<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.181.126.123"/>
        </slice>
        <from usec="0" sec="1470632723"/>
        <to usec="0" sec="1470632726"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.28.183.116"/>
        </slice>
        <from usec="0" sec="1470632703"/>
        <to usec="0" sec="1470632705"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.8.36.52"/>
        </slice>
        <from usec="0" sec="1470633160"/>
        <to usec="0" sec="1470633163"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="23.208.125.10" dst_ip="202.75.62.191" src_port="80" dst_port="49873" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632891"/>
        <to usec="0" sec="1470632912"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="130.109.99.140"/>
        </slice>
        <from usec="0" sec="1470633259"/>
        <to usec="0" sec="1470633288"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.28.182.113" dst_ip="62.156.212.86" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470633005"/>
        <to usec="0" sec="1470633015"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="31.243.103.115" dst_ip="163.28.138.237" src_port="443" dst_port="64123" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632795"/>
        <to usec="0" sec="1470632796"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="1.61.26.216" dst_ip="163.28.0.81" src_port="2219" dst_port="7273" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632495"/>
        <to usec="0" sec="1470633223"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.54.3.147"/>
        </slice>
        <from usec="0" sec="1470632851"/>
        <to usec="0" sec="1470632852"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.181.35.88"/>
        </slice>
        <from usec="0" sec="1470633063"/>
        <to usec="0" sec="1470633068"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.28.125.215" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632537"/>
        <to usec="0" sec="1470632755"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="157.181.199.96" dst_ip="60.135.176.142" src_port="41681" dst_port="19662" proto="udp"/>
        </slice>
        <from usec="0" sec="1470633049"/>
        <to usec="0" sec="1470633249"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.8.243.97"/>
        </slice>
        <from usec="0" sec="1470632832"/>
        <to usec="0" sec="1470632835"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="81.204.92.238"/>
        </slice>
        <from usec="0" sec="1470632400"/>
        <to usec="0" sec="1470633295"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="36.251.172.31" dst_ip="203.181.109.142" dst_port="123" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632618"/>
        <to usec="0" sec="1470632818"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.8.193.34"/>
        </slice>
        <from usec="0" sec="1470633178"/>
        <to usec="0" sec="1470633182"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="74.79.108.213" dst_ip="203.181.109.142" src_port="49615" dst_port="123" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632444"/>
        <to usec="0" sec="1470632449"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="54.246.7.150"/>
        </slice>
        <from usec="0" sec="1470632784"/>
        <to usec="0" sec="1470632787"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.181.42.38"/>
        </slice>
        <from usec="0" sec="1470633102"/>
        <to usec="0" sec="1470633132"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.28.38.101"/>
        </slice>
        <from usec="0" sec="1470633074"/>
        <to usec="0" sec="1470633248"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="36.250.22.34"/>
        </slice>
        <from usec="0" sec="1470632414"/>
        <to usec="0" sec="1470632663"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.181.28.157" dst_ip="113.3.10.221" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470633099"/>
        <to usec="0" sec="1470633103"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.28.61.82"/>
        </slice>
        <from usec="0" sec="1470632527"/>
        <to usec="0" sec="1470632578"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.181.12.93"/>
        </slice>
        <from usec="0" sec="1470632421"/>
        <to usec="0" sec="1470633117"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.2.83.116"/>
        </slice>
        <from usec="0" sec="1470632408"/>
        <to usec="0" sec="1470632463"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="122.54.112.138"/>
        </slice>
        <from usec="0" sec="1470633226"/>
        <to usec="0" sec="1470633257"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.28.49.88" dst_ip="108.80.44.6" src_port="55879" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470633189"/>
        <to usec="0" sec="1470633195"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.24.139.54"/>
        </slice>
        <from usec="0" sec="1470633140"/>
        <to usec="0" sec="1470633299"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="203.181.109.161" dst_port="25"/>
            <filter src_ip="203.181.109.161" dst_ip="96.92.99.206" src_port="25"/>
        </slice>
        <from usec="0" sec="1470632613"/>
        <to usec="0" sec="1470633210"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.75.61.203"/>
        </slice>
        <from usec="0" sec="1470633162"/>
        <to usec="0" sec="1470633165"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.28.181.2"/>
        </slice>
        <from usec="0" sec="1470632788"/>
        <to usec="0" sec="1470632791"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="115.145.11.103"/>
        </slice>
        <from usec="0" sec="1470632610"/>
        <to usec="0" sec="1470632736"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="211.22.203.118"/>
        </slice>
        <from usec="0" sec="1470632497"/>
        <to usec="0" sec="1470632500"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.8.182.149"/>
        </slice>
        <from usec="0" sec="1470632838"/>
        <to usec="0" sec="1470632843"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="184.164.157.101"/>
        </slice>
        <from usec="0" sec="1470632577"/>
        <to usec="0" sec="1470633028"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.28.181.10"/>
        </slice>
        <from usec="0" sec="1470632857"/>
        <to usec="0" sec="1470633269"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="38.185.73.20" dst_ip="202.75.63.182" src_port="80" dst_port="61676" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632424"/>
        <to usec="0" sec="1470632545"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.8.33.123"/>
        </slice>
        <from usec="0" sec="1470632562"/>
        <to usec="0" sec="1470632565"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.28.55.32"/>
        </slice>
        <from usec="0" sec="1470633057"/>
        <to usec="0" sec="1470633124"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.28.100.253"/>
        </slice>
        <from usec="0" sec="1470632404"/>
        <to usec="0" sec="1470633298"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="200.63.140.189" dst_ip="203.181.109.142" dst_port="123" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632477"/>
        <to usec="0" sec="1470632507"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.28.129.194"/>
        </slice>
        <from usec="0" sec="1470632417"/>
        <to usec="0" sec="1470632884"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="208.116.144.201"/>
        </slice>
        <from usec="0" sec="1470632427"/>
        <to usec="0" sec="1470632527"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="200.63.140.176" dst_ip="203.181.109.142" dst_port="123" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632900"/>
        <to usec="0" sec="1470632904"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="103.200.241.78" dst_ip="203.181.109.142" dst_port="123" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632456"/>
        <to usec="0" sec="1470633262"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.28.182.51"/>
        </slice>
        <from usec="0" sec="1470632753"/>
        <to usec="0" sec="1470632758"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.104.24.204"/>
        </slice>
        <from usec="0" sec="1470633064"/>
        <to usec="0" sec="1470633068"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.104.24.208"/>
        </slice>
        <from usec="0" sec="1470632962"/>
        <to usec="0" sec="1470632964"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.28.112.216"/>
        </slice>
        <from usec="0" sec="1470632847"/>
        <to usec="0" sec="1470632851"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.181.12.46"/>
        </slice>
        <from usec="0" sec="1470632769"/>
        <to usec="0" sec="1470632776"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.28.237.86"/>
        </slice>
        <from usec="0" sec="1470632457"/>
        <to usec="0" sec="1470632471"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,502,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.68.148.208"/>
        </slice>
        <from usec="0" sec="1470632433"/>
        <to usec="0" sec="1470632436"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="208.116.141.87"/>
        </slice>
        <from usec="0" sec="1470632659"/>
        <to usec="0" sec="1470632701"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="73.113.233.212"/>
        </slice>
        <from usec="0" sec="1470633245"/>
        <to usec="0" sec="1470633291"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="210.18.87.33"/>
        </slice>
        <from usec="0" sec="1470632830"/>
        <to usec="0" sec="1470632833"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="192.147.235.94" dst_ip="163.28.93.202" src_port="80" dst_port="61011" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632590"/>
        <to usec="0" sec="1470632592"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="216.210.181.96" dst_ip="163.28.78.0" src_port="80" dst_port="51456" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470633089"/>
        <to usec="0" sec="1470633094"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.181.47.122"/>
        </slice>
        <from usec="0" sec="1470632471"/>
        <to usec="0" sec="1470633199"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.208.125.100" dst_ip="163.28.53.29" src_port="80" dst_port="59557" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632933"/>
        <to usec="0" sec="1470632934"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="220.179.84.231"/>
        </slice>
        <from usec="0" sec="1470632962"/>
        <to usec="0" sec="1470632966"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.28.182.5"/>
        </slice>
        <from usec="0" sec="1470632402"/>
        <to usec="0" sec="1470632407"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.8.184.226"/>
        </slice>
        <from usec="0" sec="1470632682"/>
        <to usec="0" sec="1470632686"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="220.179.84.229"/>
        </slice>
        <from usec="0" sec="1470633233"/>
        <to usec="0" sec="1470633298"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.28.94.134"/>
        </slice>
        <from usec="0" sec="1470633049"/>
        <to usec="0" sec="1470633054"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="49.173.44.231" dst_ip="202.75.35.39" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632699"/>
        <to usec="0" sec="1470632702"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.24.24.234"/>
        </slice>
        <from usec="0" sec="1470632953"/>
        <to usec="0" sec="1470632960"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.28.53.20"/>
        </slice>
        <from usec="0" sec="1470632579"/>
        <to usec="0" sec="1470632586"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.5.63.110"/>
        </slice>
        <from usec="0" sec="1470633036"/>
        <to usec="0" sec="1470633039"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.69.22.31" dst_ip="140.90.63.31" dst_port="80"/>
        </slice>
        <from usec="0" sec="1470632544"/>
        <to usec="0" sec="1470633293"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.28.52.23"/>
        </slice>
        <from usec="0" sec="1470633198"/>
        <to usec="0" sec="1470633201"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="1.80.219.251"/>
        </slice>
        <from usec="0" sec="1470633126"/>
        <to usec="0" sec="1470633156"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.24.138.4"/>
        </slice>
        <from usec="0" sec="1470633118"/>
        <to usec="0" sec="1470633300"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.75.217.20"/>
        </slice>
        <from usec="0" sec="1470633292"/>
        <to usec="0" sec="1470633295"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.28.100.128" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632856"/>
        <to usec="0" sec="1470633283"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="183.128.120.156" dst_ip="202.75.41.198" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470633227"/>
        <to usec="0" sec="1470633255"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="65.130.247.109"/>
        </slice>
        <from usec="0" sec="1470632890"/>
        <to usec="0" sec="1470633000"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="163.28.180.145" src_port="3167"/>
        </slice>
        <from usec="0" sec="1470632519"/>
        <to usec="0" sec="1470632522"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.8.213.140"/>
        </slice>
        <from usec="0" sec="1470633081"/>
        <to usec="0" sec="1470633134"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="219.105.129.130" dst_ip="133.245.27.68" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632457"/>
        <to usec="0" sec="1470632903"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="54.246.7.67"/>
        </slice>
        <from usec="0" sec="1470632819"/>
        <to usec="0" sec="1470632822"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.181.138.135"/>
        </slice>
        <from usec="0" sec="1470632585"/>
        <to usec="0" sec="1470632956"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="104.219.131.185"/>
        </slice>
        <from usec="0" sec="1470633200"/>
        <to usec="0" sec="1470633203"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.212.17.134" dst_ip="203.181.101.10" src_port="80" dst_port="10973" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470633150"/>
        <to usec="0" sec="1470633152"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.28.227.185" dst_ip="49.228.243.218" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632420"/>
        <to usec="0" sec="1470632690"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.28.132.124" dst_ip="216.210.181.96" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632548"/>
        <to usec="0" sec="1470632833"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.181.138.133"/>
        </slice>
        <from usec="0" sec="1470632405"/>
        <to usec="0" sec="1470632490"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="198.220.197.137" dst_ip="163.28.100.253" src_port="443" dst_port="41832" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632412"/>
        <to usec="0" sec="1470632581"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.181.138.137"/>
        </slice>
        <from usec="0" sec="1470632473"/>
        <to usec="0" sec="1470632477"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="192.147.157.74" dst_ip="202.75.223.61" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470633171"/>
        <to usec="0" sec="1470633224"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.28.183.179" dst_ip="91.164.38.14" src_port="49816" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470633004"/>
        <to usec="0" sec="1470633033"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="52.3.112.104"/>
        </slice>
        <from usec="0" sec="1470633020"/>
        <to usec="0" sec="1470633023"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="121.94.212.86" dst_ip="163.28.182.236" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632474"/>
        <to usec="0" sec="1470633219"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.28.0.81" src_port="7273" proto="udp"/>
        </slice>
        <from usec="0" sec="1470633048"/>
        <to usec="0" sec="1470633296"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.28.183.162" dst_ip="54.215.168.146" src_port="52472" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632996"/>
        <to usec="0" sec="1470633032"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="121.107.73.99"/>
        </slice>
        <from usec="0" sec="1470632462"/>
        <to usec="0" sec="1470632503"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="203.207.254.105"/>
        </slice>
        <from usec="0" sec="1470632630"/>
        <to usec="0" sec="1470632633"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.28.180.91" dst_ip="13.84.250.243" src_port="51009" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632400"/>
        <to usec="0" sec="1470632517"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="61.108.75.148" dst_ip="163.28.62.57" src_port="80" dst_port="56039" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470633166"/>
        <to usec="0" sec="1470633167"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="198.220.197.144" dst_ip="163.28.27.0" src_port="443" dst_port="8334" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632448"/>
        <to usec="0" sec="1470632461"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.181.60.83"/>
        </slice>
        <from usec="0" sec="1470632768"/>
        <to usec="0" sec="1470632771"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.24.244.99"/>
        </slice>
        <from usec="0" sec="1470633221"/>
        <to usec="0" sec="1470633258"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.28.202.96"/>
        </slice>
        <from usec="0" sec="1470633173"/>
        <to usec="0" sec="1470633254"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.28.122.95" dst_ip="192.30.189.110" src_port="58511" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470633028"/>
        <to usec="0" sec="1470633033"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.28.154.134" dst_ip="91.195.76.76" src_port="44790" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470633201"/>
        <to usec="0" sec="1470633218"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="14.132.142.68"/>
        </slice>
        <from usec="0" sec="1470633036"/>
        <to usec="0" sec="1470633039"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="212.84.121.171"/>
        </slice>
        <from usec="0" sec="1470632681"/>
        <to usec="0" sec="1470632691"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="160.237.160.117"/>
        </slice>
        <from usec="0" sec="1470632630"/>
        <to usec="0" sec="1470632633"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="114.55.38.175"/>
        </slice>
        <from usec="0" sec="1470633168"/>
        <to usec="0" sec="1470633271"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="150.86.66.79"/>
        </slice>
        <from usec="0" sec="1470633007"/>
        <to usec="0" sec="1470633009"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.24.138.146"/>
        </slice>
        <from usec="0" sec="1470633253"/>
        <to usec="0" sec="1470633273"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.24.13.80" dst_ip="52.41.232.169" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632531"/>
        <to usec="0" sec="1470632554"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.75.61.65"/>
        </slice>
        <from usec="0" sec="1470633105"/>
        <to usec="0" sec="1470633108"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.8.127.164" dst_ip="17.114.111.143" src_port="53188" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632740"/>
        <to usec="0" sec="1470632743"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.181.14.154"/>
        </slice>
        <from usec="0" sec="1470632952"/>
        <to usec="0" sec="1470632955"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.28.100.86" dst_ip="52.118.245.216" src_port="56056" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632874"/>
        <to usec="0" sec="1470632878"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="221.36.22.146" dst_ip="202.75.217.2" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470633194"/>
        <to usec="0" sec="1470633197"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="190.237.160.73"/>
        </slice>
        <from usec="0" sec="1470632922"/>
        <to usec="0" sec="1470633218"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.251.6.140"/>
        </slice>
        <from usec="0" sec="1470632566"/>
        <to usec="0" sec="1470632582"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.143.213.87" dst_ip="202.75.223.27" src_port="80" dst_port="57959" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632798"/>
        <to usec="0" sec="1470632800"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.24.162.120"/>
        </slice>
        <from usec="0" sec="1470632777"/>
        <to usec="0" sec="1470632920"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="114.55.32.86" dst_ip="203.181.109.142" src_port="7000" dst_port="123" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632405"/>
        <to usec="0" sec="1470633237"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.28.54.97" dst_ip="210.15.2.45" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470633035"/>
        <to usec="0" sec="1470633049"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.24.173.115"/>
        </slice>
        <from usec="0" sec="1470632694"/>
        <to usec="0" sec="1470632697"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="202.75.223.61" dst_ip="175.184.47.211" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632499"/>
        <to usec="0" sec="1470633117"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="182.238.102.195" dst_ip="202.75.58.199" src_port="80" dst_port="52200" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470633108"/>
        <to usec="0" sec="1470633109"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.24.181.195"/>
        </slice>
        <from usec="0" sec="1470633004"/>
        <to usec="0" sec="1470633007"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="131.179.216.60"/>
        </slice>
        <from usec="0" sec="1470632809"/>
        <to usec="0" sec="1470632812"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.24.71.199"/>
        </slice>
        <from usec="0" sec="1470632446"/>
        <to usec="0" sec="1470632464"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="202.75.57.198"/>
        </slice>
        <from usec="0" sec="1470632805"/>
        <to usec="0" sec="1470632875"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.28.27.58" dst_ip="207.222.141.11" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632743"/>
        <to usec="0" sec="1470632848"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="211.11.212.63" dst_ip="163.28.44.235" src_port="80" dst_port="50517" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632545"/>
        <to usec="0" sec="1470632546"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="192.51.151.200" dst_ip="107.231.23.58" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632542"/>
        <to usec="0" sec="1470633203"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="52.129.99.201" dst_ip="203.181.109.142" dst_port="123" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632433"/>
        <to usec="0" sec="1470633300"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.28.186.201"/>
        </slice>
        <from usec="0" sec="1470633019"/>
        <to usec="0" sec="1470633023"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="173.3.198.51" dst_ip="202.75.56.61" src_port="80" dst_port="61015" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470633204"/>
        <to usec="0" sec="1470633206"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.24.44.49" dst_ip="174.112.223.206" src_port="1935" dst_port="41036" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632402"/>
        <to usec="0" sec="1470632723"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.251.16.50"/>
        </slice>
        <from usec="0" sec="1470633036"/>
        <to usec="0" sec="1470633040"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.24.230.223"/>
        </slice>
        <from usec="0" sec="1470632485"/>
        <to usec="0" sec="1470632488"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.28.27.32"/>
        </slice>
        <from usec="0" sec="1470632729"/>
        <to usec="0" sec="1470632732"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.24.42.47"/>
        </slice>
        <from usec="0" sec="1470632627"/>
        <to usec="0" sec="1470632630"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="72.232.77.217"/>
        </slice>
        <from usec="0" sec="1470633031"/>
        <to usec="0" sec="1470633040"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.28.82.217"/>
        </slice>
        <from usec="0" sec="1470632567"/>
        <to usec="0" sec="1470632572"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="49.228.243.218"/>
        </slice>
        <from usec="0" sec="1470632419"/>
        <to usec="0" sec="1470632486"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.8.0.46"/>
        </slice>
        <from usec="0" sec="1470633053"/>
        <to usec="0" sec="1470633062"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.181.210.31"/>
        </slice>
        <from usec="0" sec="1470633098"/>
        <to usec="0" sec="1470633115"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.28.181.249"/>
        </slice>
        <from usec="0" sec="1470632936"/>
        <to usec="0" sec="1470632940"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.75.216.3"/>
        </slice>
        <from usec="0" sec="1470632970"/>
        <to usec="0" sec="1470632972"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="112.238.253.30" dst_ip="163.28.240.0" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632483"/>
        <to usec="0" sec="1470632491"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.28.154.253"/>
        </slice>
        <from usec="0" sec="1470633002"/>
        <to usec="0" sec="1470633004"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="153.62.99.243" dst_ip="163.28.183.8" src_port="80" dst_port="55706" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632681"/>
        <to usec="0" sec="1470632683"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.28.0.13" dst_ip="207.222.115.79" src_port="58868" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632704"/>
        <to usec="0" sec="1470632724"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.181.138.254"/>
        </slice>
        <from usec="0" sec="1470632806"/>
        <to usec="0" sec="1470632810"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.28.138.247"/>
        </slice>
        <from usec="0" sec="1470632439"/>
        <to usec="0" sec="1470632445"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,502,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="218.158.87.239"/>
        </slice>
        <from usec="0" sec="1470632435"/>
        <to usec="0" sec="1470632969"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="203.181.108.136" dst_ip="203.181.108.136"/>
        </slice>
        <from usec="0" sec="1470632604"/>
        <to usec="0" sec="1470633061"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="203.181.109.142" dst_ip="203.181.109.142" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632400"/>
        <to usec="0" sec="1470633298"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.28.243.31"/>
