>
        <to usec="0" sec="1467867875"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="201.0.190.133" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868171"/>
        <to usec="0" sec="1467868207"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="5.10.40.92" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868158"/>
        <to usec="0" sec="1467868169"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.112.36.155" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868099"/>
        <to usec="0" sec="1467868122"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.9.53.121" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868209"/>
        <to usec="0" sec="1467868241"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="188.194.195.101" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868068"/>
        <to usec="0" sec="1467868080"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.81.2.165" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868360"/>
        <to usec="0" sec="1467868372"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.58.239.66" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868461"/>
        <to usec="0" sec="1467868472"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="179.42.196.153" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868474"/>
        <to usec="0" sec="1467868499"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.55.197.89" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868182"/>
        <to usec="0" sec="1467868192"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.131.135.102" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868012"/>
        <to usec="0" sec="1467868023"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.210.96.94" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867704"/>
        <to usec="0" sec="1467867733"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.191.61.102" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868241"/>
        <to usec="0" sec="1467868252"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="84.241.197.161" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867779"/>
        <to usec="0" sec="1467867803"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.23.33.91" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868076"/>
        <to usec="0" sec="1467868116"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.23.126.159" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868212"/>
        <to usec="0" sec="1467868255"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="200.179.19.127" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868476"/>
        <to usec="0" sec="1467868499"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.182.103.123" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868007"/>
        <to usec="0" sec="1467868029"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="220.133.9.120" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867679"/>
        <to usec="0" sec="1467867702"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="41.9.43.86" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867798"/>
        <to usec="0" sec="1467867822"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="189.76.15.87" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868225"/>
        <to usec="0" sec="1467868248"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.36.112.183" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868181"/>
        <to usec="0" sec="1467868192"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.45.143.104" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867937"/>
        <to usec="0" sec="1467867952"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.12.107.118" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867602"/>
        <to usec="0" sec="1467867617"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.1.190.137" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867968"/>
        <to usec="0" sec="1467867979"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="177.208.49.119" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868423"/>
        <to usec="0" sec="1467868439"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="41.46.13.104" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467867707"/>
        <to usec="0" sec="1467867719"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="83.207.218.168" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868089"/>
        <to usec="0" sec="1467868100"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.7.71.72" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867787"/>
        <to usec="0" sec="1467867800"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="89.102.119.150" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868067"/>
        <to usec="0" sec="1467868081"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="213.66.30.150" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868343"/>
        <to usec="0" sec="1467868374"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="89.107.16.182" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868459"/>
        <to usec="0" sec="1467868475"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.176.163.106" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867613"/>
        <to usec="0" sec="1467867624"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.238.174.181" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867616"/>
        <to usec="0" sec="1467867618"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="81.116.144.138" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868282"/>
        <to usec="0" sec="1467868294"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="41.13.218.138" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867781"/>
        <to usec="0" sec="1467867793"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="2.226.135.180" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868057"/>
        <to usec="0" sec="1467868081"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.1.120.180" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867849"/>
        <to usec="0" sec="1467867862"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.134.126.148" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868144"/>
        <to usec="0" sec="1467868163"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.94.91.116" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867759"/>
        <to usec="0" sec="1467867771"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.82.225.116" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868271"/>
        <to usec="0" sec="1467868287"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.142.212.145" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867686"/>
        <to usec="0" sec="1467867709"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="119.61.238.142" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867647"/>
        <to usec="0" sec="1467867659"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="2.6.12.143" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868132"/>
        <to usec="0" sec="1467868158"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="84.89.97.82" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867876"/>
        <to usec="0" sec="1467867878"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.181.215.113" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868197"/>
        <to usec="0" sec="1467868210"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="124.41.101.81" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868000"/>
        <to usec="0" sec="1467868030"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="171.4.215.77" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867675"/>
        <to usec="0" sec="1467867698"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="83.241.204.82" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867719"/>
        <to usec="0" sec="1467867730"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="88.21.34.177" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868094"/>
        <to usec="0" sec="1467868119"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="189.132.140.79" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467868289"/>
        <to usec="0" sec="1467868300"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="117.19.126.143" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867875"/>
        <to usec="0" sec="1467867877"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.188.96.172" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868375"/>
        <to usec="0" sec="1467868387"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="37.240.73.115" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868433"/>
        <to usec="0" sec="1467868445"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="190.246.11.112" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867887"/>
        <to usec="0" sec="1467867910"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.213.98.86" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868490"/>
        <to usec="0" sec="1467868501"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="24.116.239.89" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868359"/>
        <to usec="0" sec="1467868386"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="120.191.186.135" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868346"/>
        <to usec="0" sec="1467868358"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="111.117.149.182" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467868297"/>
        <to usec="0" sec="1467868308"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.90.136.133" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867621"/>
        <to usec="0" sec="1467867632"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="41.213.72.162" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867655"/>
        <to usec="0" sec="1467867669"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.186.160.141" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868407"/>
        <to usec="0" sec="1467868415"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.26.96.181" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867945"/>
        <to usec="0" sec="1467867986"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="123.131.61.98" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867623"/>
        <to usec="0" sec="1467867635"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.131.38.131" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868277"/>
        <to usec="0" sec="1467868288"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.66.208.180" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868244"/>
        <to usec="0" sec="1467868257"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="210.160.24.84" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868430"/>
        <to usec="0" sec="1467868453"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.170.230.164" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867643"/>
        <to usec="0" sec="1467867653"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="175.87.59.69" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867730"/>
        <to usec="0" sec="1467867745"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.188.183.177" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868443"/>
        <to usec="0" sec="1467868456"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="87.240.168.130" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867624"/>
        <to usec="0" sec="1467867685"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.168.78.177" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868408"/>
        <to usec="0" sec="1467868421"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.9.166.172" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867676"/>
        <to usec="0" sec="1467867695"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="189.141.192.108" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867997"/>
        <to usec="0" sec="1467868019"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="37.253.53.71" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867639"/>
        <to usec="0" sec="1467867650"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="78.180.200.81" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867612"/>
        <to usec="0" sec="1467867635"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.100.134.142" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868215"/>
        <to usec="0" sec="1467868226"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="81.217.92.92" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867631"/>
        <to usec="0" sec="1467867633"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.167.35.159" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868165"/>
        <to usec="0" sec="1467868177"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.152.80.109" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867889"/>
        <to usec="0" sec="1467867900"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.38.29.133" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868132"/>
        <to usec="0" sec="1467868144"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="79.82.45.82" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867882"/>
        <to usec="0" sec="1467867900"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.43.250.143" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868084"/>
        <to usec="0" sec="1467868097"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.143.111.153" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868195"/>
        <to usec="0" sec="1467868235"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.187.148.183" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868193"/>
        <to usec="0" sec="1467868206"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="191.184.230.73" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867704"/>
        <to usec="0" sec="1467867730"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.161.52.70" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467868216"/>
        <to usec="0" sec="1467868229"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.219.237.88" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868088"/>
        <to usec="0" sec="1467868100"/>
    </anomaly>
    <anomaly type="notice" value="1.238310,2.758350,999,1 1 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.178.119.219" dst_port="53"/>
        </slice>
        <from usec="0" sec="1467867600"/>
        <to usec="0" sec="1467867646"/>
    </anomaly>
    <anomaly type="notice" value="1.331100,3.005400,010,0 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="89.139.194.136" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867620"/>
        <to usec="0" sec="1467867631"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="181.214.237.101" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868238"/>
        <to usec="0" sec="1467868252"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="210.18.123.106" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867832"/>
        <to usec="0" sec="1467867855"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="179.76.225.90" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868108"/>
        <to usec="0" sec="1467868119"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="119.140.3.181" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867645"/>
        <to usec="0" sec="1467867664"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="181.207.241.117" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868263"/>
        <to usec="0" sec="1467868275"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.187.64.75" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868426"/>
        <to usec="0" sec="1467868444"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="14.58.209.84" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867804"/>
        <to usec="0" sec="1467867862"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="189.97.110.132" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867800"/>
        <to usec="0" sec="1467867824"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.165.224.164" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868445"/>
        <to usec="0" sec="1467868459"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.111.89.93" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867669"/>
        <to usec="0" sec="1467867699"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="92.116.77.172" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868429"/>
        <to usec="0" sec="1467868441"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.196.2.190" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868073"/>
        <to usec="0" sec="1467868087"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="41.113.249.113" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467867822"/>
        <to usec="0" sec="1467867832"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="103.3.156.82" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868425"/>
        <to usec="0" sec="1467868448"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.174.30.160" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868328"/>
        <to usec="0" sec="1467868341"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.113.54.129" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868157"/>
        <to usec="0" sec="1467868223"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.154.102.189" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867721"/>
        <to usec="0" sec="1467867748"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.198.188.141" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867721"/>
        <to usec="0" sec="1467867888"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.84.86.141" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867864"/>