        </slice>
        <from usec="0" sec="1470633083"/>
        <to usec="0" sec="1470633086"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.28.244.190" dst_port="443"/>
        </slice>
        <from usec="0" sec="1470632562"/>
        <to usec="0" sec="1470633268"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="163.28.244.188" dst_port="443"/>
            <filter src_ip="208.116.141.90" dst_ip="163.28.243.28" dst_port="80"/>
        </slice>
        <from usec="0" sec="1470632429"/>
        <to usec="0" sec="1470633278"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="203.181.104.212"/>
        </slice>
        <from usec="0" sec="1470633247"/>
        <to usec="0" sec="1470633250"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.181.109.161"/>
        </slice>
        <from usec="0" sec="1470632603"/>
        <to usec="0" sec="1470632612"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.181.108.187" dst_port="80"/>
        </slice>
        <from usec="0" sec="1470632425"/>
        <to usec="0" sec="1470633293"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.181.111.53" dst_port="80"/>
        </slice>
        <from usec="0" sec="1470632451"/>
        <to usec="0" sec="1470633263"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="211.16.218.68" dst_ip="202.75.35.39" dst_port="80"/>
        </slice>
        <from usec="0" sec="1470633120"/>
        <to usec="0" sec="1470633126"/>
    </anomaly>
    <anomaly type="notice" value="1.000200,1.948270,504,1 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter src_ip="70.107.153.137" dst_ip="203.181.101.36" dst_port="443"/>
            <filter src_ip="63.68.198.203" dst_ip="203.181.101.36" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.181.126.1" dst_ip="74.143.203.168" dst_port="443"/>
            <filter src_ip="157.181.126.1" dst_ip="74.143.203.159" dst_port="443"/>
        </slice>
        <from usec="0" sec="1470632893"/>
        <to usec="0" sec="1470633300"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="52.105.117.6" dst_port="443"/>
            <filter dst_ip="52.7.127.56" dst_port="443"/>
        </slice>
        <from usec="0" sec="1470632419"/>
        <to usec="0" sec="1470633282"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="202.69.61.231" dst_port="25"/>
            <filter src_ip="23.208.125.43" dst_ip="202.69.61.231" src_port="80"/>
        </slice>
        <from usec="0" sec="1470633077"/>
        <to usec="0" sec="1470633121"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="108.202.237.189"/>
        </slice>
        <from usec="0" sec="1470632690"/>
        <to usec="0" sec="1470632694"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="202.69.61.77"/>
        </slice>
        <from usec="0" sec="1470632982"/>
        <to usec="0" sec="1470632984"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="27.65.56.191" dst_ip="203.181.105.99" dst_port="25"/>
            <filter src_ip="27.65.56.191" dst_ip="203.181.109.161" dst_port="25"/>
        </slice>
        <from usec="0" sec="1470632472"/>
        <to usec="0" sec="1470633276"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="104.13.93.106" dst_ip="163.28.154.166" dst_port="80"/>
        </slice>
        <from usec="0" sec="1470632400"/>
        <to usec="0" sec="1470633299"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="163.28.81.39" dst_ip="134.217.62.172" src_port="64368" dst_port="443"/>
            <filter src_ip="163.28.41.143" dst_ip="134.217.62.172" src_port="61702" dst_port="443"/>
        </slice>
        <from usec="0" sec="1470633135"/>
        <to usec="0" sec="1470633165"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="186.87.51.47" dst_ip="203.181.96.52" dst_port="80"/>
        </slice>
        <from usec="0" sec="1470632403"/>
        <to usec="0" sec="1470633233"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="96.60.41.199" dst_ip="203.181.98.43" src_port="53049" dst_port="80"/>
            <filter src_ip="96.60.41.199" dst_ip="203.181.98.43" src_port="53048" dst_port="80"/>
            <filter src_ip="46.243.8.196" dst_ip="203.181.98.43" src_port="57392" dst_port="80"/>
            <filter src_ip="46.243.8.196" dst_ip="203.181.98.43" src_port="57390" dst_port="80"/>
            <filter src_ip="45.59.97.209" dst_ip="203.181.98.43"/>
        </slice>
        <from usec="0" sec="1470632476"/>
        <to usec="0" sec="1470632498"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.75.217.28" dst_ip="64.97.78.22" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470633263"/>
        <to usec="0" sec="1470633264"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.28.154.166" dst_ip="104.13.93.106" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632438"/>
        <to usec="0" sec="1470633299"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="192.2.188.16" dst_ip="163.28.132.124" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632549"/>
        <to usec="0" sec="1470632550"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.181.196.201"/>
        </slice>
        <from usec="0" sec="1470632440"/>
        <to usec="0" sec="1470632660"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.181.123.112"/>
        </slice>
        <from usec="0" sec="1470632961"/>
        <to usec="0" sec="1470633123"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.181.196.206"/>
        </slice>
        <from usec="0" sec="1470632724"/>
        <to usec="0" sec="1470632782"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.8.184.144"/>
        </slice>
        <from usec="0" sec="1470632779"/>
        <to usec="0" sec="1470633143"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="64.97.78.22"/>
        </slice>
        <from usec="0" sec="1470633176"/>
        <to usec="0" sec="1470633266"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,012,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="210.22.32.208"/>
        </slice>
        <from usec="0" sec="1470632634"/>
        <to usec="0" sec="1470632637"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.147.157.17"/>
        </slice>
        <from usec="0" sec="1470632497"/>
        <to usec="0" sec="1470632500"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.8.39.43"/>
        </slice>
        <from usec="0" sec="1470633019"/>
        <to usec="0" sec="1470633021"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.181.15.45"/>
        </slice>
        <from usec="0" sec="1470632767"/>
        <to usec="0" sec="1470632770"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.8.182.132"/>
        </slice>
        <from usec="0" sec="1470633049"/>
        <to usec="0" sec="1470633052"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.181.91.168"/>
        </slice>
        <from usec="0" sec="1470632821"/>
        <to usec="0" sec="1470632914"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="1.87.141.108"/>
        </slice>
        <from usec="0" sec="1470633071"/>
        <to usec="0" sec="1470633074"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="163.28.167.110"/>
        </slice>
        <from usec="0" sec="1470632883"/>
        <to usec="0" sec="1470632885"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.181.10.195"/>
        </slice>
        <from usec="0" sec="1470632429"/>
        <to usec="0" sec="1470632432"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.181.253.61"/>
        </slice>
        <from usec="0" sec="1470632883"/>
        <to usec="0" sec="1470632885"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="8.45.148.185"/>
        </slice>
        <from usec="0" sec="1470633089"/>
        <to usec="0" sec="1470633091"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="60.97.9.55"/>
        </slice>
        <from usec="0" sec="1470632686"/>
        <to usec="0" sec="1470632689"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="208.116.144.202"/>
        </slice>
        <from usec="0" sec="1470632811"/>
        <to usec="0" sec="1470632831"/>
    </anomaly>
    <anomaly type="notice" value="1.000200,1.948270,503,1 0 0 0 0 0 0 0 0 1 0 0,ntscACK">
        <slice>
            <filter src_ip="133.24.178.144" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.24.242.162"/>
        </slice>
        <from usec="0" sec="1470632476"/>
        <to usec="0" sec="1470632479"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="223.112.180.217"/>
        </slice>
        <from usec="0" sec="1470632877"/>
        <to usec="0" sec="1470632880"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.8.174.43"/>
        </slice>
        <from usec="0" sec="1470633090"/>
        <to usec="0" sec="1470633093"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="208.116.141.81"/>
        </slice>
        <from usec="0" sec="1470632909"/>
        <to usec="0" sec="1470632922"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.75.223.238"/>
        </slice>
        <from usec="0" sec="1470632408"/>
        <to usec="0" sec="1470632411"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.28.183.26"/>
        </slice>
        <from usec="0" sec="1470632439"/>
        <to usec="0" sec="1470632642"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.108.210.67"/>
        </slice>
        <from usec="0" sec="1470632408"/>
        <to usec="0" sec="1470632411"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="218.87.209.125"/>
        </slice>
        <from usec="0" sec="1470632417"/>
        <to usec="0" sec="1470633290"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.28.183.188"/>
        </slice>
        <from usec="0" sec="1470632712"/>
        <to usec="0" sec="1470632715"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.28.112.105"/>
        </slice>
        <from usec="0" sec="1470632460"/>
        <to usec="0" sec="1470632463"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="210.5.63.171"/>
        </slice>
        <from usec="0" sec="1470632474"/>
        <to usec="0" sec="1470632477"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.8.171.153"/>
        </slice>
        <from usec="0" sec="1470632761"/>
        <to usec="0" sec="1470632764"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.75.51.133"/>
        </slice>
        <from usec="0" sec="1470633208"/>
        <to usec="0" sec="1470633213"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.181.214.150"/>
        </slice>
        <from usec="0" sec="1470632554"/>
        <to usec="0" sec="1470633177"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.8.252.116"/>
        </slice>
        <from usec="0" sec="1470632589"/>
        <to usec="0" sec="1470632592"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.181.7.150"/>
        </slice>
        <from usec="0" sec="1470632637"/>
        <to usec="0" sec="1470632641"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.75.62.182"/>
        </slice>
        <from usec="0" sec="1470632556"/>
        <to usec="0" sec="1470632586"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.28.71.134"/>
        </slice>
        <from usec="0" sec="1470632847"/>
        <to usec="0" sec="1470632852"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="192.51.157.169"/>
        </slice>
        <from usec="0" sec="1470633107"/>
        <to usec="0" sec="1470633110"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.8.177.198"/>
        </slice>
        <from usec="0" sec="1470632838"/>
        <to usec="0" sec="1470633040"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.75.56.57"/>
        </slice>
        <from usec="0" sec="1470633103"/>
        <to usec="0" sec="1470633106"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.8.23.203"/>
        </slice>
        <from usec="0" sec="1470632957"/>
        <to usec="0" sec="1470632960"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.8.107.210"/>
        </slice>
        <from usec="0" sec="1470632963"/>
        <to usec="0" sec="1470632967"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="27.165.133.223"/>
        </slice>
        <from usec="0" sec="1470632759"/>
        <to usec="0" sec="1470632762"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="126.140.149.0"/>
        </slice>
        <from usec="0" sec="1470633236"/>
        <to usec="0" sec="1470633238"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="67.166.102.226"/>
        </slice>
        <from usec="0" sec="1470632482"/>
        <to usec="0" sec="1470632492"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="49.165.50.249"/>
        </slice>
        <from usec="0" sec="1470632784"/>
        <to usec="0" sec="1470632787"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.181.55.231"/>
        </slice>
        <from usec="0" sec="1470632977"/>
        <to usec="0" sec="1470632980"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.28.154.254"/>
        </slice>
        <from usec="0" sec="1470633211"/>
        <to usec="0" sec="1470633214"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.251.23.233"/>
        </slice>
        <from usec="0" sec="1470632495"/>
        <to usec="0" sec="1470632498"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.28.182.236"/>
        </slice>
        <from usec="0" sec="1470632793"/>
        <to usec="0" sec="1470633003"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.8.207.14"/>
        </slice>
        <from usec="0" sec="1470632589"/>
        <to usec="0" sec="1470632592"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="133.24.42.16" dst_ip="17.174.205.13" dst_port="443"/>
            <filter src_ip="133.24.43.252" dst_ip="17.174.205.13" dst_port="443"/>
        </slice>
        <from usec="0" sec="1470632980"/>
        <to usec="0" sec="1470633049"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="91.164.39.93"/>
        </slice>
        <from usec="0" sec="1470633255"/>
        <to usec="0" sec="1470633259"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="122.86.25.38"/>
        </slice>
        <from usec="0" sec="1470632544"/>
        <to usec="0" sec="1470632557"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="40.77.20.174"/>
        </slice>
        <from usec="0" sec="1470633223"/>
        <to usec="0" sec="1470633240"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="49.173.31.14" dst_ip="202.75.217.28" dst_port="443"/>
        </slice>
        <from usec="0" sec="1470632571"/>
        <to usec="0" sec="1470633154"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="202.75.59.178" dst_ip="202.68.61.65" dst_port="80"/>
        </slice>
        <from usec="0" sec="1470632556"/>
        <to usec="0" sec="1470632574"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ipv46tun">
        <slice>
            <filter src_ip="149.237.36.178" dst_ip="203.181.109.134"/>
        </slice>
        <from usec="0" sec="1470632657"/>
        <to usec="0" sec="1470632813"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="200.87.156.245" src_port="2055" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632481"/>
        <to usec="0" sec="1470632482"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="210.166.26.103" src_port="3173" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632403"/>
        <to usec="0" sec="1470632406"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="176.75.126.165" src_port="3931" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470633019"/>
        <to usec="0" sec="1470633020"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="111.199.119.229" src_port="12200" dst_port="10200" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632826"/>
        <to usec="0" sec="1470632856"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.209.224.254"/>
        </slice>
        <from usec="0" sec="1470632882"/>
        <to usec="0" sec="1470632899"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.179.240.190" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632842"/>
        <to usec="0" sec="1470632843"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="92.239.156.122"/>
        </slice>
        <from usec="0" sec="1470633170"/>
        <to usec="0" sec="1470633195"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="175.247.141.250"/>
        </slice>
        <from usec="0" sec="1470633270"/>
        <to usec="0" sec="1470633289"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="94.6.216.190"/>
        </slice>
        <from usec="0" sec="1470633279"/>
        <to usec="0" sec="1470633290"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="180.83.212.187"/>
        </slice>
        <from usec="0" sec="1470632964"/>
        <to usec="0" sec="1470632983"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="27.116.19.117" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632864"/>
        <to usec="0" sec="1470633157"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="86.65.65.203" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632896"/>
        <to usec="0" sec="1470633174"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.74.79.140"/>
        </slice>
        <from usec="0" sec="1470632888"/>
        <to usec="0" sec="1470632928"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.120.28.161"/>
        </slice>
        <from usec="0" sec="1470632873"/>
        <to usec="0" sec="1470632875"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.62.93.99"/>
        </slice>
        <from usec="0" sec="1470632746"/>
        <to usec="0" sec="1470632763"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="220.31.31.29"/>
        </slice>
        <from usec="0" sec="1470632564"/>
        <to usec="0" sec="1470632567"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="119.66.76.218" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470633270"/>
        <to usec="0" sec="1470633272"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="62.216.99.127" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632697"/>
        <to usec="0" sec="1470632698"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.124.176.151" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632748"/>
        <to usec="0" sec="1470633237"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.172.206.105" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470633055"/>
        <to usec="0" sec="1470633057"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.8.250.107"/>
        </slice>
        <from usec="0" sec="1470632747"/>
        <to usec="0" sec="1470632750"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.129.207.138" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632403"/>
        <to usec="0" sec="1470633057"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.4.91.116"/>
        </slice>
        <from usec="0" sec="1470632905"/>
        <to usec="0" sec="1470632910"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="87.141.76.141" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632515"/>
        <to usec="0" sec="1470632526"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.179.89.17"/>
        </slice>
        <from usec="0" sec="1470632757"/>
        <to usec="0" sec="1470632765"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.229.83.109" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632705"/>
        <to usec="0" sec="1470632707"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="89.122.215.5" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632862"/>
        <to usec="0" sec="1470632863"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.144.204.171"/>
        </slice>
        <from usec="0" sec="1470633228"/>
        <to usec="0" sec="1470633252"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="82.109.178.213"/>
        </slice>
        <from usec="0" sec="1470632918"/>
        <to usec="0" sec="1470632955"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="77.145.46.163"/>
        </slice>
        <from usec="0" sec="1470633088"/>
        <to usec="0" sec="1470633101"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.90.197.30" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632874"/>
        <to usec="0" sec="1470633121"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.116.6.199" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470633022"/>
        <to usec="0" sec="1470633024"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="186.202.231.69"/>
        </slice>
        <from usec="0" sec="1470632900"/>
        <to usec="0" sec="1470632947"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="186.208.169.58" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470633289"/>
        <to usec="0" sec="1470633291"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="186.196.212.185"/>
        </slice>
        <from usec="0" sec="1470632921"/>
        <to usec="0" sec="1470632923"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.10.12.62"/>
        </slice>
        <from usec="0" sec="1470632587"/>
        <to usec="0" sec="1470632592"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.184.134.203"/>
        </slice>
        <from usec="0" sec="1470632925"/>
        <to usec="0" sec="1470632946"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.117.51.40" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632960"/>
        <to usec="0" sec="1470632972"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="68.174.56.209" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470633154"/>
        <to usec="0" sec="1470633156"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="217.218.204.165"/>
        </slice>
        <from usec="0" sec="1470633007"/>
        <to usec="0" sec="1470633047"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.58.176.211" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632463"/>
        <to usec="0" sec="1470632465"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.189.206.34"/>
        </slice>
        <from usec="0" sec="1470632732"/>
        <to usec="0" sec="1470632744"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="115.98.244.173" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632707"/>
        <to usec="0" sec="1470633078"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="95.163.170.163"/>
        </slice>
        <from usec="0" sec="1470633000"/>
        <to usec="0" sec="1470633022"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.28.51.95"/>
        </slice>
        <from usec="0" sec="1470633247"/>
        <to usec="0" sec="1470633250"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.181.104.132"/>
        </slice>
        <from usec="0" sec="1470632593"/>
        <to usec="0" sec="1470632626"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="83.122.64.131" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470633018"/>
        <to usec="0" sec="1470633019"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.135.61.159" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632850"/>
        <to usec="0" sec="1470632860"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.188.59.31" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632683"/>
        <to usec="0" sec="1470632694"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.56.190.250" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632790"/>
        <to usec="0" sec="1470632792"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.28.25.137"/>
        </slice>
        <from usec="0" sec="1470632579"/>
        <to usec="0" sec="1470632582"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.50.115.117"/>
        </slice>
        <from usec="0" sec="1470633090"/>
        <to usec="0" sec="1470633094"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.232.127.109"/>
        </slice>
        <from usec="0" sec="1470633182"/>
        <to usec="0" sec="1470633218"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="65.46.40.143" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470633028"/>
        <to usec="0" sec="1470633029"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.135.144.249" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632436"/>
        <to usec="0" sec="1470633198"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="41.32.251.252" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632468"/>
        <to usec="0" sec="1470632471"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.241.235.151" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632401"/>
        <to usec="0" sec="1470632403"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="131.61.136.252"/>
        </slice>
        <from usec="0" sec="1470632853"/>
        <to usec="0" sec="1470632865"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="190.165.67.1" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632793"/>
        <to usec="0" sec="1470632794"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.245.194.244" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633177"/>
        <to usec="0" sec="1470633179"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.201.101.9"/>
        </slice>
        <from usec="0" sec="1470633253"/>
        <to usec="0" sec="1470633256"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="151.54.89.25" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632827"/>
        <to usec="0" sec="1470632828"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.185.39.101"/>
        </slice>
        <from usec="0" sec="1470632716"/>
        <to usec="0" sec="1470632727"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="179.198.136.235" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632948"/>
        <to usec="0" sec="1470632950"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.75.212.19"/>
        </slice>
        <from usec="0" sec="1470633065"/>
        <to usec="0" sec="1470633077"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.211.218.71"/>
        </slice>
        <from usec="0" sec="1470632814"/>
        <to usec="0" sec="1470632826"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="91.98.129.184" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632649"/>
        <to usec="0" sec="1470632651"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="124.154.239.190" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632806"/>
        <to usec="0" sec="1470632808"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="81.241.59.185"/>
        </slice>
        <from usec="0" sec="1470632616"/>
        <to usec="0" sec="1470632622"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="179.187.164.116"/>
        </slice>
        <from usec="0" sec="1470632821"/>
        <to usec="0" sec="1470632823"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="175.43.206.116"/>
        </slice>
        <from usec="0" sec="1470633226"/>
        <to usec="0" sec="1470633240"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.28.183.177"/>
        </slice>
        <from usec="0" sec="1470632653"/>
        <to usec="0" sec="1470632889"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="49.21.133.160" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632821"/>
        <to usec="0" sec="1470632828"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="94.88.172.145" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470633116"/>
        <to usec="0" sec="1470633118"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.114.58.83" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632738"/>
        <to usec="0" sec="1470632750"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="1.168.135.173" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632898"/>
        <to usec="0" sec="1470632900"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="190.156.165.154" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470633188"/>
        <to usec="0" sec="1470633191"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.96.198.83" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632904"/>
        <to usec="0" sec="1470632906"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="196.152.110.80"/>
        </slice>
        <from usec="0" sec="1470632408"/>
        <to usec="0" sec="1470632418"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="80.243.138.100"/>
        </slice>
        <from usec="0" sec="1470632882"/>
        <to usec="0" sec="1470632893"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="94.141.239.166"/>
        </slice>
        <from usec="0" sec="1470632408"/>
        <to usec="0" sec="1470632411"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="46.204.210.66" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632858"/>
        <to usec="0" sec="1470632860"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.135.158.65" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632708"/>
        <to usec="0" sec="1470632709"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.223.22.104" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632634"/>
        <to usec="0" sec="1470632641"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="119.67.76.104"/>
        </slice>
        <from usec="0" sec="1470632842"/>
        <to usec="0" sec="1470632857"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.91.44.116" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470633126"/>
        <to usec="0" sec="1470633127"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="69.188.196.116"/>
        </slice>
        <from usec="0" sec="1470632977"/>
        <to usec="0" sec="1470632983"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.181.111.170"/>
        </slice>
        <from usec="0" sec="1470632865"/>
        <to usec="0" sec="1470633299"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="118.36.86.107" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632665"/>
        <to usec="0" sec="1470633056"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="84.194.106.109"/>
        </slice>
        <from usec="0" sec="1470632649"/>
        <to usec="0" sec="1470632660"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.243.200.98"/>
        </slice>
        <from usec="0" sec="1470633055"/>
        <to usec="0" sec="1470633082"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.110.221.83" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632987"/>
        <to usec="0" sec="1470633023"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="5.245.61.116" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470633048"/>
        <to usec="0" sec="1470633062"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.216.189.102" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632717"/>
        <to usec="0" sec="1470632728"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="173.178.142.139"/>
        </slice>
        <from usec="0" sec="1470632556"/>
        <to usec="0" sec="1470632578"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="124.154.200.65"/>
        </slice>
        <from usec="0" sec="1470632472"/>
        <to usec="0" sec="1470632484"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.24.70.83"/>
        </slice>
        <from usec="0" sec="1470632408"/>
        <to usec="0" sec="1470632411"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.51.237.56"/>
        </slice>
        <from usec="0" sec="1470632868"/>
        <to usec="0" sec="1470632888"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="203.181.96.63"/>
        </slice>
        <from usec="0" sec="1470632502"/>
        <to usec="0" sec="1470632570"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="70.200.55.194"/>
        </slice>
        <from usec="0" sec="1470632431"/>
        <to usec="0" sec="1470632461"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.71.188.55" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632616"/>
        <to usec="0" sec="1470633243"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="189.108.231.203" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470633251"/>
        <to usec="0" sec="1470633253"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.113.26.52" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632851"/>
        <to usec="0" sec="1470632876"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="179.201.60.52" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632520"/>
        <to usec="0" sec="1470632521"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="79.202.233.205" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632425"/>
        <to usec="0" sec="1470632427"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="222.176.119.204" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470633116"/>
        <to usec="0" sec="1470633133"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.40.98.48" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470633020"/>
        <to usec="0" sec="1470633021"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="200.73.75.208"/>
        </slice>
        <from usec="0" sec="1470632826"/>
        <to usec="0" sec="1470632848"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="178.192.34.47" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632596"/>
        <to usec="0" sec="1470632597"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="58.157.63.212" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470633114"/>
        <to usec="0" sec="1470633117"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="121.234.105.42"/>
        </slice>
        <from usec="0" sec="1470633192"/>
        <to usec="0" sec="1470633216"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="80.68.24.37" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632921"/>
        <to usec="0" sec="1470633266"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.174.48.47" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632799"/>
        <to usec="0" sec="1470632800"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="46.146.87.249" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632493"/>
        <to usec="0" sec="1470632989"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="91.98.233.226" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632541"/>
        <to usec="0" sec="1470632543"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="203.242.238.253" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470633187"/>
        <to usec="0" sec="1470633188"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="41.189.15.251" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632692"/>
        <to usec="0" sec="1470632693"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.181.89.4"/>
        </slice>
        <from usec="0" sec="1470632849"/>
        <to usec="0" sec="1470632851"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="186.65.133.250" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632665"/>
        <to usec="0" sec="1470632667"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="213.254.154.16" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470633292"/>
        <to usec="0" sec="1470633293"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="111.206.99.239" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632946"/>
        <to usec="0" sec="1470632947"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="83.145.142.243"/>
        </slice>
        <from usec="0" sec="1470633085"/>
        <to usec="0" sec="1470633097"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="187.77.217.16" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470633123"/>
        <to usec="0" sec="1470633124"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="71.165.195.231" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632885"/>
        <to usec="0" sec="1470632887"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="119.84.79.4"/>
        </slice>
        <from usec="0" sec="1470633049"/>
        <to usec="0" sec="1470633062"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="158.58.161.25" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632724"/>
        <to usec="0" sec="1470632726"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.52.97.22" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1470632577"/>
        <to usec="0" sec="1470632578"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="131.179.193.240"/>
        </slice>
        <from usec="0" sec="1470632934"/>
        <to usec="0" sec="1470632937"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="156.198.101.52" proto="icmp"/>
        </slice>
        <from usec="0" sec="1470632614"/>
        <to usec="0" sec="1470632616"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="23.235.230.227"/>
        </slice>
        <from usec="0" sec="1470633203"/>
        <to usec="0" sec="1470633204"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,011,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="200.3.195.200" src_port="4028" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470633029"/>
        <to usec="0" sec="1470633031"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.8.149.73"/>
        </slice>
        <from usec="0" sec="1470632796"/>
        <to usec="0" sec="1470633249"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.28.181.78"/>
        </slice>
        <from usec="0" sec="1470632659"/>
        <to usec="0" sec="1470632662"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.8.174.44"/>
        </slice>
        <from usec="0" sec="1470632546"/>
        <to usec="0" sec="1470632549"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.75.223.64"/>
        </slice>
        <from usec="0" sec="1470632731"/>
        <to usec="0" sec="1470632736"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.69.7.119"/>
        </slice>
        <from usec="0" sec="1470632743"/>
        <to usec="0" sec="1470632746"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="222.170.76.90" proto="icmp"/>
        </slice>
        <from usec="0" sec="1470633096"/>
        <to usec="0" sec="1470633097"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="133.24.103.125"/>
        </slice>
        <from usec="0" sec="1470632470"/>
        <to usec="0" sec="1470633020"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="133.245.30.134"/>
        </slice>
        <from usec="0" sec="1470632653"/>
        <to usec="0" sec="1470632655"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="133.245.21.57"/>
        </slice>
        <from usec="0" sec="1470633020"/>
        <to usec="0" sec="1470633023"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.24.175.127"/>
        </slice>
        <from usec="0" sec="1470633043"/>
        <to usec="0" sec="1470633046"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.51.88.207"/>
        </slice>
        <from usec="0" sec="1470632460"/>
        <to usec="0" sec="1470632473"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="212.12.220.48"/>
        </slice>
        <from usec="0" sec="1470632607"/>
        <to usec="0" sec="1470632610"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="69.198.59.49"/>
        </slice>
        <from usec="0" sec="1470632566"/>
        <to usec="0" sec="1470632569"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="41.209.145.108"/>
        </slice>
        <from usec="0" sec="1470633241"/>
        <to usec="0" sec="1470633246"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.28.101.29"/>
        </slice>
        <from usec="0" sec="1470633174"/>
        <to usec="0" sec="1470633177"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="124.154.250.170"/>
        </slice>
        <from usec="0" sec="1470632865"/>
        <to usec="0" sec="1470632868"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.24.167.91"/>
        </slice>
        <from usec="0" sec="1470632700"/>
        <to usec="0" sec="1470633252"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="163.28.222.85"/>
        </slice>
        <from usec="0" sec="1470632678"/>
        <to usec="0" sec="1470633044"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.245.21.27"/>
        </slice>
        <from usec="0" sec="1470633039"/>
        <to usec="0" sec="1470633042"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.8.97.194"/>
        </slice>
        <from usec="0" sec="1470633168"/>
        <to usec="0" sec="1470633171"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="182.128.61.71"/>
        </slice>
        <from usec="0" sec="1470632579"/>
        <to usec="0" sec="1470632582"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.28.62.151"/>
        </slice>
        <from usec="0" sec="1470632453"/>
        <to usec="0" sec="1470632489"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="163.28.222.105"/>
        </slice>
        <from usec="0" sec="1470632499"/>
        <to usec="0" sec="1470632502"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.181.108.8" dst_port="80"/>
        </slice>
        <from usec="0" sec="1470632460"/>
        <to usec="0" sec="1470633233"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="222.70.195.77"/>
        </slice>
        <from usec="0" sec="1470633137"/>
        <to usec="0" sec="1470633139"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.24.242.197"/>
        </slice>
        <from usec="0" sec="1470633049"/>
        <to usec="0" sec="1470633052"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="198.249.126.79"/>
        </slice>
        <from usec="0" sec="1470632402"/>
        <to usec="0" sec="1470632405"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.75.220.142"/>
        </slice>
        <from usec="0" sec="1470633265"/>
        <to usec="0" sec="1470633268"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="42.159.218.157"/>
        </slice>
        <from usec="0" sec="1470633198"/>
        <to usec="0" sec="1470633204"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.128.253.178"/>
        </slice>
        <from usec="0" sec="1470632649"/>
        <to usec="0" sec="1470632652"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.181.27.165"/>
        </slice>
        <from usec="0" sec="1470633272"/>
        <to usec="0" sec="1470633275"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="211.85.247.32"/>
        </slice>
        <from usec="0" sec="1470633272"/>
        <to usec="0" sec="1470633276"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.28.183.35"/>
        </slice>
        <from usec="0" sec="1470632568"/>
        <to usec="0" sec="1470632570"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.28.49.33"/>
        </slice>
        <from usec="0" sec="1470633285"/>
        <to usec="0" sec="1470633288"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="121.141.240.228"/>
        </slice>
        <from usec="0" sec="1470633028"/>
        <to usec="0" sec="1470633031"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.24.139.121"/>
        </slice>
        <from usec="0" sec="1470632999"/>
        <to usec="0" sec="1470633001"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.181.103.123" dst_ip="85.206.119.81" dst_port="443"/>
        </slice>
        <from usec="0" sec="1470632517"/>
        <to usec="0" sec="1470633278"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="81.101.173.115"/>
        </slice>
        <from usec="0" sec="1470632714"/>
        <to usec="0" sec="1470632717"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="65.20.225.115"/>
        </slice>
        <from usec="0" sec="1470632722"/>
        <to usec="0" sec="1470632724"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="41.130.87.17"/>
        </slice>
        <from usec="0" sec="1470632970"/>
        <to usec="0" sec="1470632972"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="116.224.0.249"/>
        </slice>
        <from usec="0" sec="1470632460"/>
        <to usec="0" sec="1470632463"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="188.136.56.229"/>
        </slice>
        <from usec="0" sec="1470633146"/>
        <to usec="0" sec="1470633149"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.28.102.71"/>
        </slice>
        <from usec="0" sec="1470632708"/>
        <to usec="0" sec="1470632711"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="124.152.84.125"/>
        </slice>
        <from usec="0" sec="1470632896"/>
        <to usec="0" sec="1470632898"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.24.171.131"/>
        </slice>
        <from usec="0" sec="1470632422"/>
        <to usec="0" sec="1470632425"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.8.172.87"/>
        </slice>
        <from usec="0" sec="1470633213"/>
        <to usec="0" sec="1470633216"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.75.39.164"/>
        </slice>
        <from usec="0" sec="1470632945"/>
        <to usec="0" sec="1470632947"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.28.40.93"/>
        </slice>
        <from usec="0" sec="1470633282"/>
        <to usec="0" sec="1470633285"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="110.240.198.144"/>
        </slice>
        <from usec="0" sec="1470632400"/>
        <to usec="0" sec="1470632403"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.28.154.145"/>
        </slice>
        <from usec="0" sec="1470632817"/>
        <to usec="0" sec="1470632820"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="190.152.5.145"/>
        </slice>
        <from usec="0" sec="1470632472"/>
        <to usec="0" sec="1470632475"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.28.181.194"/>
        </slice>
        <from usec="0" sec="1470633265"/>
        <to usec="0" sec="1470633268"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="118.35.168.60"/>
        </slice>
        <from usec="0" sec="1470632400"/>
        <to usec="0" sec="1470632403"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.28.55.195"/>
        </slice>
        <from usec="0" sec="1470632470"/>
        <to usec="0" sec="1470632473"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="192.51.151.199"/>
        </slice>
        <from usec="0" sec="1470633260"/>
        <to usec="0" sec="1470633263"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.28.53.192"/>
        </slice>
        <from usec="0" sec="1470632991"/>
        <to usec="0" sec="1470632993"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="192.51.151.204"/>
        </slice>
        <from usec="0" sec="1470632801"/>
        <to usec="0" sec="1470632804"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="60.187.53.222"/>
        </slice>
        <from usec="0" sec="1470632603"/>
        <to usec="0" sec="1470632610"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.28.116.41"/>
        </slice>
        <from usec="0" sec="1470632625"/>
        <to usec="0" sec="1470632628"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.24.172.33"/>
        </slice>
        <from usec="0" sec="1470632924"/>
        <to usec="0" sec="1470632926"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.6.213.222"/>
        </slice>
        <from usec="0" sec="1470633116"/>
        <to usec="0" sec="1470633128"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.8.205.253"/>
        </slice>
        <from usec="0" sec="1470632544"/>
        <to usec="0" sec="1470632547"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.28.182.227"/>
        </slice>
        <from usec="0" sec="1470633275"/>
        <to usec="0" sec="1470633278"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.8.89.14"/>
        </slice>
        <from usec="0" sec="1470633125"/>
        <to usec="0" sec="1470633128"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.28.217.243"/>
        </slice>
        <from usec="0" sec="1470632416"/>
        <to usec="0" sec="1470632419"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="163.28.39.250"/>
        </slice>
        <from usec="0" sec="1470632784"/>
        <to usec="0" sec="1470632787"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.181.138.247"/>
        </slice>
        <from usec="0" sec="1470633190"/>
        <to usec="0" sec="1470633193"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.28.181.229"/>
        </slice>
        <from usec="0" sec="1470632739"/>
        <to usec="0" sec="1470632742"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="133.245.26.247"/>
        </slice>
        <from usec="0" sec="1470632524"/>
        <to usec="0" sec="1470632527"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.51.193.8"/>
        </slice>
        <from usec="0" sec="1470633043"/>
        <to usec="0" sec="1470633046"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="111.226.244.142"/>
        </slice>
        <from usec="0" sec="1470632997"/>
        <to usec="0" sec="1470633000"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.5.33.77"/>
        </slice>
        <from usec="0" sec="1470632449"/>
        <to usec="0" sec="1470632452"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="150.51.230.167"/>
        </slice>
        <from usec="0" sec="1470632793"/>
        <to usec="0" sec="1470632797"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="163.28.25.218"/>
        </slice>
        <from usec="0" sec="1470632643"/>
        <to usec="0" sec="1470632646"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.87.62.156"/>
        </slice>
        <from usec="0" sec="1470633205"/>
        <to usec="0" sec="1470633208"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="133.159.249.179" dst_port="80"/>
            <filter src_ip="133.159.249.179" dst_ip="163.28.243.18" dst_port="443"/>
            <filter src_ip="202.68.148.247" dst_ip="163.28.243.18" dst_port="80"/>
        </slice>
        <from usec="0" sec="1470632827"/>
        <to usec="0" sec="1470632869"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="163.28.233.32"/>
        </slice>
        <from usec="0" sec="1470633190"/>
        <to usec="0" sec="1470633193"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="58.121.164.141" dst_ip="163.28.243.52" dst_port="80"/>
        </slice>
        <from usec="0" sec="1470632809"/>
        <to usec="0" sec="1470632916"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="150.51.136.251"/>
        </slice>
        <from usec="0" sec="1470632979"/>
        <to usec="0" sec="1470632981"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="203.181.103.64"/>
        </slice>
        <from usec="0" sec="1470632462"/>
        <to usec="0" sec="1470632464"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,901,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="174.252.75.94"/>
        </slice>
        <from usec="0" sec="1470633085"/>
        <to usec="0" sec="1470633088"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="163.28.39.30"/>
        </slice>
        <from usec="0" sec="1470633180"/>
        <to usec="0" sec="1470633182"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.181.101.5"/>
        </slice>
        <from usec="0" sec="1470632991"/>
        <to usec="0" sec="1470632993"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.83.65.31"/>
        </slice>
        <from usec="0" sec="1470633217"/>
        <to usec="0" sec="1470633220"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.101.245.9"/>
        </slice>
        <from usec="0" sec="1470633174"/>
        <to usec="0" sec="1470633177"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="163.28.78.237" src_port="36698"/>
        </slice>
        <from usec="0" sec="1470632616"/>
        <to usec="0" sec="1470633288"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.181.105.102" dst_port="25"/>
            <filter src_ip="172.145.50.204" dst_ip="203.181.105.102" src_port="443"/>
        </slice>
        <from usec="0" sec="1470632636"/>
        <to usec="0" sec="1470632654"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="133.245.90.163"/>
        </slice>
        <from usec="0" sec="1470632607"/>
        <to usec="0" sec="1470632610"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="202.69.10.157"/>
        </slice>
        <from usec="0" sec="1470632845"/>
        <to usec="0" sec="1470632848"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="133.245.6.145"/>
        </slice>
        <from usec="0" sec="1470632773"/>
        <to usec="0" sec="1470632776"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="202.75.223.83"/>
        </slice>
        <from usec="0" sec="1470632589"/>
        <to usec="0" sec="1470632592"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.11.122.195"/>
        </slice>
        <from usec="0" sec="1470632643"/>
        <to usec="0" sec="1470632646"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,010,1 0 0 0 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="203.181.57.36"/>
        </slice>
        <from usec="0" sec="1470632980"/>
        <to usec="0" sec="1470632983"/>
    </anomaly>
    <anomaly type="notice" value="1.000200,1.948270,503,1 0 0 0 0 0 0 0 0 1 0 0,ntscACK">
        <slice>
            <filter src_ip="202.75.57.73" dst_port="443"/>
            <filter src_ip="202.75.57.73" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.135.42.120" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633050"/>
        <to usec="0" sec="1470633061"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.71.44.199" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633068"/>
        <to usec="0" sec="1470633080"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.181.53.201" dst_ip="17.78.159.79" src_port="47582" dst_port="25"/>
        </slice>
        <from usec="0" sec="1470632851"/>
        <to usec="0" sec="1470632854"/>
    </anomaly>
    <anomaly type="notice" value="1.027560,2.132500,503,0 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="23.208.125.10" dst_ip="163.28.182.50" src_port="80" dst_port="58024" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632893"/>
        <to usec="0" sec="1470632895"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,504,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="31.243.98.240" dst_ip="163.28.181.31" src_port="443" dst_port="43108"/>
        </slice>
        <from usec="0" sec="1470632407"/>
        <to usec="0" sec="1470632478"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.220.17.176" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632640"/>
        <to usec="0" sec="1470633027"/>
    </anomaly>
    <anomaly type="notice" value="1.072230,1.921970,503,1 1 1 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.24.139.30" dst_ip="178.162.30.180" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="93.169.201.235" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632645"/>
        <to usec="0" sec="1470632669"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="61.146.142.46" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632430"/>
        <to usec="0" sec="1470632971"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,503,1 1 1 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="131.179.92.99" dst_ip="52.107.40.85" dst_port="80"/>
            <filter src_ip="131.179.92.99" dst_ip="52.107.40.129" dst_port="80"/>
        </slice>
        <from usec="0" sec="1470632693"/>
        <to usec="0" sec="1470633256"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="90.4.2.55" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633152"/>
        <to usec="0" sec="1470633177"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.28.182.79" dst_ip="17.100.29.77" src_port="50130" dst_port="80"/>
        </slice>
        <from usec="0" sec="1470632415"/>
        <to usec="0" sec="1470632422"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="157.181.212.209" dst_ip="17.82.34.194" src_port="37961" dst_port="25"/>
        </slice>
        <from usec="0" sec="1470632894"/>
        <to usec="0" sec="1470632906"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.28.129.133" dst_ip="207.208.13.155" src_port="995" dst_port="63535"/>
        </slice>
        <from usec="0" sec="1470633198"/>
        <to usec="0" sec="1470633204"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.31.170.76" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632627"/>
        <to usec="0" sec="1470632630"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,503,1 1 1 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.28.100.240" dst_ip="89.222.102.43" src_port="49362" dst_port="80"/>