        <to usec="0" sec="1467867869"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.134.24.110" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868304"/>
        <to usec="0" sec="1467868321"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="171.173.47.160" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867767"/>
        <to usec="0" sec="1467867772"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="79.66.185.79" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867917"/>
        <to usec="0" sec="1467867928"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.131.153.67" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868198"/>
        <to usec="0" sec="1467868208"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.187.191.143" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868468"/>
        <to usec="0" sec="1467868479"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.131.235.112" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867943"/>
        <to usec="0" sec="1467867976"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="92.61.127.126" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868381"/>
        <to usec="0" sec="1467868390"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="120.137.79.249" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867914"/>
        <to usec="0" sec="1467867925"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.9.29.134" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867602"/>
        <to usec="0" sec="1467867634"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="118.180.251.121" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467868233"/>
        <to usec="0" sec="1467868245"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="109.164.48.249" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868456"/>
        <to usec="0" sec="1467868479"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="115.51.34.0" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868164"/>
        <to usec="0" sec="1467868176"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="182.181.137.248" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867904"/>
        <to usec="0" sec="1467867937"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="46.222.235.253" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867987"/>
        <to usec="0" sec="1467868011"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.12.105.133" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867948"/>
        <to usec="0" sec="1467867961"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.72.71.133" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868257"/>
        <to usec="0" sec="1467868269"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="175.37.180.122" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867957"/>
        <to usec="0" sec="1467867980"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="187.48.232.125" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467868293"/>
        <to usec="0" sec="1467868309"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.89.9.131" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868488"/>
        <to usec="0" sec="1467868499"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="106.158.211.131" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868159"/>
        <to usec="0" sec="1467868164"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.191.219.131" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867905"/>
        <to usec="0" sec="1467867932"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.134.252.125" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467867956"/>
        <to usec="0" sec="1467867967"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.198.230.126" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868259"/>
        <to usec="0" sec="1467868282"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.62.131.132" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868240"/>
        <to usec="0" sec="1467868252"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.10.70.3" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868101"/>
        <to usec="0" sec="1467868113"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.139.239.132" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868195"/>
        <to usec="0" sec="1467868208"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.32.7.253" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868169"/>
        <to usec="0" sec="1467868192"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.77.10.0" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867847"/>
        <to usec="0" sec="1467867860"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.13.89.252" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867743"/>
        <to usec="0" sec="1467867765"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.38.138.127" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868396"/>
        <to usec="0" sec="1467868409"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.188.130.0" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867652"/>
        <to usec="0" sec="1467867679"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.169.154.7" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868000"/>
        <to usec="0" sec="1467868025"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="77.19.172.120" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867877"/>
        <to usec="0" sec="1467867905"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="177.25.212.125" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867632"/>
        <to usec="0" sec="1467867645"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="183.180.47.129" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868299"/>
        <to usec="0" sec="1467868317"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.117.14.1" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868475"/>
        <to usec="0" sec="1467868487"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="201.37.110.6" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868119"/>
        <to usec="0" sec="1467868141"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="110.33.161.132" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867601"/>
        <to usec="0" sec="1467867618"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="81.188.227.128" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867661"/>
        <to usec="0" sec="1467867673"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="101.227.86.119" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867964"/>
        <to usec="0" sec="1467867996"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.190.159.137" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868449"/>
        <to usec="0" sec="1467868474"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="59.131.6.118" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867783"/>
        <to usec="0" sec="1467867806"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.36.7.9" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867705"/>
        <to usec="0" sec="1467867735"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.191.248.246" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868413"/>
        <to usec="0" sec="1467868426"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="167.206.188.118" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867832"/>
        <to usec="0" sec="1467867857"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.121.186.8" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467868485"/>
        <to usec="0" sec="1467868494"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.20.245.118" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868126"/>
        <to usec="0" sec="1467868138"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.65.244.118" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868453"/>
        <to usec="0" sec="1467868460"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="92.97.61.245" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868481"/>
        <to usec="0" sec="1467868501"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="86.148.205.117" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467867810"/>
        <to usec="0" sec="1467867821"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.140.101.245" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868358"/>
        <to usec="0" sec="1467868369"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="66.53.145.138" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868308"/>
        <to usec="0" sec="1467868331"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.15.172.10" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867636"/>
        <to usec="0" sec="1467867696"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="181.90.202.10" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867608"/>
        <to usec="0" sec="1467867618"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.218.45.245" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867846"/>
        <to usec="0" sec="1467867885"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="92.82.133.11" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868201"/>
        <to usec="0" sec="1467868227"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="118.180.251.116" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868420"/>
        <to usec="0" sec="1467868483"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.124.205.139" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868043"/>
        <to usec="0" sec="1467868073"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="217.152.159.243" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867908"/>
        <to usec="0" sec="1467867919"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="105.156.191.241" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868408"/>
        <to usec="0" sec="1467868418"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="121.104.95.141" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868129"/>
        <to usec="0" sec="1467868170"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="109.104.249.142" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868488"/>
        <to usec="0" sec="1467868500"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="118.214.46.115" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868179"/>
        <to usec="0" sec="1467868215"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="59.222.209.140" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867810"/>
        <to usec="0" sec="1467867835"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.39.78.113" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868050"/>
        <to usec="0" sec="1467868073"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.131.89.242" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867966"/>
        <to usec="0" sec="1467867970"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="152.54.21.141" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867842"/>
        <to usec="0" sec="1467867854"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="59.216.240.15" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867817"/>
        <to usec="0" sec="1467867829"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.126.230.102" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868159"/>
        <to usec="0" sec="1467868161"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="189.217.104.105" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868142"/>
        <to usec="0" sec="1467868153"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="188.183.159.233" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868035"/>
        <to usec="0" sec="1467868051"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.227.96.30" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867705"/>
        <to usec="0" sec="1467867728"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.44.44.225" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868167"/>
        <to usec="0" sec="1467868190"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="222.177.210.97" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868096"/>
        <to usec="0" sec="1467868130"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.220.113.238" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867715"/>
        <to usec="0" sec="1467867742"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="220.133.90.25" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867719"/>
        <to usec="0" sec="1467867731"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="189.66.90.103" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867643"/>
        <to usec="0" sec="1467867656"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.205.209.152" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868081"/>
        <to usec="0" sec="1467868104"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.254.240.234" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867626"/>
        <to usec="0" sec="1467867639"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="195.78.200.109" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868277"/>
        <to usec="0" sec="1467868301"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="59.247.77.146" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867673"/>
        <to usec="0" sec="1467867686"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="188.86.105.157" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867812"/>
        <to usec="0" sec="1467867830"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.33.176.29" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868347"/>
        <to usec="0" sec="1467868358"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="187.136.65.147" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868362"/>
        <to usec="0" sec="1467868386"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="103.32.14.107" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867980"/>
        <to usec="0" sec="1467867999"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="80.188.94.28" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868006"/>
        <to usec="0" sec="1467868029"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="212.192.56.106" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868159"/>
        <to usec="0" sec="1467868164"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.219.103.158" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868132"/>
        <to usec="0" sec="1467868161"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="89.138.8.238" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867848"/>
        <to usec="0" sec="1467867873"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="114.219.227.234" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868302"/>
        <to usec="0" sec="1467868326"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.144.30.110" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868055"/>
        <to usec="0" sec="1467868080"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="82.45.93.232" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868147"/>
        <to usec="0" sec="1467868161"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="189.183.20.147" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868333"/>
        <to usec="0" sec="1467868348"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.97.125.152" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868060"/>
        <to usec="0" sec="1467868078"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="186.237.10.103" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868221"/>
        <to usec="0" sec="1467868320"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="175.55.104.102" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868305"/>
        <to usec="0" sec="1467868350"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.210.111.232" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867656"/>
        <to usec="0" sec="1467867668"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.129.217.153" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868292"/>
        <to usec="0" sec="1467868320"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="59.181.183.103" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868277"/>
        <to usec="0" sec="1467868301"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="105.157.171.151" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868403"/>
        <to usec="0" sec="1467868414"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="201.206.15.230" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867868"/>
        <to usec="0" sec="1467867908"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.122.8.150" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867732"/>
        <to usec="0" sec="1467867755"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="87.46.93.149" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467867805"/>
        <to usec="0" sec="1467867816"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="24.117.14.106" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868385"/>
        <to usec="0" sec="1467868398"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="60.239.218.27" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868398"/>
        <to usec="0" sec="1467868414"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.40.226.109" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867924"/>
        <to usec="0" sec="1467867934"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="222.103.156.108" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867756"/>
        <to usec="0" sec="1467867769"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="139.246.65.237" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867775"/>
        <to usec="0" sec="1467867786"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.35.209.156" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868461"/>
        <to usec="0" sec="1467868489"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="112.17.23.227" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868100"/>