            <filter src_ip="163.28.100.240" dst_ip="89.222.102.43" src_port="49361" dst_port="80"/>
            <filter src_ip="163.28.100.240" dst_ip="162.189.33.70" src_port="49200" dst_port="443"/>
        </slice>
        <from usec="0" sec="1470632651"/>
        <to usec="0" sec="1470632673"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="202.75.57.62" dst_ip="69.242.87.43" dst_port="80"/>
        </slice>
        <from usec="0" sec="1470633180"/>
        <to usec="0" sec="1470633206"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="218.103.143.68" dst_ip="163.28.38.113" dst_port="80"/>
        </slice>
        <from usec="0" sec="1470632556"/>
        <to usec="0" sec="1470632576"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="110.176.121.177" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633192"/>
        <to usec="0" sec="1470633212"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.206.111.81" src_port="3750" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632556"/>
        <to usec="0" sec="1470632946"/>
    </anomaly>
    <anomaly type="notice" value="1.310600,2.060700,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.182.102.85" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632517"/>
        <to usec="0" sec="1470632814"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.28.129.212" dst_ip="23.160.20.85" src_port="41077" dst_port="25"/>
            <filter src_ip="163.28.129.212" dst_ip="98.106.188.195" src_port="52052" dst_port="25"/>
        </slice>
        <from usec="0" sec="1470633148"/>
        <to usec="0" sec="1470633186"/>
    </anomaly>
    <anomaly type="notice" value="1.013050,1.930780,999,1 1 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="37.103.188.213" dst_ip="203.181.109.142" src_port="11688" dst_port="123"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.072230,1.921970,504,1 1 1 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="23.212.27.126" dst_ip="163.28.180.44" src_port="443" dst_port="53455"/>
            <filter src_ip="23.212.27.126" dst_ip="163.28.180.44" src_port="443" dst_port="53454"/>
            <filter src_ip="23.212.27.126" dst_ip="163.28.180.44" src_port="443" dst_port="53453"/>
            <filter src_ip="23.212.27.126" dst_ip="163.28.180.44" src_port="443" dst_port="53444"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.310600,2.060700,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.162.83.97" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632923"/>
        <to usec="0" sec="1470633301"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="200.114.199.123" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633188"/>
        <to usec="0" sec="1470633201"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="60.133.245.26" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632646"/>
        <to usec="0" sec="1470633238"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,504,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="104.150.135.133" dst_ip="163.28.52.89" src_port="443"/>
        </slice>
        <from usec="0" sec="1470632590"/>
        <to usec="0" sec="1470632686"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,502,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="221.170.45.119" dst_port="22"/>
        </slice>
        <from usec="0" sec="1470632443"/>
        <to usec="0" sec="1470633256"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,503,1 1 1 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="193.34.9.241" dst_ip="163.28.38.113" dst_port="80"/>
            <filter src_ip="218.103.143.68" dst_ip="163.28.38.113" dst_port="80"/>
        </slice>
        <from usec="0" sec="1470632581"/>
        <to usec="0" sec="1470632700"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="133.5.47.16" dst_ip="14.245.101.40" src_port="41371" dst_port="2769"/>
        </slice>
        <from usec="0" sec="1470632476"/>
        <to usec="0" sec="1470632488"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="50.86.27.106" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633272"/>
        <to usec="0" sec="1470633283"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,503,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.8.30.100" dst_ip="183.152.233.254" dst_port="80"/>
        </slice>
        <from usec="0" sec="1470632636"/>
        <to usec="0" sec="1470632774"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,503,1 1 1 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="39.97.162.237" dst_ip="203.181.105.97" dst_port="80"/>
            <filter src_ip="39.97.162.237" dst_ip="203.181.105.123" dst_port="80"/>
        </slice>
        <from usec="0" sec="1470632625"/>
        <to usec="0" sec="1470632628"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,503,1 1 1 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.28.102.228" dst_port="80"/>
        </slice>
        <from usec="0" sec="1470632407"/>
        <to usec="0" sec="1470633293"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,503,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.130.173.138" dst_ip="163.28.38.113" dst_port="80"/>
        </slice>
        <from usec="0" sec="1470633275"/>
        <to usec="0" sec="1470633279"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="118.216.42.116" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633280"/>
        <to usec="0" sec="1470633293"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="209.29.210.85" dst_ip="203.181.109.142" src_port="25637" dst_port="123"/>
            <filter src_ip="209.29.210.85" dst_ip="203.181.109.142" src_port="15849" dst_port="123"/>
        </slice>
        <from usec="0" sec="1470632604"/>
        <to usec="0" sec="1470632763"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,504,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="198.220.197.158" dst_ip="163.28.100.253" src_port="443" dst_port="47012"/>
        </slice>
        <from usec="0" sec="1470632851"/>
        <to usec="0" sec="1470633239"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.28.129.133" dst_port="993"/>
        </slice>
        <from usec="0" sec="1470632400"/>
        <to usec="0" sec="1470633204"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="157.181.128.170" dst_ip="17.101.228.137" src_port="59013" dst_port="25"/>
        </slice>
        <from usec="0" sec="1470632454"/>
        <to usec="0" sec="1470632460"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="183.169.5.172" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633222"/>
        <to usec="0" sec="1470633238"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="106.246.61.189" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633027"/>
        <to usec="0" sec="1470633300"/>
    </anomaly>
    <anomaly type="notice" value="1.310600,2.060700,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.119.227.183" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632625"/>
        <to usec="0" sec="1470633300"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="211.147.165.144" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632591"/>
        <to usec="0" sec="1470633182"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="221.239.156.107" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633158"/>
        <to usec="0" sec="1470633161"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="120.213.112.101" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632489"/>
        <to usec="0" sec="1470632922"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,503,1 1 1 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.28.46.117" dst_ip="91.164.39.35" dst_port="80"/>
            <filter src_ip="163.28.46.117" dst_ip="65.48.201.54" dst_port="80"/>
        </slice>
        <from usec="0" sec="1470632544"/>
        <to usec="0" sec="1470633285"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.162.115.193" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632400"/>
        <to usec="0" sec="1470632883"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.55.173.211" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632752"/>
        <to usec="0" sec="1470632764"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.24.44.34" dst_ip="63.28.66.161" src_port="80"/>
        </slice>
        <from usec="0" sec="1470632773"/>
        <to usec="0" sec="1470633204"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.89.132.14" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632836"/>
        <to usec="0" sec="1470632839"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="218.211.222.30" dst_ip="163.28.113.246" src_port="21484" dst_port="80"/>
            <filter src_ip="218.211.222.30" dst_ip="163.28.113.246" src_port="9159" dst_port="80"/>
        </slice>
        <from usec="0" sec="1470632629"/>
        <to usec="0" sec="1470632635"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.120.166.3" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632567"/>
        <to usec="0" sec="1470632581"/>
    </anomaly>
    <anomaly type="notice" value="1.027560,2.132500,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="203.181.101.47" dst_ip="203.181.101.47" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632400"/>
        <to usec="0" sec="1470633288"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,504,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="157.54.0.151" dst_ip="163.28.41.110" src_port="443" dst_port="53427"/>
        </slice>
        <from usec="0" sec="1470632786"/>
        <to usec="0" sec="1470632791"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="182.238.15.224" dst_ip="202.75.61.65" src_port="80"/>
        </slice>
        <from usec="0" sec="1470633172"/>
        <to usec="0" sec="1470633175"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="182.238.17.245" dst_ip="202.75.38.157" src_port="80"/>
        </slice>
        <from usec="0" sec="1470632424"/>
        <to usec="0" sec="1470632426"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,011,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="59.127.33.105" src_port="23"/>
        </slice>
        <from usec="0" sec="1470633008"/>
        <to usec="0" sec="1470633010"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="218.41.96.211" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632888"/>
        <to usec="0" sec="1470633103"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="179.26.254.178" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632527"/>
        <to usec="0" sec="1470632551"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="106.11.2.32" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633236"/>
        <to usec="0" sec="1470633248"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.130.121.117" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632491"/>
        <to usec="0" sec="1470632502"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.234.170.254" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632600"/>
        <to usec="0" sec="1470632837"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="81.191.139.254" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633282"/>
        <to usec="0" sec="1470633301"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="39.85.188.255" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632643"/>
        <to usec="0" sec="1470632655"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="96.206.11.242"/>
        </slice>
        <from usec="0" sec="1470633059"/>
        <to usec="0" sec="1470633061"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="83.191.177.1" src_port="3165" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633199"/>
        <to usec="0" sec="1470633203"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="74.84.231.0" src_port="3705" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632437"/>
        <to usec="0" sec="1470632440"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.244.77.253" src_port="3333" dst_port="53413"/>
            <filter src_ip="121.244.77.253" src_port="3210" dst_port="53413"/>
            <filter src_ip="121.244.77.253" src_port="3191" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632524"/>
        <to usec="0" sec="1470633224"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="203.213.124.201" src_port="3107" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632632"/>
        <to usec="0" sec="1470632633"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="61.62.172.138" src_port="2273" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632871"/>
        <to usec="0" sec="1470632874"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="222.132.250.243" src_port="4874" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632765"/>
        <to usec="0" sec="1470632766"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.63.41.143" src_port="3124" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632967"/>
        <to usec="0" sec="1470632969"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="211.154.126.95" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632573"/>
        <to usec="0" sec="1470633242"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="202.162.23.104" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633151"/>
        <to usec="0" sec="1470633167"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="41.209.145.98" src_port="1035" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632424"/>
        <to usec="0" sec="1470632426"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="71.85.161.37" src_port="1065" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632770"/>
        <to usec="0" sec="1470632771"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.82.163.62" src_port="4854" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633268"/>
        <to usec="0" sec="1470633270"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.211.198.255" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632655"/>
        <to usec="0" sec="1470632709"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="211.78.142.205" src_port="3675" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633098"/>
        <to usec="0" sec="1470633101"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.202.36.145" src_port="3073" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632495"/>
        <to usec="0" sec="1470632496"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.2.131.16" src_port="2366" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633055"/>
        <to usec="0" sec="1470633058"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.33.147.81" src_port="3077" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633187"/>
        <to usec="0" sec="1470633189"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="125.48.133.21" src_port="4924" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633087"/>
        <to usec="0" sec="1470633090"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="178.191.251.24" src_port="3883" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633129"/>
        <to usec="0" sec="1470633132"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.147.44.205" src_port="3347" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632405"/>
        <to usec="0" sec="1470632572"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.209.66.185" src_port="3810" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633222"/>
        <to usec="0" sec="1470633223"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.56.72.190" src_port="32811" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632507"/>
        <to usec="0" sec="1470632509"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="125.48.230.60" src_port="4864" dst_port="53413"/>
            <filter src_ip="125.48.230.60" src_port="4015" dst_port="53413"/>
            <filter src_ip="125.48.230.60" src_port="4013" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632951"/>
        <to usec="0" sec="1470633099"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="222.149.150.68" src_port="2279" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632656"/>
        <to usec="0" sec="1470632658"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="118.213.78.63" src_port="3079" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632727"/>
        <to usec="0" sec="1470632730"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="86.69.24.193" src_port="4072" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632873"/>
        <to usec="0" sec="1470632875"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="108.66.96.75" src_port="2311" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632645"/>
        <to usec="0" sec="1470633112"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="221.218.187.48" src_port="2684" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633023"/>
        <to usec="0" sec="1470633026"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="211.184.115.207" src_port="3074" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632421"/>
        <to usec="0" sec="1470632424"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.198.25.50" src_port="4484" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632970"/>
        <to usec="0" sec="1470632972"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="110.221.119.77" src_port="2227" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632743"/>
        <to usec="0" sec="1470632989"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="61.103.56.166" src_port="4495" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633190"/>
        <to usec="0" sec="1470633193"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.217.26.36" src_port="4746" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632491"/>
        <to usec="0" sec="1470632494"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="210.82.44.90" src_port="3110" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633038"/>
        <to usec="0" sec="1470633040"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="203.106.30.160" src_port="4061" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633241"/>
        <to usec="0" sec="1470633244"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.232.49.126" src_port="2853" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633039"/>
        <to usec="0" sec="1470633042"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.240.117.27" src_port="3147" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632538"/>
        <to usec="0" sec="1470633275"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="115.113.6.131" src_port="2055" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632682"/>
        <to usec="0" sec="1470632684"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="109.91.65.24" src_port="4130" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633053"/>
        <to usec="0" sec="1470633056"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="114.34.57.9" src_port="12200" dst_port="48111"/>
        </slice>
        <from usec="0" sec="1470632411"/>
        <to usec="0" sec="1470633065"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="222.142.151.118" src_port="2705" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632738"/>
        <to usec="0" sec="1470632983"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="61.147.158.237" src_port="3377" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632460"/>
        <to usec="0" sec="1470632463"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="221.235.201.12" src_port="3413" dst_port="53413"/>
            <filter src_ip="221.235.201.12" src_port="3403" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632705"/>
        <to usec="0" sec="1470633052"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.216.23.127" src_port="4452" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632743"/>
        <to usec="0" sec="1470632744"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.97.17.66" src_port="3370" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632796"/>
        <to usec="0" sec="1470632797"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.169.221.187" src_port="3097" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632904"/>
        <to usec="0" sec="1470632907"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.230.219.136" src_port="4273" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633085"/>
        <to usec="0" sec="1470633088"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="5.3.243.139" src_port="3738" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633046"/>
        <to usec="0" sec="1470633048"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="211.191.39.179" src_port="4019" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633043"/>
        <to usec="0" sec="1470633046"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.82.199.141" src_port="3901" dst_port="53413"/>
            <filter src_ip="182.82.199.141" src_port="3858" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632908"/>
        <to usec="0" sec="1470633167"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="205.46.31.145" src_port="3846" dst_port="53413"/>
            <filter src_ip="205.46.31.145" src_port="3853" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632566"/>
        <to usec="0" sec="1470633154"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="222.156.49.144" src_port="3083" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633281"/>
        <to usec="0" sec="1470633283"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="125.26.191.169" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632521"/>
        <to usec="0" sec="1470633252"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.53.244.108" src_port="3912" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633089"/>
        <to usec="0" sec="1470633090"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="139.196.66.83" src_port="5080" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1470632882"/>
        <to usec="0" sec="1470632885"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="218.24.91.151" src_port="2063" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633181"/>
        <to usec="0" sec="1470633184"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.114.169.117" src_port="3239" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632532"/>
        <to usec="0" sec="1470632533"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="72.173.61.179" src_port="3527" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632948"/>
        <to usec="0" sec="1470632950"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.167.11.171" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632621"/>
        <to usec="0" sec="1470632738"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.105.221.111" src_port="3083" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632643"/>
        <to usec="0" sec="1470632989"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="125.21.238.98" src_port="3249" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632839"/>
        <to usec="0" sec="1470633090"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.211.158.145" src_port="2513" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632551"/>
        <to usec="0" sec="1470632552"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="79.73.135.196" src_port="3211" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632786"/>
        <to usec="0" sec="1470632787"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="188.25.143.62" src_port="18730" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632425"/>
        <to usec="0" sec="1470632428"/>
    </anomaly>
    <anomaly type="notice" value="1.072230,1.921970,999,1 1 1 0 0 0 0 0 0 1 0 0,ntscUDP">
        <slice>
            <filter src_ip="222.149.210.201" src_port="3464" dst_port="53413"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.55.137.52" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632621"/>
        <to usec="0" sec="1470632624"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.35.211.49" src_port="3083" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633160"/>
        <to usec="0" sec="1470633163"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.57.153.36" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632586"/>
        <to usec="0" sec="1470632597"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="118.211.84.214" src_port="2065" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633015"/>
        <to usec="0" sec="1470633017"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.219.253.45" src_port="1027" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633059"/>
        <to usec="0" sec="1470633110"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.216.185.229" src_port="4044" dst_port="53413"/>
            <filter src_ip="121.216.185.229" src_port="4031" dst_port="53413"/>
            <filter src_ip="121.216.185.229" src_port="4029" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632566"/>
        <to usec="0" sec="1470632833"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.225.119.229" src_port="4246" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633243"/>
        <to usec="0" sec="1470633246"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.157.182.250" src_port="3236" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633257"/>
        <to usec="0" sec="1470633259"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.10.202.22" src_port="3658" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632658"/>
        <to usec="0" sec="1470633021"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.32.238.21" src_port="3163" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632903"/>
        <to usec="0" sec="1470632906"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.203.241.245" src_port="2518" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632429"/>
        <to usec="0" sec="1470632431"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.25.35.240" src_port="3173" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633110"/>
        <to usec="0" sec="1470633112"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.17.100.240" src_port="3077" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632949"/>
        <to usec="0" sec="1470632950"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="41.209.159.239" src_port="1038" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632644"/>
        <to usec="0" sec="1470632646"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="211.166.148.16" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632547"/>
        <to usec="0" sec="1470633044"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.220.215.233" src_port="3746" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633109"/>
        <to usec="0" sec="1470633110"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="58.131.68.9" src_port="3974" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632491"/>
        <to usec="0" sec="1470632493"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="212.56.227.245" src_port="2118" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632745"/>
        <to usec="0" sec="1470632748"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.179.87.56" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632537"/>
        <to usec="0" sec="1470632552"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="93.75.24.249" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633188"/>
        <to usec="0" sec="1470633190"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="193.71.147.65" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633003"/>
        <to usec="0" sec="1470633015"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="88.56.226.131" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633043"/>
        <to usec="0" sec="1470633056"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.188.201.60" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632684"/>
        <to usec="0" sec="1470632709"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.179.230.253" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632799"/>