        <to usec="0" sec="1467868114"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="109.62.112.17" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867810"/>
        <to usec="0" sec="1467867821"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="213.2.109.236" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868389"/>
        <to usec="0" sec="1467868412"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="179.36.92.226" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867804"/>
        <to usec="0" sec="1467867823"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.173.173.238" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868464"/>
        <to usec="0" sec="1467868475"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.102.76.111" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867688"/>
        <to usec="0" sec="1467867711"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="110.247.93.157" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868015"/>
        <to usec="0" sec="1467868029"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="189.64.34.30" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867892"/>
        <to usec="0" sec="1467867897"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="190.246.118.98" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867977"/>
        <to usec="0" sec="1467868028"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="114.217.172.30" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867683"/>
        <to usec="0" sec="1467867705"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="83.247.208.146" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467867764"/>
        <to usec="0" sec="1467867774"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.194.155.224" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868128"/>
        <to usec="0" sec="1467868142"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.159.101.223" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868119"/>
        <to usec="0" sec="1467868141"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="186.100.221.71" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467868476"/>
        <to usec="0" sec="1467868480"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.102.102.33" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868440"/>
        <to usec="0" sec="1467868453"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="104.194.1.222" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867601"/>
        <to usec="0" sec="1467867603"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="110.4.126.61" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867791"/>
        <to usec="0" sec="1467867804"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="124.23.136.61" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868479"/>
        <to usec="0" sec="1467868491"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="189.133.103.162" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868132"/>
        <to usec="0" sec="1467868154"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.135.95.218" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868386"/>
        <to usec="0" sec="1467868428"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.134.8.90" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868165"/>
        <to usec="0" sec="1467868190"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="168.178.209.194" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867886"/>
        <to usec="0" sec="1467867926"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.26.18.67" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868284"/>
        <to usec="0" sec="1467868299"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.86.218.60" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467867930"/>
        <to usec="0" sec="1467867940"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="221.132.204.163" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867925"/>
        <to usec="0" sec="1467867954"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="220.132.112.220" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867804"/>
        <to usec="0" sec="1467867828"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="91.216.178.36" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868028"/>
        <to usec="0" sec="1467868039"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.5.229.195" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867833"/>
        <to usec="0" sec="1467867848"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.204.45.196" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867759"/>
        <to usec="0" sec="1467867770"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="191.32.30.92" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868121"/>
        <to usec="0" sec="1467868132"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.52.239.196" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868436"/>
        <to usec="0" sec="1467868462"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="59.204.67.188" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867604"/>
        <to usec="0" sec="1467868500"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="187.165.204.58" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867677"/>
        <to usec="0" sec="1467867701"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.211.224.58" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868239"/>
        <to usec="0" sec="1467868240"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="24.116.34.90" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868170"/>
        <to usec="0" sec="1467868194"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="181.184.154.185" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868250"/>
        <to usec="0" sec="1467868273"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.140.180.192" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868247"/>
        <to usec="0" sec="1467868271"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.180.197.88" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867867"/>
        <to usec="0" sec="1467867890"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.229.132.191" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868080"/>
        <to usec="0" sec="1467868104"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.30.102.57" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867671"/>
        <to usec="0" sec="1467867693"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="217.15.192.33" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867982"/>
        <to usec="0" sec="1467868020"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.244.68.90" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867688"/>
        <to usec="0" sec="1467867743"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.209.78.94" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867821"/>
        <to usec="0" sec="1467867832"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="58.110.161.198" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868192"/>
        <to usec="0" sec="1467868205"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="183.165.220.34" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867740"/>
        <to usec="0" sec="1467867758"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.61.214.61" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868454"/>
        <to usec="0" sec="1467868465"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.131.41.164" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868249"/>
        <to usec="0" sec="1467868259"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.242.149.92" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867837"/>
        <to usec="0" sec="1467867852"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="181.3.73.215" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868110"/>
        <to usec="0" sec="1467868124"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.187.63.72" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867763"/>
        <to usec="0" sec="1467867785"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="190.188.104.55" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867743"/>
        <to usec="0" sec="1467867767"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="109.204.93.55" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868088"/>
        <to usec="0" sec="1467868111"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="79.169.235.201" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867984"/>
        <to usec="0" sec="1467868022"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="119.61.246.41" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867785"/>
        <to usec="0" sec="1467867813"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.31.35.183" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868194"/>
        <to usec="0" sec="1467868204"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="200.178.87.200" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868010"/>
        <to usec="0" sec="1467868022"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="187.102.51.86" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868023"/>
        <to usec="0" sec="1467868049"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="187.46.73.181" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467867907"/>
        <to usec="0" sec="1467867918"/>
    </anomaly>
    <anomaly type="notice" value="1.279450,2.757570,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.107.214.53" dst_port="4028"/>
        </slice>
        <from usec="0" sec="1467867600"/>
        <to usec="0" sec="1467867646"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="187.190.134.84" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868466"/>
        <to usec="0" sec="1467868493"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="193.253.42.43" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868325"/>
        <to usec="0" sec="1467868358"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.187.188.84" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868148"/>
        <to usec="0" sec="1467868159"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="187.74.98.78" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868301"/>
        <to usec="0" sec="1467868324"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.73.211.44" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868320"/>
        <to usec="0" sec="1467868332"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.21.247.49" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867991"/>
        <to usec="0" sec="1467868005"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="95.196.226.76" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867968"/>
        <to usec="0" sec="1467867992"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="181.202.144.206" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867643"/>
        <to usec="0" sec="1467867665"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.100.26.174" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868270"/>
        <to usec="0" sec="1467868282"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="61.31.178.82" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868172"/>
        <to usec="0" sec="1467868195"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.254.123.77" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868338"/>
        <to usec="0" sec="1467868361"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="201.240.134.46" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867849"/>
        <to usec="0" sec="1467867943"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.218.100.177" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867677"/>
        <to usec="0" sec="1467867690"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="94.105.159.174" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868129"/>
        <to usec="0" sec="1467868140"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.32.165.178" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868256"/>
        <to usec="0" sec="1467868268"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.91.140.44" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868469"/>
        <to usec="0" sec="1467868496"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.199.120.76" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868202"/>
        <to usec="0" sec="1467868224"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.88.153.206" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867942"/>
        <to usec="0" sec="1467867973"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.143.238.64" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867917"/>
        <to usec="0" sec="1467867928"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.46.117.88" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867909"/>
        <to usec="0" sec="1467867922"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.126.68.40" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868003"/>
        <to usec="0" sec="1467868015"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.84.71.222" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868231"/>
        <to usec="0" sec="1467868242"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="197.45.215.208" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867603"/>
        <to usec="0" sec="1467867670"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.233.16.90" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868483"/>
        <to usec="0" sec="1467868495"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="180.21.41.205" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868439"/>
        <to usec="0" sec="1467868454"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="190.145.219.194" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867676"/>
        <to usec="0" sec="1467867699"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.76.204.66" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867625"/>
        <to usec="0" sec="1467867636"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="195.137.25.194" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867866"/>
        <to usec="0" sec="1467867878"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="78.178.242.219" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867976"/>
        <to usec="0" sec="1467867987"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="75.44.161.219" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867824"/>
        <to usec="0" sec="1467867840"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.242.201.212" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867940"/>
        <to usec="0" sec="1467867952"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.86.230.204" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867826"/>
        <to usec="0" sec="1467867856"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.133.251.196" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868452"/>
        <to usec="0" sec="1467868466"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="83.154.179.203" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867715"/>
        <to usec="0" sec="1467867741"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="213.90.71.76" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868119"/>
        <to usec="0" sec="1467868133"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.64.232.44" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868162"/>
        <to usec="0" sec="1467868175"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.135.139.198" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467867842"/>
        <to usec="0" sec="1467867855"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.78.146.48" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867952"/>
        <to usec="0" sec="1467867967"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.176.111.45" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867972"/>
        <to usec="0" sec="1467867995"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.129.172.84" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868312"/>
        <to usec="0" sec="1467868327"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.143.28.48" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867647"/>
        <to usec="0" sec="1467867660"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="178.204.239.215" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868372"/>
        <to usec="0" sec="1467868384"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.36.10.41" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867621"/>
        <to usec="0" sec="1467867632"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="219.105.144.173" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868228"/>
        <to usec="0" sec="1467868257"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.1.177.163" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868265"/>
        <to usec="0" sec="1467868276"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.173.232.171" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868372"/>
        <to usec="0" sec="1467868395"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="79.128.211.179" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868000"/>
        <to usec="0" sec="1467868023"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.108.25.180" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867965"/>
        <to usec="0" sec="1467867979"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="92.5.81.170" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867763"/>
        <to usec="0" sec="1467867764"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="200.142.148.94" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868102"/>
        <to usec="0" sec="1467868118"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.218.121.210" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868198"/>