        <to usec="0" sec="1470632810"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="88.58.125.195" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632568"/>
        <to usec="0" sec="1470632580"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.40.156.194" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633050"/>
        <to usec="0" sec="1470633113"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.224.46.66" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1470632697"/>
        <to usec="0" sec="1470632702"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="114.43.40.128" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632401"/>
        <to usec="0" sec="1470632428"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="62.110.43.0" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632448"/>
        <to usec="0" sec="1470632471"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.57.62.124" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633183"/>
        <to usec="0" sec="1470633199"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.37.18.249" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632836"/>
        <to usec="0" sec="1470632859"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="58.182.223.58" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632482"/>
        <to usec="0" sec="1470633043"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="5.225.187.121" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632602"/>
        <to usec="0" sec="1470632612"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.135.97.57" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633202"/>
        <to usec="0" sec="1470633226"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="86.201.247.249" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633240"/>
        <to usec="0" sec="1470633272"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.78.220.58" dst_port="4028"/>
        </slice>
        <from usec="0" sec="1470633135"/>
        <to usec="0" sec="1470633146"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="177.141.186.186" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632597"/>
        <to usec="0" sec="1470632628"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="86.183.45.61" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632778"/>
        <to usec="0" sec="1470632801"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="200.107.231.57" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633017"/>
        <to usec="0" sec="1470633040"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="220.133.104.130" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632547"/>
        <to usec="0" sec="1470632570"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="181.170.218.198" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632497"/>
        <to usec="0" sec="1470632510"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="24.135.202.251" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632546"/>
        <to usec="0" sec="1470632570"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="211.44.52.136" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632401"/>
        <to usec="0" sec="1470632689"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="181.70.218.201" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632931"/>
        <to usec="0" sec="1470632934"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.216.193.54" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633173"/>
        <to usec="0" sec="1470633186"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.55.65.201" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633233"/>
        <to usec="0" sec="1470633248"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.75.26.73" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633188"/>
        <to usec="0" sec="1470633212"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="118.101.26.9" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633219"/>
        <to usec="0" sec="1470633222"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.205.193.182" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633170"/>
        <to usec="0" sec="1470633196"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="46.90.230.201" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632874"/>
        <to usec="0" sec="1470632882"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="109.224.234.203" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633155"/>
        <to usec="0" sec="1470633157"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="125.191.80.116" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632659"/>
        <to usec="0" sec="1470632662"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="221.137.156.10" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632791"/>
        <to usec="0" sec="1470632812"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="79.220.60.117" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632676"/>
        <to usec="0" sec="1470632698"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="80.243.115.52" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632740"/>
        <to usec="0" sec="1470632767"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="109.83.133.10" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632890"/>
        <to usec="0" sec="1470632915"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="210.199.173.52" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632479"/>
        <to usec="0" sec="1470633069"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="194.241.7.117" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633213"/>
        <to usec="0" sec="1470633214"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="210.154.17.207" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632874"/>
        <to usec="0" sec="1470632877"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="200.140.101.76" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632959"/>
        <to usec="0" sec="1470632971"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.71.226.207" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633142"/>
        <to usec="0" sec="1470633157"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.166.4.140" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632849"/>
        <to usec="0" sec="1470632851"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.2.247.49" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633078"/>
        <to usec="0" sec="1470633091"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="222.172.133.178" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633094"/>
        <to usec="0" sec="1470633096"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.179.250.76" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633054"/>
        <to usec="0" sec="1470633070"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="190.71.159.15" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633220"/>
        <to usec="0" sec="1470633228"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.241.241.14" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632468"/>
        <to usec="0" sec="1470632491"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="194.44.134.12" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632808"/>
        <to usec="0" sec="1470633104"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.41.197.110" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633297"/>
        <to usec="0" sec="1470633299"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.240.238.107" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632574"/>
        <to usec="0" sec="1470632838"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="186.1.48.147" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632671"/>
        <to usec="0" sec="1470633069"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.91.176.235" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632474"/>
        <to usec="0" sec="1470632503"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="213.106.246.35" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633180"/>
        <to usec="0" sec="1470633226"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="149.119.107.87" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632625"/>
        <to usec="0" sec="1470632650"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="181.0.4.104" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632646"/>
        <to usec="0" sec="1470632658"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="89.219.208.212" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632468"/>
        <to usec="0" sec="1470632471"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="177.209.92.163" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632400"/>
        <to usec="0" sec="1470632409"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.88.15.154" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633057"/>
        <to usec="0" sec="1470633060"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="218.41.6.154" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632544"/>
        <to usec="0" sec="1470632555"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="218.41.102.37" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633045"/>
        <to usec="0" sec="1470633048"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="70.192.34.145" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633227"/>
        <to usec="0" sec="1470633229"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="219.91.170.149" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632701"/>
        <to usec="0" sec="1470632716"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.118.204.173" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633137"/>
        <to usec="0" sec="1470633161"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="182.86.73.22" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632741"/>
        <to usec="0" sec="1470632755"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.81.66.82" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633107"/>
        <to usec="0" sec="1470633131"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.81.203.87" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632563"/>
        <to usec="0" sec="1470632574"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="200.39.36.214" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632870"/>
        <to usec="0" sec="1470632895"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.176.131.86" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632654"/>
        <to usec="0" sec="1470632678"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.145.190.20" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632406"/>
        <to usec="0" sec="1470632770"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.122.167.107" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632765"/>
        <to usec="0" sec="1470632789"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="212.104.136.164" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1470632729"/>
        <to usec="0" sec="1470632734"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.135.157.37" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632632"/>
        <to usec="0" sec="1470633101"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.209.192.155" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632714"/>
        <to usec="0" sec="1470632717"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="176.216.201.170" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632435"/>
        <to usec="0" sec="1470632448"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="202.166.239.223" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632957"/>
        <to usec="0" sec="1470632960"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="81.241.206.160" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633025"/>
        <to usec="0" sec="1470633050"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.179.82.160" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633110"/>
        <to usec="0" sec="1470633125"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="86.70.12.211" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633297"/>
        <to usec="0" sec="1470633301"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="58.240.187.44" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633230"/>
        <to usec="0" sec="1470633232"/>
    </anomaly>
    <anomaly type="notice" value="1.072230,1.921970,999,1 1 1 0 0 0 0 0 0 1 0 0,ntscUDP">
        <slice>
            <filter src_ip="213.64.77.32" dst_port="53413"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="178.47.58.163" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632997"/>
        <to usec="0" sec="1470633000"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.45.154.208" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632495"/>
        <to usec="0" sec="1470632498"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.57.137.46" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633104"/>
        <to usec="0" sec="1470633115"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="81.229.23.103" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632937"/>
        <to usec="0" sec="1470632978"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="81.166.4.160" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632436"/>
        <to usec="0" sec="1470632726"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.53.113.103" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632485"/>
        <to usec="0" sec="1470632508"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="211.163.8.156" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632517"/>
        <to usec="0" sec="1470632520"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="210.140.42.123" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632542"/>
        <to usec="0" sec="1470632545"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="211.58.116.187" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632797"/>
        <to usec="0" sec="1470633161"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="188.115.219.156" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633010"/>
        <to usec="0" sec="1470633022"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="188.7.184.155" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633176"/>
        <to usec="0" sec="1470633188"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.201.148.164" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632400"/>
        <to usec="0" sec="1470632446"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.66.118.28" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633169"/>
        <to usec="0" sec="1470633219"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.55.124.62" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633086"/>
        <to usec="0" sec="1470633097"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.232.251.227" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633262"/>
        <to usec="0" sec="1470633289"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="188.8.221.156" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632672"/>
        <to usec="0" sec="1470632700"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.178.150.160" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632806"/>
        <to usec="0" sec="1470632828"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.253.213.66" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632827"/>
        <to usec="0" sec="1470632838"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="177.164.159.97" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633072"/>
        <to usec="0" sec="1470633106"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.120.54.163" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632559"/>
        <to usec="0" sec="1470632570"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.174.240.216" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633185"/>
        <to usec="0" sec="1470633188"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.43.38.101" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632799"/>
        <to usec="0" sec="1470633299"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.167.76.95" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632929"/>
        <to usec="0" sec="1470632942"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="149.125.251.66" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632413"/>
        <to usec="0" sec="1470632440"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="41.185.230.68" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632782"/>
        <to usec="0" sec="1470632794"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="220.132.68.55" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632779"/>
        <to usec="0" sec="1470632802"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.113.50.214" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632874"/>
        <to usec="0" sec="1470632913"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.197.160.201" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632755"/>
        <to usec="0" sec="1470632812"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="180.98.22.10" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633264"/>
        <to usec="0" sec="1470633266"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.158.82.20" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633216"/>
        <to usec="0" sec="1470633227"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.114.211.85" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632660"/>
        <to usec="0" sec="1470632671"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="177.115.208.240" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632571"/>
        <to usec="0" sec="1470632584"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="86.42.158.140" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632416"/>
        <to usec="0" sec="1470632440"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.60.219.81" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632617"/>
        <to usec="0" sec="1470632630"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="109.116.213.50" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633016"/>
        <to usec="0" sec="1470633017"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="79.78.109.77" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632947"/>
        <to usec="0" sec="1470633260"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.249.22.206" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633031"/>
        <to usec="0" sec="1470633044"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="39.66.246.177" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633233"/>
        <to usec="0" sec="1470633248"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="94.134.198.140" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632537"/>
        <to usec="0" sec="1470632551"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.90.16.178" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632776"/>
        <to usec="0" sec="1470632789"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="94.3.172.179" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632644"/>
        <to usec="0" sec="1470632925"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="220.90.153.204" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632674"/>
        <to usec="0" sec="1470632697"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.90.162.211" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632467"/>
        <to usec="0" sec="1470633275"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.120.172.240" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633019"/>
        <to usec="0" sec="1470633031"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="171.232.147.174" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632795"/>
        <to usec="0" sec="1470632797"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.189.168.211" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632430"/>
        <to usec="0" sec="1470632431"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.47.27.119" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632400"/>
        <to usec="0" sec="1470632409"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="181.49.178.88" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633030"/>
        <to usec="0" sec="1470633054"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="213.80.187.70" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633002"/>
        <to usec="0" sec="1470633014"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="27.217.126.214" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632702"/>
        <to usec="0" sec="1470632715"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.9.30.149" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633198"/>
        <to usec="0" sec="1470633210"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="84.108.251.67" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632463"/>
        <to usec="0" sec="1470632505"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.131.222.245" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632582"/>
        <to usec="0" sec="1470632606"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.193.73.20" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632481"/>
        <to usec="0" sec="1470632494"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="79.78.111.125" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632570"/>
        <to usec="0" sec="1470633057"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="201.113.74.169" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632876"/>
        <to usec="0" sec="1470632877"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="181.145.239.113" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633120"/>
        <to usec="0" sec="1470633123"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.164.50.170" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633214"/>
        <to usec="0" sec="1470633229"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="121.214.1.246" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633122"/>
        <to usec="0" sec="1470633145"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="109.83.67.18" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633268"/>
        <to usec="0" sec="1470633292"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.57.51.70" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632712"/>
        <to usec="0" sec="1470632728"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.76.196.103" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632739"/>
        <to usec="0" sec="1470632762"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.101.12.150" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632881"/>
        <to usec="0" sec="1470632905"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="212.161.226.233" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632810"/>
        <to usec="0" sec="1470632822"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="121.201.63.116" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632612"/>
        <to usec="0" sec="1470632635"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.3.79.36" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633097"/>
        <to usec="0" sec="1470633123"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.125.147.36" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632885"/>
        <to usec="0" sec="1470632886"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="125.143.155.218" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632954"/>
        <to usec="0" sec="1470632968"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="212.19.42.203" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633147"/>
        <to usec="0" sec="1470633159"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.255.101.36" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632750"/>
        <to usec="0" sec="1470632762"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="59.66.32.171" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633098"/>
        <to usec="0" sec="1470633113"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="180.133.57.28" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632550"/>
        <to usec="0" sec="1470632553"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.196.138.112" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632603"/>
        <to usec="0" sec="1470632614"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="58.182.16.144" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632788"/>
        <to usec="0" sec="1470632790"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="121.19.193.80" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632711"/>
        <to usec="0" sec="1470632724"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="178.199.209.209" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633069"/>
        <to usec="0" sec="1470633072"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="110.228.58.254" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632490"/>
        <to usec="0" sec="1470632492"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="200.164.93.79" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633279"/>
        <to usec="0" sec="1470633290"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="60.185.71.99" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633166"/>
        <to usec="0" sec="1470633189"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="118.83.120.199" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632811"/>
        <to usec="0" sec="1470632823"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="179.185.186.71" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632699"/>
        <to usec="0" sec="1470632711"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.163.120.198" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632505"/>
        <to usec="0" sec="1470632518"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="89.222.223.57" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632803"/>
        <to usec="0" sec="1470632814"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.66.61.66" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632558"/>
        <to usec="0" sec="1470632583"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="186.111.250.58" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633136"/>
        <to usec="0" sec="1470633261"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="222.100.23.58" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632511"/>
        <to usec="0" sec="1470632524"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="212.253.116.187" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632901"/>
        <to usec="0" sec="1470632925"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="138.37.36.58" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632654"/>
        <to usec="0" sec="1470632681"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.82.245.62" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633246"/>
        <to usec="0" sec="1470633259"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.152.158.189" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633184"/>
        <to usec="0" sec="1470633195"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="186.202.205.196" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632493"/>
        <to usec="0" sec="1470632496"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="181.160.63.62" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632412"/>