        <to usec="0" sec="1467868200"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="219.107.20.48" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867827"/>
        <to usec="0" sec="1467867838"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.241.99.196" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867979"/>
        <to usec="0" sec="1467867991"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="50.112.234.48" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868098"/>
        <to usec="0" sec="1467868109"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="217.92.137.201" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867976"/>
        <to usec="0" sec="1467868000"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="144.0.191.216" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868103"/>
        <to usec="0" sec="1467868120"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="212.253.154.40" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867958"/>
        <to usec="0" sec="1467867970"/>
    </anomaly>
    <anomaly type="notice" value="1.331100,3.005400,010,0 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.231.160.86" dst_port="22"/>
        </slice>
        <from usec="0" sec="1467867816"/>
        <to usec="0" sec="1467867824"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="81.218.72.55" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868344"/>
        <to usec="0" sec="1467868356"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="193.228.227.199" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868410"/>
        <to usec="0" sec="1467868425"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.41.39.169" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868458"/>
        <to usec="0" sec="1467868467"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="14.230.184.86" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868043"/>
        <to usec="0" sec="1467868065"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.28.177.215" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867857"/>
        <to usec="0" sec="1467867880"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.137.252.57" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868427"/>
        <to usec="0" sec="1467868451"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.184.234.57" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868173"/>
        <to usec="0" sec="1467868181"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.114.148.202" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867738"/>
        <to usec="0" sec="1467867753"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.1.156.202" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867926"/>
        <to usec="0" sec="1467867952"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="81.216.1.170" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868019"/>
        <to usec="0" sec="1467868032"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.47.52.181" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868336"/>
        <to usec="0" sec="1467868337"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="130.134.252.36" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867958"/>
        <to usec="0" sec="1467867970"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.122.3.91" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867662"/>
        <to usec="0" sec="1467867675"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="174.196.255.219" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868483"/>
        <to usec="0" sec="1467868495"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.53.100.50" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867769"/>
        <to usec="0" sec="1467867782"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,011,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="190.220.101.194" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867605"/>
        <to usec="0" sec="1467867606"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="177.88.79.194" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868266"/>
        <to usec="0" sec="1467868292"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.66.209.193" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467868274"/>
        <to usec="0" sec="1467868282"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.1.132.32" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467867819"/>
        <to usec="0" sec="1467867829"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="103.23.104.192" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868230"/>
        <to usec="0" sec="1467868243"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="92.82.60.80" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868257"/>
        <to usec="0" sec="1467868281"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="187.50.32.189" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867970"/>
        <to usec="0" sec="1467867993"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="89.158.207.176" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867987"/>
        <to usec="0" sec="1467868004"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="106.214.208.79" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867832"/>
        <to usec="0" sec="1467867870"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.4.150.94" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867973"/>
        <to usec="0" sec="1467868001"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.137.249.94" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868272"/>
        <to usec="0" sec="1467868285"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="50.181.210.49" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867647"/>
        <to usec="0" sec="1467867658"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.18.250.45" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868287"/>
        <to usec="0" sec="1467868318"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.8.67.174" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868419"/>
        <to usec="0" sec="1467868431"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="222.89.134.177" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868365"/>
        <to usec="0" sec="1467868393"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="70.71.248.81" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467867720"/>
        <to usec="0" sec="1467867730"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.244.249.195" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867636"/>
        <to usec="0" sec="1467867668"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="222.5.99.160" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867757"/>
        <to usec="0" sec="1467867773"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="31.130.185.204" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868030"/>
        <to usec="0" sec="1467868053"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.218.175.47" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868246"/>
        <to usec="0" sec="1467868303"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.176.246.92" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867724"/>
        <to usec="0" sec="1467867735"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="190.162.64.191" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467867950"/>
        <to usec="0" sec="1467867964"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="163.111.189.135" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867920"/>
        <to usec="0" sec="1467867933"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="81.218.106.126" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868403"/>
        <to usec="0" sec="1467868426"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="185.242.57.56" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868399"/>
        <to usec="0" sec="1467868423"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.141.106.6" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867794"/>
        <to usec="0" sec="1467867814"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.172.239.71" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867856"/>
        <to usec="0" sec="1467867885"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="112.97.48.129" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868470"/>
        <to usec="0" sec="1467868493"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.48.106.122" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868378"/>
        <to usec="0" sec="1467868403"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.10.225.130" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868022"/>
        <to usec="0" sec="1467868033"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="190.246.117.132" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868299"/>
        <to usec="0" sec="1467868339"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.238.211.197" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868462"/>
        <to usec="0" sec="1467868474"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="190.244.228.121" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868481"/>
        <to usec="0" sec="1467868493"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="189.240.125.195" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868166"/>
        <to usec="0" sec="1467868188"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.210.116.63" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867795"/>
        <to usec="0" sec="1467867807"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="93.203.195.197" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868052"/>
        <to usec="0" sec="1467868063"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="72.27.203.129" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867687"/>
        <to usec="0" sec="1467867710"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.90.131.186" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867858"/>
        <to usec="0" sec="1467867882"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.156.16.69" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868340"/>
        <to usec="0" sec="1467868351"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.102.71.0" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868206"/>
        <to usec="0" sec="1467868222"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.10.18.60" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868108"/>
        <to usec="0" sec="1467868120"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="222.180.39.184" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868313"/>
        <to usec="0" sec="1467868337"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="221.45.123.6" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867706"/>
        <to usec="0" sec="1467867733"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="110.20.69.190" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868125"/>
        <to usec="0" sec="1467868151"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.23.148.194" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867853"/>
        <to usec="0" sec="1467867883"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="202.97.161.197" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868226"/>
        <to usec="0" sec="1467868249"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="95.2.73.133" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868134"/>
        <to usec="0" sec="1467868157"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.203.234.58" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868466"/>
        <to usec="0" sec="1467868478"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="191.198.114.123" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868272"/>
        <to usec="0" sec="1467868313"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.48.82.137" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867683"/>
        <to usec="0" sec="1467868452"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="118.85.81.136" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867746"/>
        <to usec="0" sec="1467867770"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.80.221.201" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868232"/>
        <to usec="0" sec="1467868243"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="220.0.104.183" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867701"/>
        <to usec="0" sec="1467867712"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="151.41.146.119" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868202"/>
        <to usec="0" sec="1467868246"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="86.197.175.182" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867992"/>
        <to usec="0" sec="1467868025"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.189.242.54" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867882"/>
        <to usec="0" sec="1467867917"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.232.155.74" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867770"/>
        <to usec="0" sec="1467867794"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.210.228.10" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868363"/>
        <to usec="0" sec="1467868375"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.171.95.10" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868414"/>
        <to usec="0" sec="1467868423"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.41.135.181" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867872"/>
        <to usec="0" sec="1467867883"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="177.116.231.117" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868014"/>
        <to usec="0" sec="1467868038"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.130.231.10" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868400"/>
        <to usec="0" sec="1467868430"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="72.250.142.116" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868324"/>
        <to usec="0" sec="1467868347"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="77.109.32.139" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868152"/>
        <to usec="0" sec="1467868163"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.130.185.244" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868098"/>
        <to usec="0" sec="1467868117"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="94.229.102.52" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867735"/>
        <to usec="0" sec="1467867747"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="93.252.161.139" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867782"/>
        <to usec="0" sec="1467867805"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.201.63.116" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867600"/>
        <to usec="0" sec="1467867611"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="189.203.119.139" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467868036"/>
        <to usec="0" sec="1467868046"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.93.167.139" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868055"/>
        <to usec="0" sec="1467868097"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.41.248.139" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867888"/>
        <to usec="0" sec="1467867900"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.5.222.116" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868024"/>
        <to usec="0" sec="1467868036"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="200.117.38.115" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868116"/>
        <to usec="0" sec="1467868128"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="81.212.135.142" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467868119"/>
        <to usec="0" sec="1467868127"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.25.78.51" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867863"/>
        <to usec="0" sec="1467867880"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="171.198.28.143" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868338"/>
        <to usec="0" sec="1467868361"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.179.248.14" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868069"/>
        <to usec="0" sec="1467868080"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="188.149.238.113" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867952"/>
        <to usec="0" sec="1467867976"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.44.201.241" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868013"/>
        <to usec="0" sec="1467868037"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="31.232.125.143" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868268"/>
        <to usec="0" sec="1467868279"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.104.71.242" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868454"/>
        <to usec="0" sec="1467868473"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.217.164.14" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867703"/>
        <to usec="0" sec="1467867717"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="117.21.55.141" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868440"/>
        <to usec="0" sec="1467868451"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="179.73.43.142" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867659"/>
        <to usec="0" sec="1467867660"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.188.129.241" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867872"/>
        <to usec="0" sec="1467867885"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.204.41.50" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867676"/>
        <to usec="0" sec="1467867687"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="152.86.46.113" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868215"/>
        <to usec="0" sec="1467868221"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="201.18.109.159" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867932"/>
        <to usec="0" sec="1467867943"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.78.253.96" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867923"/>
        <to usec="0" sec="1467867942"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.14.233.214" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867690"/>
        <to usec="0" sec="1467867701"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="177.219.159.24" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867600"/>
        <to usec="0" sec="1467867603"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.176.100.40" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868197"/>
        <to usec="0" sec="1467868220"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.212.27.46" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868451"/>
        <to usec="0" sec="1467868475"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="24.121.72.32" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867827"/>
        <to usec="0" sec="1467867838"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.116.167.216" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867925"/>
        <to usec="0" sec="1467867936"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.102.26.31" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868364"/>
        <to usec="0" sec="1467868383"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="106.158.147.146" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868174"/>
        <to usec="0" sec="1467868186"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="167.203.41.173" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868004"/>
        <to usec="0" sec="1467868028"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="89.14.249.42" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868211"/>
        <to usec="0" sec="1467868252"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.48.121.218" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868286"/>
        <to usec="0" sec="1467868298"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="87.242.108.93" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467867760"/>
        <to usec="0" sec="1467867774"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.25.243.234" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867648"/>
        <to usec="0" sec="1467867662"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.38.236.155" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868434"/>
        <to usec="0" sec="1467868449"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="87.219.128.155" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868307"/>
        <to usec="0" sec="1467868309"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.177.249.164" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868332"/>
        <to usec="0" sec="1467868347"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.88.113.224" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867646"/>
        <to usec="0" sec="1467867655"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="84.5.101.226" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868062"/>
        <to usec="0" sec="1467868084"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.190.221.108" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867988"/>
        <to usec="0" sec="1467868000"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.66.141.220" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867602"/>
        <to usec="0" sec="1467867605"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.45.236.86" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868237"/>
        <to usec="0" sec="1467868285"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="217.120.182.45" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868077"/>
        <to usec="0" sec="1467868102"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="41.13.193.221" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868283"/>
        <to usec="0" sec="1467868291"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="177.41.195.237" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868214"/>
        <to usec="0" sec="1467868237"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.211.117.227" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867955"/>
        <to usec="0" sec="1467867970"/>
    </anomaly>
    <anomaly type="notice" value="1.279450,2.757570,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.233.55.167" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867601"/>
        <to usec="0" sec="1467868228"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="220.164.144.227" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867978"/>
        <to usec="0" sec="1467867991"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.164.65.210" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867605"/>
        <to usec="0" sec="1467867617"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="108.239.67.168" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867661"/>
        <to usec="0" sec="1467867964"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.190.13.234" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868214"/>
        <to usec="0" sec="1467868227"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.230.151.213" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867902"/>
        <to usec="0" sec="1467867917"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="90.221.32.170" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867741"/>
        <to usec="0" sec="1467867772"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.168.148.154" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867637"/>
        <to usec="0" sec="1467867649"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="181.254.72.225" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868474"/>
        <to usec="0" sec="1467868487"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.199.87.106" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867996"/>
        <to usec="0" sec="1467868006"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.192.214.21" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867757"/>
        <to usec="0" sec="1467867770"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.38.47.46" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868025"/>
        <to usec="0" sec="1467868038"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="76.67.16.94" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867947"/>
        <to usec="0" sec="1467867965"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.64.28.217" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867624"/>
        <to usec="0" sec="1467867635"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="181.84.160.171" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867783"/>
        <to usec="0" sec="1467867791"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.130.34.231" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867717"/>
        <to usec="0" sec="1467867747"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="201.233.43.153" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867909"/>
        <to usec="0" sec="1467867931"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="121.137.80.38" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867690"/>
        <to usec="0" sec="1467867713"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="91.131.200.24" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868179"/>
        <to usec="0" sec="1467868203"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="183.176.100.39" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868016"/>
        <to usec="0" sec="1467868039"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="211.225.157.215" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868240"/>
        <to usec="0" sec="1467868267"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.3.168.169" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867845"/>
        <to usec="0" sec="1467867857"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="222.69.75.39" dst_port="4444"/>
        </slice>
        <from usec="0" sec="1467868126"/>
        <to usec="0" sec="1467868132"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="31.244.34.232" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868273"/>
        <to usec="0" sec="1467868321"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="2.55.11.218" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868058"/>
        <to usec="0" sec="1467868082"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="81.212.143.101" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868451"/>
        <to usec="0" sec="1467868476"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="181.199.159.106" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868467"/>
        <to usec="0" sec="1467868501"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="181.242.79.149" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868420"/>
        <to usec="0" sec="1467868436"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.233.246.26" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868024"/>
        <to usec="0" sec="1467868054"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.235.199.84" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867881"/>
        <to usec="0" sec="1467867894"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.130.34.36" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868313"/>
        <to usec="0" sec="1467868338"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.29.72.173" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867740"/>
        <to usec="0" sec="1467867769"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.186.95.46" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867922"/>
        <to usec="0" sec="1467867949"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.106.49.175" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867864"/>
        <to usec="0" sec="1467867880"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.67.223.226" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868251"/>
        <to usec="0" sec="1467868262"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.74.229.225" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868190"/>
        <to usec="0" sec="1467868220"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.16.68.224" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867990"/>
        <to usec="0" sec="1467868018"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="211.176.87.146" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868417"/>
        <to usec="0" sec="1467868500"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="118.94.73.172" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867924"/>
        <to usec="0" sec="1467867955"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.38.201.163" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867943"/>
        <to usec="0" sec="1467867955"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="151.244.34.47" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868169"/>
        <to usec="0" sec="1467868192"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.18.117.173" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868348"/>
        <to usec="0" sec="1467868371"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="93.198.175.45" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867742"/>
        <to usec="0" sec="1467867765"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.180.90.81" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868361"/>
        <to usec="0" sec="1467868385"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.155.209.162" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867911"/>
        <to usec="0" sec="1467867922"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.60.113.160" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868223"/>
        <to usec="0" sec="1467868235"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="191.32.30.28" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868164"/>
        <to usec="0" sec="1467868187"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="90.46.110.71" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868217"/>
        <to usec="0" sec="1467868231"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="78.110.101.225" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867983"/>
        <to usec="0" sec="1467867994"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.102.66.39" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867708"/>
        <to usec="0" sec="1467867730"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="211.113.41.255" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868416"/>
        <to usec="0" sec="1467868426"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="125.219.123.223" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467867603"/>
        <to usec="0" sec="1467867613"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.92.68.0" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867910"/>
        <to usec="0" sec="1467867922"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.117.145.229" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868409"/>
        <to usec="0" sec="1467868432"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="124.63.110.37" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867755"/>
        <to usec="0" sec="1467867773"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.147.82.34" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867619"/>
        <to usec="0" sec="1467867629"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="189.254.129.218" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467867797"/>
        <to usec="0" sec="1467867812"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.235.172.29" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867818"/>
        <to usec="0" sec="1467867841"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="187.136.241.162" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868111"/>
        <to usec="0" sec="1467868135"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.245.192.101" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867878"/>
        <to usec="0" sec="1467867892"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="188.182.33.226" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867936"/>
        <to usec="0" sec="1467867960"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.186.195.132" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868049"/>
        <to usec="0" sec="1467868057"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.215.200.155" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868237"/>
        <to usec="0" sec="1467868249"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.121.38.67" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868269"/>
        <to usec="0" sec="1467868289"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.249.209.251" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868168"/>
        <to usec="0" sec="1467868181"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="86.220.79.220" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868423"/>
        <to usec="0" sec="1467868445"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="118.92.7.28" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868241"/>
        <to usec="0" sec="1467868295"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="139.163.25.228"/>
        </slice>
        <from usec="0" sec="1467867758"/>
        <to usec="0" sec="1467868312"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="201.17.193.196" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868227"/>
        <to usec="0" sec="1467868249"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.78.191.28" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867626"/>
        <to usec="0" sec="1467867638"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.85.49.252" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467868442"/>
        <to usec="0" sec="1467868454"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.213.94.5" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868273"/>
        <to usec="0" sec="1467868297"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="171.177.139.253" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868232"/>
        <to usec="0" sec="1467868247"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.233.136.58" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868165"/>
        <to usec="0" sec="1467868177"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="2.61.97.220" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867771"/>
        <to usec="0" sec="1467867781"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="189.203.192.231" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867854"/>
        <to usec="0" sec="1467867865"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="111.106.47.199" dst_port="2222"/>
        </slice>
        <from usec="0" sec="1467868234"/>
        <to usec="0" sec="1467868235"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="24.213.208.247" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868037"/>
        <to usec="0" sec="1467868064"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.79.96.105" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868050"/>
        <to usec="0" sec="1467868064"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.87.154.55" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868164"/>
        <to usec="0" sec="1467868178"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="213.242.180.137" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868181"/>