        <to usec="0" sec="1470632424"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="83.15.173.59" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632927"/>
        <to usec="0" sec="1470632928"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.221.109.64" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632658"/>
        <to usec="0" sec="1470632669"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.43.67.59" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632771"/>
        <to usec="0" sec="1470632774"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.210.134.188" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632969"/>
        <to usec="0" sec="1470632971"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="221.163.172.190" dst_port="2433"/>
        </slice>
        <from usec="0" sec="1470632756"/>
        <to usec="0" sec="1470632758"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.251.82.183" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632771"/>
        <to usec="0" sec="1470633103"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="115.124.0.183" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632549"/>
        <to usec="0" sec="1470632894"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="218.41.92.202" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632516"/>
        <to usec="0" sec="1470632557"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="187.180.123.52" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632742"/>
        <to usec="0" sec="1470632765"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="223.249.143.74" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632459"/>
        <to usec="0" sec="1470632462"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.122.88.202" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633063"/>
        <to usec="0" sec="1470633076"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.120.246.204" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633282"/>
        <to usec="0" sec="1470633293"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.154.143.76" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632675"/>
        <to usec="0" sec="1470632704"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="37.104.91.176" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633278"/>
        <to usec="0" sec="1470633301"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.166.130.207" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633058"/>
        <to usec="0" sec="1470633082"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="91.173.230.78" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632924"/>
        <to usec="0" sec="1470632926"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="61.72.103.77" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633111"/>
        <to usec="0" sec="1470633122"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.242.85.77" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633087"/>
        <to usec="0" sec="1470633097"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="82.160.156.205" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633126"/>
        <to usec="0" sec="1470633141"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.41.99.76" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632736"/>
        <to usec="0" sec="1470632749"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.234.114.176" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633124"/>
        <to usec="0" sec="1470633147"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="193.66.217.176" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632550"/>
        <to usec="0" sec="1470632565"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.170.208.207" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632459"/>
        <to usec="0" sec="1470632489"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.116.154.177" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632523"/>
        <to usec="0" sec="1470632535"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.77.178.205" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632995"/>
        <to usec="0" sec="1470633018"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="27.97.106.216" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632530"/>
        <to usec="0" sec="1470632533"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.167.139.87" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632433"/>
        <to usec="0" sec="1470632466"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="66.72.6.168" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632885"/>
        <to usec="0" sec="1470632896"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.218.90.40" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632985"/>
        <to usec="0" sec="1470633008"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="211.212.22.209" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632979"/>
        <to usec="0" sec="1470633003"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.211.111.46" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632449"/>
        <to usec="0" sec="1470632450"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="73.13.18.164" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633272"/>
        <to usec="0" sec="1470633296"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.190.37.221" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632724"/>
        <to usec="0" sec="1470632741"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="1.223.186.218" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632664"/>
        <to usec="0" sec="1470632667"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.249.164.220" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632585"/>
        <to usec="0" sec="1470632597"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="177.217.67.84" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632667"/>
        <to usec="0" sec="1470632690"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="200.170.242.162" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633142"/>
        <to usec="0" sec="1470633145"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="218.244.84.221" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632453"/>
        <to usec="0" sec="1470632466"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.150.239.83" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632687"/>
        <to usec="0" sec="1470632691"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="193.15.41.212" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633227"/>
        <to usec="0" sec="1470633244"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="177.103.63.84" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632807"/>
        <to usec="0" sec="1470632830"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.142.156.220" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632400"/>
        <to usec="0" sec="1470632403"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="179.184.15.214" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632712"/>
        <to usec="0" sec="1470632714"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.80.23.93" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633089"/>
        <to usec="0" sec="1470633101"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.32.97.93" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632607"/>
        <to usec="0" sec="1470632631"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="188.56.8.214" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632817"/>
        <to usec="0" sec="1470632827"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.253.6.214" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632528"/>
        <to usec="0" sec="1470632539"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.19.43.208" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632760"/>
        <to usec="0" sec="1470632771"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.123.122.215" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632638"/>
        <to usec="0" sec="1470632641"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.58.164.39" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632973"/>
        <to usec="0" sec="1470633001"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="175.232.230.214" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633293"/>
        <to usec="0" sec="1470633300"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.108.198.169" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632680"/>
        <to usec="0" sec="1470632683"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.42.116.85" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632788"/>
        <to usec="0" sec="1470632798"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="181.51.235.42" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632456"/>
        <to usec="0" sec="1470632479"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="211.157.195.34" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633089"/>
        <to usec="0" sec="1470633090"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="27.11.50.208" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632811"/>
        <to usec="0" sec="1470632824"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.210.183.82" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632995"/>
        <to usec="0" sec="1470633018"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="109.228.186.221" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632715"/>
        <to usec="0" sec="1470632730"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="78.231.218.46" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633024"/>
        <to usec="0" sec="1470633065"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="190.198.140.160" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632501"/>
        <to usec="0" sec="1470632515"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.49.235.120" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632933"/>
        <to usec="0" sec="1470632957"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="50.82.50.254" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633178"/>
        <to usec="0" sec="1470633214"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.187.164.225" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632805"/>
        <to usec="0" sec="1470632818"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.9.161.28" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633180"/>
        <to usec="0" sec="1470633210"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.156.163.3" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632852"/>
        <to usec="0" sec="1470633007"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="1.248.41.123" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632402"/>
        <to usec="0" sec="1470632414"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.173.52.29" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632769"/>
        <to usec="0" sec="1470632783"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.47.89.131" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632616"/>
        <to usec="0" sec="1470632627"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="221.221.112.29" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632693"/>
        <to usec="0" sec="1470632717"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="103.200.37.252" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632581"/>
        <to usec="0" sec="1470632592"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.117.83.101" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632772"/>
        <to usec="0" sec="1470632794"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.91.68.154" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632512"/>
        <to usec="0" sec="1470632524"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.138.190.25" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633054"/>
        <to usec="0" sec="1470633080"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.165.186.231" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632894"/>
        <to usec="0" sec="1470632909"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="213.254.163.103" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632469"/>
        <to usec="0" sec="1470633156"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.146.167.25" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632488"/>
        <to usec="0" sec="1470632500"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.250.177.6" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632829"/>
        <to usec="0" sec="1470632830"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="211.176.176.232" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632739"/>
        <to usec="0" sec="1470632749"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.55.138.247" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633089"/>
        <to usec="0" sec="1470633091"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="105.155.242.8" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633125"/>
        <to usec="0" sec="1470633138"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.230.169.151" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632709"/>
        <to usec="0" sec="1470632816"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="200.103.53.137" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632682"/>
        <to usec="0" sec="1470632704"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="78.188.27.116" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632596"/>
        <to usec="0" sec="1470632608"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="61.134.125.20" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632765"/>
        <to usec="0" sec="1470633193"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.161.160.245" dst_port="22"/>
        </slice>
        <from usec="0" sec="1470632417"/>
        <to usec="0" sec="1470632422"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="92.163.165.21" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633113"/>
        <to usec="0" sec="1470633126"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="111.206.238.240" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633207"/>
        <to usec="0" sec="1470633218"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.222.14.240" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632731"/>
        <to usec="0" sec="1470632764"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="73.220.164.145" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633232"/>
        <to usec="0" sec="1470633245"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="187.198.214.114" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633050"/>
        <to usec="0" sec="1470633237"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.144.243.147" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633000"/>
        <to usec="0" sec="1470633014"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="221.230.202.243" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632699"/>
        <to usec="0" sec="1470632702"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.15.217.140" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632985"/>
        <to usec="0" sec="1470632988"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="59.3.236.237" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633102"/>
        <to usec="0" sec="1470633125"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="151.105.216.239" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632434"/>
        <to usec="0" sec="1470632456"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.11.136.136" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632476"/>
        <to usec="0" sec="1470632490"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.174.161.24" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632693"/>
        <to usec="0" sec="1470632706"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.43.186.230" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632664"/>
        <to usec="0" sec="1470632710"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.224.224.252" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633196"/>
        <to usec="0" sec="1470633198"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="68.139.225.132" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632621"/>
        <to usec="0" sec="1470632648"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="190.62.51.21" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632811"/>
        <to usec="0" sec="1470632824"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.193.61.101" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633069"/>
        <to usec="0" sec="1470633085"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="76.127.160.133" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632763"/>
        <to usec="0" sec="1470632783"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="94.253.14.135" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632634"/>
        <to usec="0" sec="1470633021"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.139.76.140" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633225"/>
        <to usec="0" sec="1470633227"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.161.47.18" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632521"/>
        <to usec="0" sec="1470632535"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.193.228.242" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632569"/>
        <to usec="0" sec="1470632590"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.86.56.145" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632954"/>
        <to usec="0" sec="1470632966"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="81.250.5.132" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632733"/>
        <to usec="0" sec="1470632745"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="24.68.56.241" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633181"/>
        <to usec="0" sec="1470633182"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="210.69.83.124" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632510"/>
        <to usec="0" sec="1470633125"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.117.214.233" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633120"/>
        <to usec="0" sec="1470633143"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="59.127.237.22" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632561"/>
        <to usec="0" sec="1470632586"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.129.55.102" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632590"/>
        <to usec="0" sec="1470632601"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="98.227.167.8" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632474"/>
        <to usec="0" sec="1470632487"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="103.194.73.102" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632404"/>
        <to usec="0" sec="1470632406"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.129.90.230" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632413"/>
        <to usec="0" sec="1470632440"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="85.85.44.148" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632629"/>
        <to usec="0" sec="1470632653"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="173.28.40.229" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632435"/>
        <to usec="0" sec="1470632848"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="212.189.102.133" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633281"/>
        <to usec="0" sec="1470633301"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.116.171.244" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632586"/>
        <to usec="0" sec="1470632610"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="190.187.161.229" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633022"/>
        <to usec="0" sec="1470633045"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.32.137.100" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632939"/>
        <to usec="0" sec="1470633265"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.197.156.244" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632533"/>
        <to usec="0" sec="1470632816"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="88.56.53.138" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632920"/>
        <to usec="0" sec="1470632947"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="72.24.24.250" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633109"/>
        <to usec="0" sec="1470633121"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="103.18.242.133" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633192"/>
        <to usec="0" sec="1470633194"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.148.147.239" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633227"/>
        <to usec="0" sec="1470633256"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="59.127.176.226" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633020"/>
        <to usec="0" sec="1470633044"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="190.16.237.141" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632851"/>
        <to usec="0" sec="1470632862"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="191.66.17.125" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633131"/>
        <to usec="0" sec="1470633134"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="1.183.73.111" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633104"/>
        <to usec="0" sec="1470633115"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="61.50.17.113" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632400"/>
        <to usec="0" sec="1470632425"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.10.169.191" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632534"/>
        <to usec="0" sec="1470633043"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="200.24.138.120" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633149"/>
        <to usec="0" sec="1470633164"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="200.146.98.123" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632482"/>
        <to usec="0" sec="1470633011"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="176.216.11.187" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632655"/>
        <to usec="0" sec="1470632691"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="96.56.49.188" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632645"/>
        <to usec="0" sec="1470633205"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.219.76.69" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632841"/>
        <to usec="0" sec="1470632863"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="186.10.12.123" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632476"/>
        <to usec="0" sec="1470632868"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="211.9.152.124" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632621"/>
        <to usec="0" sec="1470632633"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.218.175.187" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632417"/>
        <to usec="0" sec="1470632865"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.165.102.188" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632830"/>
        <to usec="0" sec="1470632839"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="180.73.178.66" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633057"/>
        <to usec="0" sec="1470633068"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.155.117.124" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632512"/>
        <to usec="0" sec="1470632513"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="61.99.236.64" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632808"/>
        <to usec="0" sec="1470632818"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="180.159.199.188" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633156"/>
        <to usec="0" sec="1470633159"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.178.253.66" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632501"/>
        <to usec="0" sec="1470632503"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="87.104.81.186" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632984"/>
        <to usec="0" sec="1470632985"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="168.102.12.66" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632735"/>
        <to usec="0" sec="1470632760"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="59.126.192.67" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632535"/>
        <to usec="0" sec="1470632560"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="211.212.186.125" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632403"/>
        <to usec="0" sec="1470632512"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.208.59.188" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633188"/>
        <to usec="0" sec="1470633212"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.57.60.70" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632975"/>
        <to usec="0" sec="1470632988"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.218.225.122" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633094"/>
        <to usec="0" sec="1470633108"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.83.52.72" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633197"/>
        <to usec="0" sec="1470633211"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="89.51.145.119" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632595"/>
        <to usec="0" sec="1470632596"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="91.119.162.72" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632898"/>
        <to usec="0" sec="1470632900"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.126.18.73" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633012"/>
        <to usec="0" sec="1470633034"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="125.87.32.117" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632478"/>
        <to usec="0" sec="1470632881"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.102.52.75" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632590"/>
        <to usec="0" sec="1470632596"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="200.103.55.181" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633090"/>
        <to usec="0" sec="1470633114"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.111.188.181" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633155"/>
        <to usec="0" sec="1470633178"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.89.152.75" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632912"/>
        <to usec="0" sec="1470632962"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="211.52.198.139" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632960"/>
        <to usec="0" sec="1470632984"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.239.237.139" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632673"/>
        <to usec="0" sec="1470633084"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.17.26.180" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632750"/>
        <to usec="0" sec="1470632767"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.4.75.179" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632896"/>
        <to usec="0" sec="1470632907"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.22.114.78" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632660"/>
        <to usec="0" sec="1470633106"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="74.161.32.113" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632838"/>