        <to usec="0" sec="1467868220"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.165.213.118" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867802"/>
        <to usec="0" sec="1467867814"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.86.175.137" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868215"/>
        <to usec="0" sec="1467868226"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="160.73.78.41" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868442"/>
        <to usec="0" sec="1467868460"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="180.150.131.232" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867994"/>
        <to usec="0" sec="1467868006"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.176.100.9" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867966"/>
        <to usec="0" sec="1467867994"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.163.216.232" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868498"/>
        <to usec="0" sec="1467868501"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.149.71.21" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868141"/>
        <to usec="0" sec="1467868173"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="220.135.87.74" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868077"/>
        <to usec="0" sec="1467868117"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="221.36.127.85" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867940"/>
        <to usec="0" sec="1467867965"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.37.72.171" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868241"/>
        <to usec="0" sec="1467868262"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.254.213.244" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867790"/>
        <to usec="0" sec="1467867801"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.157.113.148" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868363"/>
        <to usec="0" sec="1467868393"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.81.90.11" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867759"/>
        <to usec="0" sec="1467867789"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="180.164.37.52" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467868269"/>
        <to usec="0" sec="1467868280"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="124.163.105.212" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867855"/>
        <to usec="0" sec="1467867866"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="190.246.102.171" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868027"/>
        <to usec="0" sec="1467868051"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="79.163.53.139" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868198"/>
        <to usec="0" sec="1467868210"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="27.221.160.178" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868491"/>
        <to usec="0" sec="1467868501"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="39.97.58.113" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868215"/>
        <to usec="0" sec="1467868226"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.179.42.15" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867755"/>
        <to usec="0" sec="1467867766"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="193.253.61.243" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867748"/>
        <to usec="0" sec="1467867914"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="107.231.60.77" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868294"/>
        <to usec="0" sec="1467868421"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="88.16.137.206" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867604"/>
        <to usec="0" sec="1467867647"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="190.246.115.173" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867766"/>
        <to usec="0" sec="1467867788"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.173.158.77" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868377"/>
        <to usec="0" sec="1467868390"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="212.23.165.173" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868015"/>
        <to usec="0" sec="1467868026"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="99.100.215.141" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868238"/>
        <to usec="0" sec="1467868250"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.135.206.14" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868234"/>
        <to usec="0" sec="1467868262"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.233.137.47" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867609"/>
        <to usec="0" sec="1467867610"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.233.8.113" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867903"/>
        <to usec="0" sec="1467867915"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="2.187.147.49" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868107"/>
        <to usec="0" sec="1467868119"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.250.145.205" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867737"/>
        <to usec="0" sec="1467868217"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.179.96.82" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868465"/>
        <to usec="0" sec="1467868478"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="114.219.145.208" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868441"/>
        <to usec="0" sec="1467868467"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="220.133.62.112" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867948"/>
        <to usec="0" sec="1467867972"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.198.45.51" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867967"/>
        <to usec="0" sec="1467867991"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.240.137.159" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867849"/>
        <to usec="0" sec="1467867872"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="110.246.156.49" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868199"/>
        <to usec="0" sec="1467868212"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.11.115.33" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867995"/>
        <to usec="0" sec="1467868008"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.198.78.103" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868263"/>
        <to usec="0" sec="1467868286"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="81.217.89.129" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868209"/>
        <to usec="0" sec="1467868222"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.34.159.47" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868451"/>
        <to usec="0" sec="1467868467"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="109.166.222.97" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868017"/>
        <to usec="0" sec="1467868030"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.122.138.90" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867695"/>
        <to usec="0" sec="1467867706"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.127.235.205" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868024"/>
        <to usec="0" sec="1467868036"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.103.235.117" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867839"/>
        <to usec="0" sec="1467867851"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="59.131.118.84" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867880"/>
        <to usec="0" sec="1467867903"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="87.99.75.179" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868355"/>
        <to usec="0" sec="1467868379"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.63.220.59" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867738"/>
        <to usec="0" sec="1467867740"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="123.8.126.84" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868350"/>
        <to usec="0" sec="1467868373"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="79.241.156.67" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867759"/>
        <to usec="0" sec="1467867793"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="39.118.71.28" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467868243"/>
        <to usec="0" sec="1467868255"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.126.89.220" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867848"/>
        <to usec="0" sec="1467867852"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="5.236.234.172" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868333"/>
        <to usec="0" sec="1467868358"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="194.71.243.139" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867741"/>
        <to usec="0" sec="1467867752"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.221.191.110" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868162"/>
        <to usec="0" sec="1467868174"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="115.63.37.204" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867858"/>
        <to usec="0" sec="1467867870"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="218.44.122.110" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868417"/>
        <to usec="0" sec="1467868439"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.187.132.167" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868203"/>
        <to usec="0" sec="1467868215"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.52.94.88" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868037"/>
        <to usec="0" sec="1467868049"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.168.21.192" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867756"/>
        <to usec="0" sec="1467867768"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="106.196.168.14" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868293"/>
        <to usec="0" sec="1467868297"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.219.186.69" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868359"/>
        <to usec="0" sec="1467868377"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="191.207.244.251" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868478"/>
        <to usec="0" sec="1467868501"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="177.214.16.33" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867882"/>
        <to usec="0" sec="1467867911"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="190.154.14.107" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868280"/>
        <to usec="0" sec="1467868304"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="112.154.36.105" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868389"/>
        <to usec="0" sec="1467868412"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.72.160.205" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868154"/>
        <to usec="0" sec="1467868166"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.16.208.161" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867943"/>
        <to usec="0" sec="1467867957"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="41.113.86.124" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867604"/>
        <to usec="0" sec="1467867607"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="115.90.9.172" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868439"/>
        <to usec="0" sec="1467868486"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.154.72.56" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868156"/>
        <to usec="0" sec="1467868166"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="220.129.6.104" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868365"/>
        <to usec="0" sec="1467868377"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.54.62.8" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868192"/>
        <to usec="0" sec="1467868216"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="177.102.16.247" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867694"/>
        <to usec="0" sec="1467867707"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.36.185.232" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867943"/>
        <to usec="0" sec="1467867953"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="187.34.158.23" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868475"/>
        <to usec="0" sec="1467868498"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.47.44.122" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868223"/>
        <to usec="0" sec="1467868263"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.247.198.26" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868075"/>
        <to usec="0" sec="1467868088"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="220.35.27.218" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868073"/>
        <to usec="0" sec="1467868125"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="90.178.123.122" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868007"/>
        <to usec="0" sec="1467868018"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="187.200.143.186" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467868392"/>
        <to usec="0" sec="1467868404"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.206.60.101" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867996"/>
        <to usec="0" sec="1467868019"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.22.4.197" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868308"/>
        <to usec="0" sec="1467868334"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.114.54.213" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868304"/>
        <to usec="0" sec="1467868333"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="186.2.196.218" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868486"/>
        <to usec="0" sec="1467868498"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="181.192.241.165" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868149"/>
        <to usec="0" sec="1467868180"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="187.135.133.251" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868057"/>
        <to usec="0" sec="1467868065"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.182.53.235" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868023"/>
        <to usec="0" sec="1467868048"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.173.245.251" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867718"/>
        <to usec="0" sec="1467867731"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="81.28.101.142" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867740"/>
        <to usec="0" sec="1467867752"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.78.176.243" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867627"/>
        <to usec="0" sec="1467867638"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.52.27.0" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867689"/>
        <to usec="0" sec="1467867699"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.40.176.194" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867877"/>
        <to usec="0" sec="1467867880"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="179.205.239.91"/>
        </slice>
        <from usec="0" sec="1467868099"/>
        <to usec="0" sec="1467868101"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="202.249.77.72" src_port="25"/>
        </slice>
        <from usec="0" sec="1467867651"/>
        <to usec="0" sec="1467868204"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,011,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="179.73.43.142" src_port="23"/>
        </slice>
        <from usec="0" sec="1467867658"/>
        <to usec="0" sec="1467867660"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,011,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="187.135.133.251" src_port="23"/>
        </slice>
        <from usec="0" sec="1467868057"/>
        <to usec="0" sec="1467868065"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.105.215.56" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867701"/>
        <to usec="0" sec="1467867714"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.35.194.158" dst_port="5223"/>
            <filter src_ip="157.35.194.158" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867838"/>
        <to usec="0" sec="1467868454"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="59.130.188.250" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867728"/>
        <to usec="0" sec="1467867746"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,999,1 1 1 0 0 0 0 0 0 0 0 0,ipv4gretun">
        <slice>
            <filter src_ip="203.178.118.247" dst_ip="204.62.30.6"/>
        </slice>
        <from usec="0" sec="1467867602"/>
        <to usec="0" sec="1467868501"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.106.209.12" dst_ip="141.98.222.24" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867601"/>
        <to usec="0" sec="1467868487"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="130.225.83.19" dst_port="25"/>
        </slice>
        <from usec="0" sec="1467867602"/>
        <to usec="0" sec="1467868418"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,503,1 1 1 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.106.146.60" dst_ip="203.190.189.230" dst_port="80"/>
            <filter src_ip="133.106.146.60" dst_ip="123.159.41.75" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867826"/>
        <to usec="0" sec="1467867832"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="69.248.132.42" dst_ip="163.50.23.11" src_port="80" dst_port="50644"/>
        </slice>