        <to usec="0" sec="1470632851"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="218.227.149.140" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632512"/>
        <to usec="0" sec="1470632702"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="179.201.174.114" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632997"/>
        <to usec="0" sec="1470632999"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.235.24.104" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632515"/>
        <to usec="0" sec="1470633292"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.41.217.150" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632727"/>
        <to usec="0" sec="1470632754"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="185.28.184.110" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633193"/>
        <to usec="0" sec="1470633222"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="200.74.87.150" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633207"/>
        <to usec="0" sec="1470633221"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.188.136.97" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632772"/>
        <to usec="0" sec="1470632773"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="190.71.175.154" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633020"/>
        <to usec="0" sec="1470633044"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.73.209.93" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632890"/>
        <to usec="0" sec="1470632931"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="189.16.59.147" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632832"/>
        <to usec="0" sec="1470632834"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.113.75.160" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632437"/>
        <to usec="0" sec="1470632464"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="202.168.44.84" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632547"/>
        <to usec="0" sec="1470633012"/>
    </anomaly>
    <anomaly type="notice" value="1.310600,2.060700,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.112.186.172" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632403"/>
        <to usec="0" sec="1470633301"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.86.17.170" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632984"/>
        <to usec="0" sec="1470633007"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="109.99.71.146" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632606"/>
        <to usec="0" sec="1470632630"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.156.158.98" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633102"/>
        <to usec="0" sec="1470633126"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="41.94.122.170" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633159"/>
        <to usec="0" sec="1470633193"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.64.18.95" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632807"/>
        <to usec="0" sec="1470632833"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="188.18.254.104" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632439"/>
        <to usec="0" sec="1470632463"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="186.226.99.90" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632629"/>
        <to usec="0" sec="1470632634"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.216.105.99" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633077"/>
        <to usec="0" sec="1470633090"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="61.103.31.151" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633265"/>
        <to usec="0" sec="1470633300"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.79.14.168" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632441"/>
        <to usec="0" sec="1470632471"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.212.190.88" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632491"/>
        <to usec="0" sec="1470632604"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.33.140.103" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632641"/>
        <to usec="0" sec="1470632662"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="81.242.183.167" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632658"/>
        <to usec="0" sec="1470632671"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.75.153.104" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633252"/>
        <to usec="0" sec="1470633274"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="109.173.11.153" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632788"/>
        <to usec="0" sec="1470633254"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="217.3.34.89" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633090"/>
        <to usec="0" sec="1470633114"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="181.217.167.166" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632571"/>
        <to usec="0" sec="1470632586"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="185.47.67.166" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632410"/>
        <to usec="0" sec="1470632423"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.189.114.169" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632870"/>
        <to usec="0" sec="1470632891"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="81.242.18.102" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632582"/>
        <to usec="0" sec="1470632623"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="92.211.65.166" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633189"/>
        <to usec="0" sec="1470633213"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="186.204.30.102" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632962"/>
        <to usec="0" sec="1470632973"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.23.238.90" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633156"/>
        <to usec="0" sec="1470633169"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="188.255.46.90" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633091"/>
        <to usec="0" sec="1470633092"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="220.132.185.154" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632498"/>
        <to usec="0" sec="1470632528"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.210.117.101" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633136"/>
        <to usec="0" sec="1470633159"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.22.253.149" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633083"/>
        <to usec="0" sec="1470633108"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="119.67.110.85" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632711"/>
        <to usec="0" sec="1470632725"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.19.226.107" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632629"/>
        <to usec="0" sec="1470632652"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.65.165.171" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633032"/>
        <to usec="0" sec="1470633048"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.153.181.101" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632983"/>
        <to usec="0" sec="1470633010"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="92.210.0.90" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632570"/>
        <to usec="0" sec="1470632583"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="101.182.149.83" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632482"/>
        <to usec="0" sec="1470632498"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="109.87.84.80" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632696"/>
        <to usec="0" sec="1470632698"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="27.170.224.81" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632684"/>
        <to usec="0" sec="1470632717"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.221.51.83" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632547"/>
        <to usec="0" sec="1470632575"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="76.64.203.160" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633080"/>
        <to usec="0" sec="1470633289"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.246.74.95" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632935"/>
        <to usec="0" sec="1470633114"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.87.151.146" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632977"/>
        <to usec="0" sec="1470633000"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.123.190.147" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633139"/>
        <to usec="0" sec="1470633151"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="222.150.75.92" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633035"/>
        <to usec="0" sec="1470633058"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="85.56.14.95" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632977"/>
        <to usec="0" sec="1470632994"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="181.57.181.88" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633207"/>
        <to usec="0" sec="1470633222"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="79.72.65.64" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633069"/>
        <to usec="0" sec="1470633084"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="181.54.60.95" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632589"/>
        <to usec="0" sec="1470632600"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="69.87.249.157" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632892"/>
        <to usec="0" sec="1470633173"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="178.229.157.187" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632759"/>
        <to usec="0" sec="1470632762"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.51.66.155" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632959"/>
        <to usec="0" sec="1470632981"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.58.192.122" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633180"/>
        <to usec="0" sec="1470633210"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.81.86.126" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632603"/>
        <to usec="0" sec="1470632620"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="92.8.178.89" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632471"/>
        <to usec="0" sec="1470633040"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.194.70.189" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632896"/>
        <to usec="0" sec="1470632919"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="59.126.196.95" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632666"/>
        <to usec="0" sec="1470632679"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="222.170.76.90" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632929"/>
        <to usec="0" sec="1470633097"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.71.187.166" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632575"/>
        <to usec="0" sec="1470632588"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="59.127.33.93" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632742"/>
        <to usec="0" sec="1470632756"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="46.68.185.104" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632446"/>
        <to usec="0" sec="1470632469"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="181.68.254.169" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633244"/>
        <to usec="0" sec="1470633268"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="211.9.109.105" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632950"/>
        <to usec="0" sec="1470632990"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.211.154.117" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632905"/>
        <to usec="0" sec="1470632937"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="217.1.133.148" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632436"/>
        <to usec="0" sec="1470632452"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="212.137.179.170" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632617"/>
        <to usec="0" sec="1470632641"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.203.213.148" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632758"/>
        <to usec="0" sec="1470632797"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.166.27.138" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632619"/>
        <to usec="0" sec="1470632656"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="167.70.221.175" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633090"/>
        <to usec="0" sec="1470633103"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="180.188.120.108" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632703"/>
        <to usec="0" sec="1470632704"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="110.241.221.147" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632941"/>
        <to usec="0" sec="1470632943"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="91.136.12.108" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632453"/>
        <to usec="0" sec="1470632455"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="83.136.179.142" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632550"/>
        <to usec="0" sec="1470632572"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="1.183.122.177" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632594"/>
        <to usec="0" sec="1470633208"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="110.189.86.142" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633144"/>
        <to usec="0" sec="1470633154"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.137.7.173" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633109"/>
        <to usec="0" sec="1470633130"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.114.216.115" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632805"/>
        <to usec="0" sec="1470632828"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="113.164.213.108" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632825"/>
        <to usec="0" sec="1470632848"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="200.73.67.175" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632707"/>
        <to usec="0" sec="1470632952"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.242.66.79" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632883"/>
        <to usec="0" sec="1470632885"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="191.206.223.169" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632861"/>
        <to usec="0" sec="1470632898"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.7.123.158" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633265"/>
        <to usec="0" sec="1470633281"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="90.9.173.185" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632953"/>
        <to usec="0" sec="1470632975"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="195.174.110.115" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633066"/>
        <to usec="0" sec="1470633068"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="24.105.65.162" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633168"/>
        <to usec="0" sec="1470633171"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.2.101.82" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633182"/>
        <to usec="0" sec="1470633193"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.104.189.147" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633289"/>
        <to usec="0" sec="1470633292"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.111.111.181" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633057"/>
        <to usec="0" sec="1470633071"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.206.47.167" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632856"/>
        <to usec="0" sec="1470632880"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="151.99.193.129" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632694"/>
        <to usec="0" sec="1470632697"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="86.71.235.173" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632763"/>
        <to usec="0" sec="1470633207"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.220.19.152" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632556"/>
        <to usec="0" sec="1470632570"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.42.154.119" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632769"/>
        <to usec="0" sec="1470632792"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.124.238.104" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633232"/>
        <to usec="0" sec="1470633234"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="81.148.92.120" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632826"/>
        <to usec="0" sec="1470632852"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="79.16.148.101" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633008"/>
        <to usec="0" sec="1470633046"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="188.164.13.154" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632455"/>
        <to usec="0" sec="1470632468"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.236.124.85" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633028"/>
        <to usec="0" sec="1470633052"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.169.233.149" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632594"/>
        <to usec="0" sec="1470632597"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="186.211.203.171" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633255"/>
        <to usec="0" sec="1470633258"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.214.212.117" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632461"/>
        <to usec="0" sec="1470632483"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.90.13.191" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632839"/>
        <to usec="0" sec="1470632865"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.87.184.83" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632405"/>
        <to usec="0" sec="1470632409"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.31.192.96" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632534"/>
        <to usec="0" sec="1470632537"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.2.249.66" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633230"/>
        <to usec="0" sec="1470633233"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="125.147.118.178" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632910"/>
        <to usec="0" sec="1470632934"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.194.150.146" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632855"/>
        <to usec="0" sec="1470632879"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="190.215.116.158" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632492"/>
        <to usec="0" sec="1470632503"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="181.51.14.158" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633209"/>
        <to usec="0" sec="1470633220"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="86.87.83.176" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632458"/>
        <to usec="0" sec="1470632513"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.153.151.175" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632607"/>
        <to usec="0" sec="1470632631"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.28.160.63" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632884"/>
        <to usec="0" sec="1470632887"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="36.226.35.199" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632563"/>
        <to usec="0" sec="1470632586"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.48.10.56" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632868"/>
        <to usec="0" sec="1470632881"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="84.117.19.198" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632838"/>
        <to usec="0" sec="1470632851"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.247.229.57" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632407"/>
        <to usec="0" sec="1470632410"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.123.86.59" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632813"/>
        <to usec="0" sec="1470632825"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="62.70.81.196" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633119"/>
        <to usec="0" sec="1470633139"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.99.203.196" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632670"/>
        <to usec="0" sec="1470632672"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.232.163.197" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633141"/>
        <to usec="0" sec="1470633152"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.253.114.58" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632504"/>
        <to usec="0" sec="1470632506"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.196.36.63" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632718"/>
        <to usec="0" sec="1470632730"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="178.74.229.199" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632991"/>
        <to usec="0" sec="1470632993"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="188.129.91.63" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632620"/>
        <to usec="0" sec="1470632621"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="24.136.110.60" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633006"/>
        <to usec="0" sec="1470633018"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.48.137.62" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633035"/>
        <to usec="0" sec="1470633048"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="1.199.202.62" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633067"/>
        <to usec="0" sec="1470633070"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="177.96.74.193" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632528"/>
        <to usec="0" sec="1470632918"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.165.168.57" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632655"/>
        <to usec="0" sec="1470632678"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.34.248.62" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632575"/>
        <to usec="0" sec="1470632597"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="125.87.73.60" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633029"/>
        <to usec="0" sec="1470633052"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.249.20.55" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632931"/>
        <to usec="0" sec="1470632933"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="85.113.131.200" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633118"/>
        <to usec="0" sec="1470633129"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.235.198.54" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632638"/>
        <to usec="0" sec="1470632661"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="177.116.0.203" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633183"/>
        <to usec="0" sec="1470633206"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="156.198.101.52" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632614"/>
        <to usec="0" sec="1470632956"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="221.218.109.202" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632793"/>
        <to usec="0" sec="1470632795"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.206.138.53" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632997"/>
        <to usec="0" sec="1470633009"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.144.90.52" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632704"/>
        <to usec="0" sec="1470632721"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.43.36.51" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633054"/>
        <to usec="0" sec="1470633072"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.153.86.204" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632793"/>
        <to usec="0" sec="1470632806"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="81.241.129.207" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632809"/>
        <to usec="0" sec="1470632822"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.55.36.50" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632469"/>
        <to usec="0" sec="1470632490"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="80.200.187.205" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632440"/>
        <to usec="0" sec="1470633251"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="210.64.144.50" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632776"/>
        <to usec="0" sec="1470632982"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.97.5.206" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632580"/>
        <to usec="0" sec="1470632581"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="194.9.61.48" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632472"/>
        <to usec="0" sec="1470632740"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.150.5.207" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632961"/>
        <to usec="0" sec="1470632971"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.25.36.51" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632593"/>
        <to usec="0" sec="1470632604"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="81.241.109.49" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632435"/>
        <to usec="0" sec="1470632447"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.57.64.39" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633284"/>
        <to usec="0" sec="1470633296"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="152.185.197.47" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632422"/>
        <to usec="0" sec="1470632424"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="189.31.22.41" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633207"/>
        <to usec="0" sec="1470633210"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="41.186.208.222" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633044"/>
        <to usec="0" sec="1470633073"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.141.165.220" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632919"/>
        <to usec="0" sec="1470632932"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="176.192.108.37" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632792"/>
        <to usec="0" sec="1470632814"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="82.128.35.212" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633166"/>
        <to usec="0" sec="1470633169"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="188.66.194.36" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632764"/>
        <to usec="0" sec="1470632804"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="193.117.97.44" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633108"/>
        <to usec="0" sec="1470633122"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.79.238.212" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633028"/>
        <to usec="0" sec="1470633050"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.58.49.212" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632716"/>
        <to usec="0" sec="1470632728"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="84.15.142.44" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633029"/>
        <to usec="0" sec="1470633040"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="221.217.121.215" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632554"/>
        <to usec="0" sec="1470632556"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="203.109.115.37" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632769"/>
        <to usec="0" sec="1470632920"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.216.95.217" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632726"/>
        <to usec="0" sec="1470632738"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="27.15.140.41" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632728"/>
        <to usec="0" sec="1470632736"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="82.175.5.219" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632404"/>
        <to usec="0" sec="1470633261"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.10.95.212" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633125"/>
        <to usec="0" sec="1470633141"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.81.231.222" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632994"/>
        <to usec="0" sec="1470633016"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="185.125.156.219" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632670"/>
        <to usec="0" sec="1470633235"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.216.87.213" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632483"/>
        <to usec="0" sec="1470632506"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.41.145.44" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632727"/>
        <to usec="0" sec="1470632741"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="188.107.48.40" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633214"/>
        <to usec="0" sec="1470633237"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.27.45.214" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633104"/>
        <to usec="0" sec="1470633126"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="41.33.42.38" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632783"/>
        <to usec="0" sec="1470632806"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.25.131.214" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633253"/>
        <to usec="0" sec="1470633265"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.186.66.41" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632923"/>
        <to usec="0" sec="1470632925"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="106.245.27.213" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632440"/>
        <to usec="0" sec="1470632475"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.198.221.42" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632715"/>
        <to usec="0" sec="1470632716"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.12.197.219" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632996"/>
        <to usec="0" sec="1470633019"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="187.88.61.213" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632550"/>
        <to usec="0" sec="1470632561"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="200.220.193.43" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632811"/>
        <to usec="0" sec="1470632824"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="87.190.228.42" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632564"/>
        <to usec="0" sec="1470632567"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.91.40.43" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633036"/>
        <to usec="0" sec="1470633059"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="1.248.41.219" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632904"/>
        <to usec="0" sec="1470632920"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.135.166.43" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632401"/>
        <to usec="0" sec="1470632413"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.106.255.211" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632592"/>
        <to usec="0" sec="1470632633"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="73.222.151.223" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632554"/>
        <to usec="0" sec="1470632555"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="210.168.184.223" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632725"/>
        <to usec="0" sec="1470632728"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="118.211.166.44" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632436"/>
        <to usec="0" sec="1470632471"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="190.17.125.32" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633167"/>
        <to usec="0" sec="1470633173"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="92.3.126.45" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632975"/>
        <to usec="0" sec="1470632988"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.218.169.35" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633148"/>
        <to usec="0" sec="1470633171"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="114.41.8.44" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632542"/>
        <to usec="0" sec="1470632565"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="78.208.87.221" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632945"/>
        <to usec="0" sec="1470632958"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.102.11.220" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632850"/>
        <to usec="0" sec="1470632893"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.207.31.255" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633118"/>
        <to usec="0" sec="1470633130"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.207.117.31" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633268"/>
        <to usec="0" sec="1470633280"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="82.175.191.224" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632672"/>
        <to usec="0" sec="1470632673"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="189.157.207.225" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632799"/>
        <to usec="0" sec="1470632821"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="123.81.179.229" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632980"/>
        <to usec="0" sec="1470633026"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.117.1.3" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632900"/>
        <to usec="0" sec="1470632903"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="176.122.254.2" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633109"/>
        <to usec="0" sec="1470633121"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,502,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="221.153.212.251" dst_ip="203.181.109.168" dst_port="22"/>
        </slice>
        <from usec="0" sec="1470632573"/>
        <to usec="0" sec="1470632637"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="200.85.32.27" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632679"/>
        <to usec="0" sec="1470632691"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.116.213.231" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632935"/>
        <to usec="0" sec="1470632958"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.154.200.7" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632914"/>
        <to usec="0" sec="1470633078"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.197.189.224" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632517"/>
        <to usec="0" sec="1470632529"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="177.128.44.4" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632665"/>
        <to usec="0" sec="1470632693"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.188.44.230" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632876"/>
        <to usec="0" sec="1470632888"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="176.142.64.2" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632682"/>
        <to usec="0" sec="1470632694"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="46.152.22.30" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632651"/>
        <to usec="0" sec="1470632663"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="222.151.253.230" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632816"/>
        <to usec="0" sec="1470632863"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.230.144.1" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633205"/>
        <to usec="0" sec="1470633220"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.7.155.224" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632913"/>
        <to usec="0" sec="1470632925"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.203.100.28" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632492"/>
        <to usec="0" sec="1470633071"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="118.37.121.29" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632509"/>
        <to usec="0" sec="1470632511"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.114.87.231" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633146"/>
        <to usec="0" sec="1470633164"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.244.147.226" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632496"/>
        <to usec="0" sec="1470633281"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.97.216.23" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633116"/>
        <to usec="0" sec="1470633128"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="68.40.186.23" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632686"/>
        <to usec="0" sec="1470632708"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.75.143.247" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632479"/>
        <to usec="0" sec="1470632492"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="83.145.137.9" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633264"/>
        <to usec="0" sec="1470633274"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.233.94.245" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632559"/>
        <to usec="0" sec="1470632583"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="94.91.153.20" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632641"/>
        <to usec="0" sec="1470632642"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.91.237.21" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632658"/>
        <to usec="0" sec="1470632678"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.112.50.21" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632472"/>
        <to usec="0" sec="1470632475"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="151.0.239.239" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632660"/>
        <to usec="0" sec="1470632686"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="124.101.78.12" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632858"/>
        <to usec="0" sec="1470632872"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="61.148.38.239" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632698"/>
        <to usec="0" sec="1470632703"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.227.54.17" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632724"/>
        <to usec="0" sec="1470632740"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="5.3.147.242" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632495"/>
        <to usec="0" sec="1470633263"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="59.127.209.14" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633070"/>
        <to usec="0" sec="1470633242"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="193.66.225.243" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633104"/>
        <to usec="0" sec="1470633131"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.32.218.237" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632540"/>
        <to usec="0" sec="1470632542"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.166.131.236" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632574"/>
        <to usec="0" sec="1470632592"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="96.206.11.242" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632955"/>
        <to usec="0" sec="1470633061"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.180.255.255" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632903"/>
        <to usec="0" sec="1470632916"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="211.72.209.255" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632674"/>
        <to usec="0" sec="1470632675"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="114.43.62.247" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632754"/>
        <to usec="0" sec="1470632756"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.224.149.8" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632713"/>
        <to usec="0" sec="1470633018"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="118.221.75.225" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632453"/>
        <to usec="0" sec="1470633186"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.220.214.30" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632846"/>
        <to usec="0" sec="1470632885"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="189.60.73.249" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632882"/>
        <to usec="0" sec="1470632884"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="59.127.64.27" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632442"/>
        <to usec="0" sec="1470632454"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="177.209.193.250" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632719"/>
        <to usec="0" sec="1470632750"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.114.103.227" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632475"/>
        <to usec="0" sec="1470632501"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="200.93.90.2" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633045"/>
        <to usec="0" sec="1470633054"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="81.241.151.228" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632630"/>
        <to usec="0" sec="1470632643"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="61.148.126.16" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632850"/>
        <to usec="0" sec="1470633001"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="87.96.37.245" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632612"/>
        <to usec="0" sec="1470632631"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="176.74.223.239" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632400"/>
        <to usec="0" sec="1470632420"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="190.52.141.29" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632877"/>
        <to usec="0" sec="1470632895"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="92.188.111.225" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633032"/>
        <to usec="0" sec="1470633044"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="213.196.0.6" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632705"/>
        <to usec="0" sec="1470633039"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.125.179.251" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470633083"/>
        <to usec="0" sec="1470633086"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.76.110.29" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632828"/>
        <to usec="0" sec="1470632835"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="37.205.97.232" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632849"/>
        <to usec="0" sec="1470632861"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="200.155.249.23" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633122"/>
        <to usec="0" sec="1470633147"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.51.148.6" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632759"/>
        <to usec="0" sec="1470632772"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.147.137.249" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633110"/>
        <to usec="0" sec="1470633122"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.221.50.6" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470633252"/>
        <to usec="0" sec="1470633263"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="115.15.94.228" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632518"/>
        <to usec="0" sec="1470632707"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="90.203.153.20" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632564"/>
        <to usec="0" sec="1470632576"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.58.62.12" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632968"/>
        <to usec="0" sec="1470633003"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="220.133.6.31" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632814"/>
        <to usec="0" sec="1470632837"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.140.169.13" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632953"/>
        <to usec="0" sec="1470632964"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="79.216.191.241" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632807"/>
        <to usec="0" sec="1470632809"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="170.113.188.30" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632484"/>
        <to usec="0" sec="1470632496"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="210.27.240.29" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632619"/>
        <to usec="0" sec="1470632631"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="176.216.250.28" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632406"/>
        <to usec="0" sec="1470632430"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.71.122.19" dst_port="23"/>
        </slice>
        <from usec="0" sec="1470632956"/>
        <to usec="0" sec="1470632971"/>
    </anomaly>
    <anomaly type="notice" value="0.445549,1.961340,011,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="114.34.57.9" src_port="48111" dst_port="12200"/>
        </slice>
        <from usec="0" sec="1470632440"/>
        <to usec="0" sec="1470632442"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,011,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="78.188.59.31" src_port="23"/>
        </slice>
        <from usec="0" sec="1470632684"/>
        <to usec="0" sec="1470632686"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,011,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="41.32.251.252" src_port="23"/>
        </slice>
        <from usec="0" sec="1470632468"/>
        <to usec="0" sec="1470632470"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,011,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="219.255.109.8" src_port="1433"/>
        </slice>
        <from usec="0" sec="1470632850"/>
        <to usec="0" sec="1470632854"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,011,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="186.118.223.166" src_port="23"/>
        </slice>
        <from usec="0" sec="1470632423"/>
        <to usec="0" sec="1470632430"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,011,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="161.234.161.153" src_port="23"/>
        </slice>
        <from usec="0" sec="1470633202"/>
        <to usec="0" sec="1470633208"/>
    </anomaly>
    <anomaly type="notice" value="1.073980,2.140430,901,0 0 1 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="203.181.101.47" dst_ip="203.181.101.47" proto="tcp"/>
        </slice>
        <from usec="0" sec="1470632400"/>
        <to usec="0" sec="1470633113"/>
    </anomaly>
    <anomaly type="notice" value="1.072230,1.921970,502,1 1 1 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="180.154.169.164" dst_port="23"/>
            <filter src_ip="221.170.45.124" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.467380,2.232800,503,1 0 0 0 0 0 0 1 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.28.93.202" src_port="80"/>
            <filter dst_ip="163.28.93.202" src_port="443"/>
        </slice>
        <from usec="0" sec="1470632585"/>
        <to usec="0" sec="1470632671"/>
    </anomaly>
    <anomaly type="notice" value="1.000200,1.948270,504,1 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="163.28.181.228" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.363000,2.120480,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="123.140.198.66"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.000200,1.948270,503,1 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="124.216.209.226" dst_ip="163.28.54.195" src_port="80" dst_port="62026"/>
            <filter src_ip="124.216.209.226" dst_ip="163.28.54.195" src_port="80" dst_port="61910"/>
            <filter src_ip="124.216.209.226" dst_ip="163.28.54.195" src_port="80" dst_port="61838"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.363000,2.120480,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="125.198.132.144"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.363000,2.120480,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="125.135.72.190"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.363000,2.120480,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="131.179.248.28"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.415514,1.978560,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="133.8.182.72" dst_ip="17.174.207.179" dst_port="443"/>
            <filter src_ip="157.181.19.136" dst_ip="17.174.207.179" dst_port="443"/>
        </slice>
        <from usec="0" sec="1470632523"/>
        <to usec="0" sec="1470633156"/>
    </anomaly>
    <anomaly type="notice" value="1.363000,2.120480,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="133.24.42.180"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.363000,2.120480,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDP">
        <slice>
            <filter src_ip="133.24.228.238"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.000200,1.948270,504,1 0 0 0 0 0 0 0 0 1 0 0,ntscACK">
        <slice>
            <filter src_ip="133.24.170.64" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.000200,1.948270,504,1 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="162.11.51.178" dst_ip="203.181.97.237" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,503,1 1 1 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.28.37.44" dst_ip="206.147.242.53" dst_port="80"/>
            <filter src_ip="163.28.37.44" dst_ip="69.192.99.198" dst_port="80"/>
        </slice>
        <from usec="0" sec="1470632519"/>
        <to usec="0" sec="1470632806"/>
    </anomaly>
    <anomaly type="notice" value="1.000200,1.948270,503,1 0 0 0 0 0 0 0 0 1 0 0,heavy_hitter">
        <slice>
            <filter src_ip="163.28.53.52" dst_ip="112.216.43.190" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.363000,2.120480,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="176.159.61.2"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.363000,2.120480,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="187.156.191.76"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="187.183.8.39" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632743"/>
        <to usec="0" sec="1470633261"/>
    </anomaly>
    <anomaly type="notice" value="1.363000,2.120480,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="200.63.140.161"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.363000,2.120480,010,0 0 0 0 0 0 0 0 0 1 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="202.188.180.239"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.000200,1.948270,999,1 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="202.69.25.249" dst_port="53"/>
            <filter dst_ip="124.238.14.21" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.363000,2.120480,020,0 0 0 0 0 0 0 0 0 1 0 0,icmp_error">
        <slice>
            <filter src_ip="203.181.107.139"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.000200,1.948270,999,1 0 0 0 0 0 0 0 0 1 0 0,ntscUDP">
        <slice>
            <filter src_ip="203.181.104.220" src_port="56667"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.363000,2.120480,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="209.155.0.208"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.363000,2.120480,010,0 0 0 0 0 0 0 0 0 1 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="216.171.191.11" dst_port="445"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.363000,2.120480,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="220.138.220.146"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.000200,1.948270,504,1 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.28.65.201" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.363000,2.120480,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="45.73.248.139" dst_port="1723"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.363000,2.120480,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="45.42.181.148"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.363000,2.120480,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="59.125.212.159"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.363000,2.120480,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="71.22.238.137" src_port="34680"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.363000,2.120480,010,0 0 0 0 0 0 0 0 0 1 0 0,ntscSYNt">
        <slice>
            <filter src_ip="71.22.218.55"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.363000,2.120480,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="94.102.63.193"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.567377,1.952670,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.204.241.229" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1470632631"/>
        <to usec="0" sec="1470632872"/>
    </anomaly>
    <anomaly type="notice" value="1.363000,2.120480,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.28.85.76" dst_port="30503"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.363000,2.120480,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.28.11.19" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.363000,2.120480,503,0 0 0 0 0 0 0 0 0 1 0 0,point_to_point">
        <slice>
            <filter src_ip="52.119.175.233" dst_ip="163.28.52.241" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.000200,1.948270,503,1 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="202.75.57.73" src_port="80"/>
            <filter dst_ip="202.75.57.73" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.000200,1.948270,999,1 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="193.226.30.61" dst_ip="203.181.96.65" dst_port="161"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.000200,1.948270,999,1 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="192.120.172.253" dst_ip="203.181.100.158" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.000200,1.948270,503,1 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.181.103.157" src_port="53"/>
            <filter src_ip="123.65.189.15" dst_ip="203.181.103.157" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