        <from usec="0" sec="1467867939"/>
        <to usec="0" sec="1467868107"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.35.205.2" dst_port="5223"/>
            <filter src_ip="157.35.205.2" dst_ip="17.108.239.203" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867879"/>
        <to usec="0" sec="1467868188"/>
    </anomaly>
    <anomaly type="notice" value="1.369460,3.004680,503,0 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.95.49.41" dst_ip="133.148.135.8" src_port="80" dst_port="5053"/>
        </slice>
        <from usec="0" sec="1467867882"/>
        <to usec="0" sec="1467867885"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.40.133.41" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867647"/>
        <to usec="0" sec="1467867659"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.50.20.113" dst_ip="210.32.135.183" dst_port="80"/>
            <filter src_ip="163.50.20.113" dst_ip="13.212.251.210" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867603"/>
        <to usec="0" sec="1467868416"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.70.171.222" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868466"/>
        <to usec="0" sec="1467868479"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,504,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="23.86.196.191" dst_ip="163.50.5.100" src_port="443"/>
        </slice>
        <from usec="0" sec="1467868056"/>
        <to usec="0" sec="1467868058"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="59.201.237.136" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868063"/>
        <to usec="0" sec="1467868086"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,504,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.122.120.147" dst_ip="74.15.191.159" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467868017"/>
        <to usec="0" sec="1467868167"/>
    </anomaly>
    <anomaly type="notice" value="0.549372,2.791780,010,1 0 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="218.149.171.70" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868215"/>
        <to usec="0" sec="1467868239"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,502,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="221.30.79.100" dst_port="22"/>
        </slice>
        <from usec="0" sec="1467867601"/>
        <to usec="0" sec="1467868495"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.122.117.122" dst_ip="86.146.185.187" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467868450"/>
        <to usec="0" sec="1467868498"/>
    </anomaly>
    <anomaly type="notice" value="1.460660,2.770800,503,1 1 1 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.50.8.167" src_port="80"/>
            <filter dst_ip="163.50.8.167" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.279450,2.757570,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.231.160.147" dst_port="22"/>
        </slice>
        <from usec="0" sec="1467868140"/>
        <to usec="0" sec="1467868186"/>
    </anomaly>
    <anomaly type="notice" value="1.369460,3.004680,502,0 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="219.238.73.83" dst_ip="163.50.244.245" src_port="61447" dst_port="22"/>
        </slice>
        <from usec="0" sec="1467867771"/>
        <to usec="0" sec="1467867773"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,999,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.243.68.139" dst_ip="162.17.109.130" src_port="25"/>
        </slice>
        <from usec="0" sec="1467867608"/>
        <to usec="0" sec="1467868427"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="181.14.143.247" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867603"/>
        <to usec="0" sec="1467868483"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="133.122.7.217" dst_ip="199.138.138.0" dst_port="80"/>
            <filter src_ip="133.122.236.96" dst_ip="199.138.138.0" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867939"/>
        <to usec="0" sec="1467868390"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="109.83.25.180" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868446"/>
        <to usec="0" sec="1467868459"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="124.5.206.52" dst_ip="202.249.77.61" src_port="80"/>
        </slice>
        <from usec="0" sec="1467867971"/>
        <to usec="0" sec="1467868469"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,503,1 1 1 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.122.171.192" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467868060"/>
        <to usec="0" sec="1467868337"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,999,1 1 1 0 0 0 0 0 0 0 0 0,ipv4gretun">
        <slice>
            <filter src_ip="204.62.30.6" dst_ip="203.178.118.247"/>
        </slice>
        <from usec="0" sec="1467867605"/>
        <to usec="0" sec="1467868474"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="49.37.165.136" dst_ip="202.249.77.96" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467868044"/>
        <to usec="0" sec="1467868484"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="58.121.245.235" dst_ip="203.178.126.74" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867796"/>
        <to usec="0" sec="1467868135"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,503,1 1 1 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.122.232.129" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867600"/>
        <to usec="0" sec="1467868501"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,999,1 1 1 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.35.113.150" dst_ip="17.15.125.72" src_port="44434" dst_port="25"/>
            <filter src_ip="157.35.113.150" dst_ip="17.66.158.143" src_port="55670" dst_port="25"/>
            <filter src_ip="157.35.113.150" dst_ip="17.80.189.127" src_port="35998" dst_port="25"/>
            <filter src_ip="157.35.113.150" dst_ip="17.113.93.12" src_port="49529" dst_port="25"/>
            <filter src_ip="157.35.113.150" dst_ip="17.80.189.11" src_port="55732" dst_port="25"/>
        </slice>
        <from usec="0" sec="1467867625"/>
        <to usec="0" sec="1467868314"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,503,1 1 1 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="211.14.114.69" dst_ip="163.50.4.14" dst_port="80"/>
            <filter src_ip="211.14.114.72" dst_ip="163.50.4.14" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867720"/>
        <to usec="0" sec="1467867722"/>
    </anomaly>
    <anomaly type="notice" value="1.369460,3.004680,999,0 1 1 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="58.243.23.18" dst_ip="163.50.160.119" src_port="51141" dst_port="25"/>
            <filter src_ip="222.9.208.94" dst_ip="163.50.160.119" src_port="25269" dst_port="25"/>
            <filter src_ip="5.45.73.248" dst_ip="163.50.160.119" src_port="43550" dst_port="25"/>
            <filter src_ip="210.125.2.185" dst_ip="163.50.160.119" src_port="27351" dst_port="25"/>
            <filter src_ip="220.132.207.194" dst_ip="163.50.160.119" src_port="32963" dst_port="25"/>
        </slice>
        <from usec="0" sec="1467868492"/>
        <to usec="0" sec="1467868495"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,999,1 1 1 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="91.54.227.220" dst_ip="203.178.121.92" src_port="3303"/>
            <filter src_ip="45.179.123.243" dst_ip="203.178.121.92" src_port="3303"/>
        </slice>
        <from usec="0" sec="1467867625"/>
        <to usec="0" sec="1467868494"/>
    </anomaly>
    <anomaly type="notice" value="1.370740,3.024250,901,0 0 1 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="203.178.118.83" dst_ip="203.178.118.83" proto="tcp"/>
        </slice>
        <from usec="0" sec="1467867794"/>
        <to usec="0" sec="1467868392"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,011,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="189.237.155.239" src_port="23"/>
        </slice>
        <from usec="0" sec="1467868429"/>
        <to usec="0" sec="1467868446"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.198.71.183" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867807"/>
        <to usec="0" sec="1467867829"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.231.160.124" dst_port="22"/>
        </slice>
        <from usec="0" sec="1467867906"/>
        <to usec="0" sec="1467868484"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="175.132.1.143" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867665"/>
        <to usec="0" sec="1467867687"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="123.176.84.155" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867787"/>
        <to usec="0" sec="1467867810"/>
    </anomaly>
    <anomaly type="notice" value="0.549372,2.791780,010,1 0 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="109.100.42.186" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867682"/>
        <to usec="0" sec="1467867693"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.110.255.79" src_port="6000" dst_port="3389"/>
        </slice>
        <from usec="0" sec="1467868386"/>
        <to usec="0" sec="1467868389"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="134.2.30.77" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868130"/>
        <to usec="0" sec="1467868142"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="175.41.94.250" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867777"/>
        <to usec="0" sec="1467867800"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="201.42.81.31" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868471"/>
        <to usec="0" sec="1467868495"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="121.136.202.232" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867885"/>
        <to usec="0" sec="1467867912"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.23.68.54" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867978"/>
        <to usec="0" sec="1467867990"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.112.89.38" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868184"/>
        <to usec="0" sec="1467868195"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="152.40.237.33" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867893"/>
        <to usec="0" sec="1467867948"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.29.153.34" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868290"/>
        <to usec="0" sec="1467868313"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.55.202.208" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868214"/>
        <to usec="0" sec="1467868233"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.16.227.184" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868411"/>
        <to usec="0" sec="1467868458"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="187.128.84.189" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1467867932"/>
        <to usec="0" sec="1467867943"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.34.80.136" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868439"/>
        <to usec="0" sec="1467868466"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.154.254.139" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867601"/>
        <to usec="0" sec="1467867626"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="177.145.207.78" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867607"/>
        <to usec="0" sec="1467867630"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.184.83.94" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868286"/>
        <to usec="0" sec="1467868299"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="124.133.228.173" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868028"/>
        <to usec="0" sec="1467868039"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.51.224.185" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868350"/>
        <to usec="0" sec="1467868361"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="212.83.237.116" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867952"/>
        <to usec="0" sec="1467867974"/>
    </anomaly>
    <anomaly type="notice" value="0.549372,2.791780,010,1 0 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="89.139.194.136" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867619"/>
        <to usec="0" sec="1467867632"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.44.168.140" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868067"/>
        <to usec="0" sec="1467868090"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.179.254.31" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867686"/>
        <to usec="0" sec="1467867697"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="191.32.132.174" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867801"/>
        <to usec="0" sec="1467867842"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.243.102.47" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867600"/>
        <to usec="0" sec="1467868499"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.136.130.202" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867944"/>
        <to usec="0" sec="1467867975"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="81.216.3.53" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868203"/>
        <to usec="0" sec="1467868213"/>
    </anomaly>
    <anomaly type="notice" value="1.279450,2.757570,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="37.198.243.193" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867729"/>
        <to usec="0" sec="1467868295"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="61.114.79.198" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867999"/>
        <to usec="0" sec="1467868011"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="79.250.162.200" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867666"/>
        <to usec="0" sec="1467867676"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="200.131.179.244" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868308"/>
        <to usec="0" sec="1467868320"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="81.125.150.114" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868012"/>
        <to usec="0" sec="1467868035"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="222.160.195.173" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868337"/>
        <to usec="0" sec="1467868360"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="181.40.11.99" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868065"/>
        <to usec="0" sec="1467868088"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.245.182.90" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868069"/>
        <to usec="0" sec="1467868082"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.85.167.47" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867987"/>
        <to usec="0" sec="1467868500"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.40.181.173" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867948"/>
        <to usec="0" sec="1467867967"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.82.23.206" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867878"/>
        <to usec="0" sec="1467867904"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="81.147.65.176" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868109"/>
        <to usec="0" sec="1467868139"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="201.69.30.52" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867874"/>
        <to usec="0" sec="1467867897"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.176.188.42" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867714"/>
        <to usec="0" sec="1467867738"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,011,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="179.212.96.32" src_port="8080" dst_port="29065"/>
        </slice>
        <from usec="0" sec="1467868162"/>
        <to usec="0" sec="1467868163"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="54.21.174.213" dst_ip="163.50.107.113" src_port="443" dst_port="39333"/>
            <filter src_ip="87.247.187.233" dst_ip="163.50.152.158" src_port="443" dst_port="51262"/>
        </slice>
        <from usec="0" sec="1467868478"/>
        <to usec="0" sec="1467868501"/>
    </anomaly>
    <anomaly type="notice" value="1.279450,2.757570,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="192.168.189.52" dst_port="22"/>
        </slice>
        <from usec="0" sec="1467867600"/>
        <to usec="0" sec="1467868231"/>
    </anomaly>
    <anomaly type="notice" value="1.764660,3.013060,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="133.122.170.16" src_port="16512"/>
        </slice>
        <from usec="0" sec="1467867600"/>
        <to usec="0" sec="1467867646"/>
    </anomaly>
    <anomaly type="notice" value="1.764660,3.013060,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.188.207.99" dst_port="54748"/>
        </slice>
        <from usec="0" sec="1467867690"/>
        <to usec="0" sec="1467867961"/>
    </anomaly>
    <anomaly type="notice" value="1.331100,3.005400,503,0 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="192.152.202.253" dst_ip="163.50.48.221" src_port="80" dst_port="59855"/>
        </slice>
        <from usec="0" sec="1467868078"/>
        <to usec="0" sec="1467868082"/>
    </anomaly>
    <anomaly type="notice" value="1.280820,2.778880,010,1 0 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.231.160.86" dst_port="22"/>
        </slice>
        <from usec="0" sec="1467867780"/>
        <to usec="0" sec="1467867826"/>
    </anomaly>
    <anomaly type="notice" value="1.764660,3.013060,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="111.200.81.223" src_port="12200" dst_port="10200"/>
        </slice>
        <from usec="0" sec="1467867780"/>
        <to usec="0" sec="1467867826"/>
    </anomaly>
    <anomaly type="notice" value="1.764660,3.013060,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="133.148.129.7"/>
        </slice>
        <from usec="0" sec="1467867825"/>
        <to usec="0" sec="1467867871"/>
    </anomaly>
    <anomaly type="notice" value="1.764660,3.013060,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.243.191.241" src_port="53"/>
        </slice>
        <from usec="0" sec="1467867825"/>
        <to usec="0" sec="1467867871"/>
    </anomaly>
    <anomaly type="notice" value="1.764660,3.013060,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.50.223.228" src_port="53"/>
        </slice>
        <from usec="0" sec="1467867825"/>
        <to usec="0" sec="1467867871"/>
    </anomaly>
    <anomaly type="notice" value="1.764660,3.013060,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.249.99.18"/>
        </slice>
        <from usec="0" sec="1467867825"/>
        <to usec="0" sec="1467867871"/>
    </anomaly>
    <anomaly type="notice" value="1.764660,3.013060,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.178.119.222" dst_port="53"/>
        </slice>
        <from usec="0" sec="1467867825"/>
        <to usec="0" sec="1467867871"/>
    </anomaly>
    <anomaly type="notice" value="1.239720,2.779650,999,1 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.178.126.64" dst_port="53"/>
        </slice>
        <from usec="0" sec="1467867825"/>
        <to usec="0" sec="1467868478"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="157.35.254.128" dst_port="443"/>
            <filter src_ip="157.35.254.133" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867627"/>
        <to usec="0" sec="1467868458"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.86.201.12" dst_ip="202.243.173.145" src_port="80"/>
        </slice>
        <from usec="0" sec="1467867751"/>
        <to usec="0" sec="1467868498"/>
    </anomaly>
    <anomaly type="notice" value="1.239720,2.779650,504,1 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="202.243.64.108" dst_ip="31.18.138.4" dst_port="443"/>
            <filter src_ip="202.243.64.202" dst_ip="31.18.138.4" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867825"/>
        <to usec="0" sec="1467868144"/>
    </anomaly>
    <anomaly type="notice" value="1.239720,2.779650,504,1 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="76.199.91.18" dst_ip="203.178.123.85" dst_port="443"/>
            <filter src_ip="104.219.184.130" dst_ip="203.178.123.85" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867600"/>
        <to usec="0" sec="1467868501"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="180.25.65.17" dst_ip="202.243.64.108" src_port="80"/>
        </slice>
        <from usec="0" sec="1467867681"/>
        <to usec="0" sec="1467868148"/>
    </anomaly>
    <anomaly type="notice" value="1.425980,2.792780,504,1 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="31.18.137.14" src_port="443"/>
            <filter dst_ip="163.50.154.117" src_port="443"/>
            <filter dst_ip="163.50.154.117" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.239720,2.779650,010,1 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="208.228.155.131" src_port="57487"/>
        </slice>
        <from usec="0" sec="1467867802"/>
        <to usec="0" sec="1467868433"/>
    </anomaly>
    <anomaly type="notice" value="1.239720,2.779650,999,1 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="185.173.182.248" dst_port="53"/>
        </slice>
        <from usec="0" sec="1467867787"/>
        <to usec="0" sec="1467868266"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,503,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.50.114.33" dst_port="80"/>
            <filter src_ip="202.243.171.201" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867612"/>
        <to usec="0" sec="1467868501"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.50.125.236" dst_port="443"/>
            <filter src_ip="133.122.172.66" dst_ip="108.167.171.208" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867629"/>
        <to usec="0" sec="1467868319"/>
    </anomaly>
    <anomaly type="notice" value="1.764660,3.013060,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="133.148.129.7"/>
        </slice>
        <from usec="0" sec="1467867960"/>
        <to usec="0" sec="1467868006"/>
    </anomaly>
    <anomaly type="notice" value="1.764660,3.013060,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.243.191.241"/>
        </slice>
        <from usec="0" sec="1467867960"/>
        <to usec="0" sec="1467868006"/>
    </anomaly>
    <anomaly type="notice" value="1.764660,3.013060,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.50.160.13" dst_port="53"/>
        </slice>
        <from usec="0" sec="1467867825"/>
        <to usec="0" sec="1467868006"/>
    </anomaly>
    <anomaly type="notice" value="1.764660,3.013060,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.50.223.228" src_port="53"/>
        </slice>
        <from usec="0" sec="1467867960"/>
        <to usec="0" sec="1467868006"/>
    </anomaly>
    <anomaly type="notice" value="1.764660,3.013060,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="203.178.113.19"/>
        </slice>
        <from usec="0" sec="1467867960"/>
        <to usec="0" sec="1467868006"/>
    </anomaly>
    <anomaly type="notice" value="1.764660,3.013060,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="163.50.249.18"/>
        </slice>
        <from usec="0" sec="1467867825"/>
        <to usec="0" sec="1467868006"/>
    </anomaly>
    <anomaly type="notice" value="1.764660,3.013060,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.188.137.61" dst_port="54748"/>
        </slice>
        <from usec="0" sec="1467867825"/>
        <to usec="0" sec="1467868006"/>
    </anomaly>
    <anomaly type="notice" value="1.764660,3.013060,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.50.223.214" src_port="53"/>
        </slice>
        <from usec="0" sec="1467867825"/>
        <to usec="0" sec="1467868006"/>
    </anomaly>
    <anomaly type="notice" value="1.764660,3.013060,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.188.137.41" dst_port="54756"/>
        </slice>
        <from usec="0" sec="1467867825"/>
        <to usec="0" sec="1467868006"/>
    </anomaly>
    <anomaly type="notice" value="1.764660,3.013060,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.178.119.222" dst_port="53"/>
        </slice>
        <from usec="0" sec="1467867960"/>
        <to usec="0" sec="1467868006"/>
    </anomaly>
    <anomaly type="notice" value="1.764660,3.013060,999,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="121.122.112.195" dst_ip="203.178.123.68" dst_port="53"/>
        </slice>
        <from usec="0" sec="1467867825"/>
        <to usec="0" sec="1467868006"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="202.243.168.68" dst_port="443"/>
            <filter src_ip="202.243.168.68" dst_port="80"/>
            <filter src_ip="163.50.155.171" dst_port="443"/>
            <filter src_ip="163.50.155.171" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467867838"/>
        <to usec="0" sec="1467868313"/>
    </anomaly>
    <anomaly type="notice" value="1.764660,3.013060,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="133.148.136.168"/>
        </slice>
        <from usec="0" sec="1467867960"/>
        <to usec="0" sec="1467868006"/>
    </anomaly>
    <anomaly type="notice" value="1.764660,3.013060,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.249.116.100"/>
        </slice>
        <from usec="0" sec="1467867960"/>
        <to usec="0" sec="1467868006"/>
    </anomaly>
    <anomaly type="notice" value="1.239720,2.779650,504,1 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="162.130.191.121" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867637"/>
        <to usec="0" sec="1467868495"/>
    </anomaly>
    <anomaly type="notice" value="1.764660,3.013060,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.178.115.133"/>
        </slice>
        <from usec="0" sec="1467867960"/>
        <to usec="0" sec="1467868006"/>
    </anomaly>
    <anomaly type="notice" value="1.764660,3.013060,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.178.115.141" dst_port="51413"/>
        </slice>
        <from usec="0" sec="1467867825"/>
        <to usec="0" sec="1467868006"/>
    </anomaly>
    <anomaly type="notice" value="1.764660,3.013060,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.188.136.165" dst_port="54748"/>
        </slice>
        <from usec="0" sec="1467867825"/>
        <to usec="0" sec="1467868006"/>
    </anomaly>
    <anomaly type="notice" value="1.239720,2.779650,503,1 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="184.186.253.25" src_port="80"/>
            <filter dst_ip="202.243.168.94" src_port="80"/>
        </slice>
        <from usec="0" sec="1467867960"/>
        <to usec="0" sec="1467868381"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="163.50.219.211" dst_port="443"/>
            <filter src_ip="163.50.219.232" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867747"/>
        <to usec="0" sec="1467868437"/>
    </anomaly>
    <anomaly type="notice" value="1.239720,2.779650,010,1 0 0 0 0 0 1 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="64.167.44.236" dst_ip="133.148.139.255"/>
        </slice>
        <from usec="0" sec="1467867901"/>
        <to usec="0" sec="1467868072"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.50.10.132" dst_ip="202.248.240.207" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467868428"/>
        <to usec="0" sec="1467868433"/>
    </anomaly>
    <anomaly type="notice" value="1.764660,3.013060,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="111.200.67.68" src_port="12200" dst_port="10200"/>
            <filter src_ip="111.200.67.68" src_port="12200" dst_port="48111"/>
        </slice>
        <from usec="0" sec="1467868140"/>
        <to usec="0" sec="1467868186"/>
    </anomaly>
    <anomaly type="notice" value="1.279450,2.757570,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="111.200.91.44" src_port="12200" dst_port="8080"/>
            <filter src_ip="111.200.91.44" src_port="12200" dst_port="3128"/>
            <filter src_ip="111.200.91.44" src_port="12200" dst_port="21320"/>
        </slice>
        <from usec="0" sec="1467868140"/>
        <to usec="0" sec="1467868186"/>
    </anomaly>
    <anomaly type="notice" value="1.279450,2.757570,999,1 1 1 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="50.236.38.75" src_port="5180" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1467867960"/>
        <to usec="0" sec="1467868189"/>
    </anomaly>
    <anomaly type="notice" value="1.764660,3.013060,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="218.74.166.234"/>
        </slice>
        <from usec="0" sec="1467868185"/>
        <to usec="0" sec="1467868231"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="163.50.114.66" dst_port="80"/>
            <filter src_ip="202.243.173.241" dst_port="80"/>
            <filter src_ip="131.62.122.112" dst_port="80"/>
            <filter dst_ip="202.248.240.207" dst_port="80"/>
        </slice>
        <from usec="0" sec="1467868106"/>
        <to usec="0" sec="1467868489"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,054,1 0 0 0 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="157.35.254.132" dst_ip="17.81.226.230" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867650"/>
        <to usec="0" sec="1467868467"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.122.158.163" dst_ip="54.186.226.45" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867732"/>
        <to usec="0" sec="1467868239"/>
    </anomaly>
    <anomaly type="notice" value="1.900140,3.025170,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="113.2.237.70"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.425980,2.792780,503,1 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="117.237.208.251" dst_ip="202.249.116.109" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.900140,3.025170,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDP">
        <slice>
            <filter src_ip="133.122.132.185"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.425980,2.792780,503,1 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.122.247.235" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.94.61.233" dst_port="443"/>
        </slice>
        <from usec="0" sec="1467867610"/>
        <to usec="0" sec="1467868491"/>
    </anomaly>
    <anomaly type="notice" value="1.425980,2.792780,503,1 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="183.206.33.217" dst_ip="202.243.168.164" src_port="80" dst_port="58631"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.425980,2.792780,503,1 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="183.206.35.221" dst_ip="202.243.64.202" src_port="80"/>
            <filter src_ip="183.206.35.221" dst_ip="202.249.77.61" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.900140,3.025170,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="190.214.158.7"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.900140,3.025170,010,0 0 0 0 0 0 0 0 0 1 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="200.170.48.20"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="2.024510,3.148160,504,1 0 0 0 0 0 0 0 1 0 0 0,mptmp">
        <slice>
            <filter dst_port="443"/>
            <filter dst_ip="183.179.207.233" src_port="1433" dst_port="12200"/>
        </slice>
        <from usec="0" sec="1467867649"/>
        <to usec="0" sec="1467868501"/>
    </anomaly>
    <anomaly type="notice" value="1.900140,3.025170,020,0 0 0 0 0 0 0 0 0 1 0 0,ttl_error">
        <slice>
            <filter src_ip="202.249.75.4"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.900140,3.025170,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="203.178.126.131" dst_ip="81.105.190.125" src_port="23"/>
            <filter src_ip="203.178.126.131" dst_ip="177.132.135.182" src_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.900140,3.025170,011,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="203.178.122.251" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.425980,2.792780,020,1 0 0 0 0 0 0 0 0 1 0 0,icmp_error">
        <slice>
            <filter src_ip="203.178.113.138" src_port="33435"/>
            <filter src_ip="203.178.113.138"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.900140,3.025170,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDP">
        <slice>
            <filter src_ip="203.178.114.108" src_port="51413"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.900140,3.025170,020,0 0 0 0 0 0 0 0 0 1 0 0,sptpDoSIC">
        <slice>
            <filter src_ip="203.16.239.198"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.900140,3.025170,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="210.144.154.215"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.900140,3.025170,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="216.66.107.31"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.900140,3.025170,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="217.18.98.203"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.900140,3.025170,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="51.207.77.54" src_port="5000"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.425980,2.792780,999,1 0 0 0 0 0 0 0 0 1 0 0,malphfl">
        <slice>
            <filter src_ip="61.235.242.226" dst_ip="163.50.20.185" src_port="500" dst_port="51501"/>
            <filter src_ip="61.235.242.226" dst_ip="163.50.20.185"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.900140,3.025170,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="83.89.73.70"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="223.205.173.239" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467868475"/>
        <to usec="0" sec="1467868479"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="184.186.249.160" dst_ip="163.50.8.167" src_port="80" dst_port="58784"/>
        </slice>
        <from usec="0" sec="1467868365"/>
        <to usec="0" sec="1467868366"/>
    </anomaly>
    <anomaly type="notice" value="0.546176,2.770570,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="200.248.77.240" dst_port="23"/>
        </slice>
        <from usec="0" sec="1467867919"/>
        <to usec="0" sec="1467867944"/>
    </anomaly>
    <anomaly type="notice" value="0.441268,2.771350,999,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.113.88.244" dst_port="993"/>
        </slice>
        <from usec="0" sec="1467867937"/>
        <to usec="0" sec="1467868476"/>
    </anomaly>
    <anomaly type="notice" value="1.900140,3.025170,502,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="193.214.62.168"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.425980,2.792780,503,1 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="202.243.190.153" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.279450,2.757570,999,1 1 1 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="69.64.198.240" src_port="5953" dst_port="5060"/>
            <filter src_ip="69.64.198.240" src_port="6147" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1467867600"/>
        <to usec="0" sec="1467868501"/>
    </anomaly>
    <anomaly type="notice" value="1.279450,2.757570,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.212.96.32" src_port="29065" dst_port="8080"/>
        </slice>
        <from usec="0" sec="1467867788"/>
        <to usec="0" sec="1467868186"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="23.235.82.1" dst_ip="163.50.39.94" src_port="80" dst_port="42159"/>
        </slice>
        <from usec="0" sec="1467868215"/>
        <to usec="0" sec="1467868217"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.122.243.252" dst_port="443"/>
            <filter src_ip="133.122.243.252" dst_ip="17.94.97.25" dst_port="993"/>
        </slice>
        <from usec="0" sec="1467868076"/>
        <to usec="0" sec="1467868240"/>
    </anomaly>
    <anomaly type="notice" value="0.445219,2.792550,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="203.154.56.146" dst_ip="163.50.219.209" src_port="80" dst_port="13703"/>
        </slice>
        <from usec="0" sec="1467868437"/>
        <to usec="0" sec="1467868439"/>
    </anomaly>
</admd:annotation>
