<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="210.92.32.130" dst_ip="163.45.140.187" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476075671"/>
        <to usec="0" sec="1476075819"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="202.228.180.252"/>
        </slice>
        <from usec="0" sec="1476075883"/>
        <to usec="0" sec="1476076470"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.176.159.118"/>
        </slice>
        <from usec="0" sec="1476076137"/>
        <to usec="0" sec="1476076140"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.45.99.119"/>
        </slice>
        <from usec="0" sec="1476075998"/>
        <to usec="0" sec="1476076001"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.45.25.9" dst_ip="205.23.187.61" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476075720"/>
        <to usec="0" sec="1476076390"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.45.193.224" dst_ip="23.205.217.102" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476076308"/>
        <to usec="0" sec="1476076312"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="158.197.231.30"/>
        </slice>
        <from usec="0" sec="1476075601"/>
        <to usec="0" sec="1476075741"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.45.136.148"/>
        </slice>
        <from usec="0" sec="1476075600"/>
        <to usec="0" sec="1476076422"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="60.246.209.19"/>
        </slice>
        <from usec="0" sec="1476076156"/>
        <to usec="0" sec="1476076429"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="60.199.196.63" dst_ip="203.65.127.110" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476075645"/>
        <to usec="0" sec="1476075648"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.45.97.94" dst_port="80"/>
        </slice>
        <from usec="0" sec="1476076013"/>
        <to usec="0" sec="1476076136"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.226.150.67"/>
        </slice>
        <from usec="0" sec="1476075698"/>
        <to usec="0" sec="1476075739"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.45.74.81" dst_port="80"/>
        </slice>
        <from usec="0" sec="1476075654"/>
        <to usec="0" sec="1476076451"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="45.223.202.213" dst_ip="163.45.80.252" src_port="4500" dst_port="4500" proto="udp"/>
        </slice>
        <from usec="0" sec="1476075621"/>
        <to usec="0" sec="1476076208"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.45.125.82"/>
        </slice>
        <from usec="0" sec="1476075605"/>
        <to usec="0" sec="1476075609"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="183.205.51.171"/>
        </slice>
        <from usec="0" sec="1476076218"/>
        <to usec="0" sec="1476076342"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.172.29.64"/>
        </slice>
        <from usec="0" sec="1476076142"/>
        <to usec="0" sec="1476076249"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="39.61.128.161"/>
        </slice>
        <from usec="0" sec="1476076428"/>
        <to usec="0" sec="1476076432"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="157.80.199.85" dst_ip="17.227.102.137" src_port="64032" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476075695"/>
        <to usec="0" sec="1476075701"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.45.8.177"/>
        </slice>
        <from usec="0" sec="1476076006"/>
        <to usec="0" sec="1476076137"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.228.180.210" dst_ip="104.195.119.165" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476076091"/>
        <to usec="0" sec="1476076103"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="157.80.199.90" dst_ip="17.227.102.74" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476075855"/>
        <to usec="0" sec="1476075858"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.45.26.209" dst_ip="202.65.242.232" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476076336"/>
        <to usec="0" sec="1476076347"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.45.97.62"/>
        </slice>
        <from usec="0" sec="1476076474"/>
        <to usec="0" sec="1476076476"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="157.80.199.56" dst_ip="17.227.102.137" src_port="33134" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476076217"/>
        <to usec="0" sec="1476076220"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="130.194.48.248"/>
        </slice>
        <from usec="0" sec="1476075786"/>
        <to usec="0" sec="1476076176"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="123.250.48.184"/>
        </slice>
        <from usec="0" sec="1476076029"/>
        <to usec="0" sec="1476076033"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.45.98.201"/>
        </slice>
        <from usec="0" sec="1476075950"/>
        <to usec="0" sec="1476076025"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="47.91.126.86" dst_ip="203.65.117.10" src_port="1239" dst_port="123" proto="udp"/>
        </slice>
        <from usec="0" sec="1476075605"/>
        <to usec="0" sec="1476075662"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.228.56.146" dst_ip="199.46.228.253" src_port="64076" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476075743"/>
        <to usec="0" sec="1476076274"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="123.250.48.131"/>
        </slice>
        <from usec="0" sec="1476076341"/>
        <to usec="0" sec="1476076343"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.45.99.26" dst_ip="141.141.53.113" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476075958"/>
        <to usec="0" sec="1476075961"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.45.26.167" dst_ip="52.20.37.64" src_port="50441" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476076454"/>
        <to usec="0" sec="1476076456"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.172.45.107"/>
        </slice>
        <from usec="0" sec="1476076081"/>
        <to usec="0" sec="1476076235"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="121.205.27.116"/>
        </slice>
        <from usec="0" sec="1476076248"/>
        <to usec="0" sec="1476076398"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.45.193.184" dst_ip="61.59.80.113" dst_port="443"/>
        </slice>
        <from usec="0" sec="1476075839"/>
        <to usec="0" sec="1476075848"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.172.95.53"/>
        </slice>
        <from usec="0" sec="1476075631"/>
        <to usec="0" sec="1476076500"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscACKt">
        <slice>
            <filter src_ip="202.228.168.239"/>
        </slice>
        <from usec="0" sec="1476076405"/>
        <to usec="0" sec="1476076409"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="37.193.18.155" dst_ip="163.45.156.120" src_port="62421" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476076184"/>
        <to usec="0" sec="1476076188"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.172.12.219" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476075637"/>
        <to usec="0" sec="1476076266"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="114.199.76.167" dst_ip="202.228.56.85" src_port="52198" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476076050"/>
        <to usec="0" sec="1476076053"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.228.180.169" dst_ip="17.225.209.30" src_port="64215" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476075751"/>
        <to usec="0" sec="1476075753"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="76.24.58.125"/>
        </slice>
        <from usec="0" sec="1476075600"/>
        <to usec="0" sec="1476075609"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="108.176.160.124" dst_ip="202.228.60.237" src_port="443" dst_port="3493" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476075653"/>
        <to usec="0" sec="1476076477"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="157.80.156.135"/>
        </slice>
        <from usec="0" sec="1476075610"/>
        <to usec="0" sec="1476076205"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="168.23.49.133" dst_ip="203.65.116.32" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476076336"/>
        <to usec="0" sec="1476076338"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="176.175.108.112"/>
        </slice>
        <from usec="0" sec="1476075935"/>
        <to usec="0" sec="1476075993"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.121.139.143" dst_ip="163.45.136.151" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476075735"/>
        <to usec="0" sec="1476075738"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="72.249.65.143" dst_ip="202.228.56.139" src_port="80" dst_port="45558" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476076220"/>
        <to usec="0" sec="1476076222"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="96.17.151.140" dst_ip="163.45.192.118" src_port="80" dst_port="41010" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476075683"/>
        <to usec="0" sec="1476075723"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="118.241.143.138" dst_ip="202.233.182.120" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476075640"/>
        <to usec="0" sec="1476075970"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="203.65.127.156" dst_ip="123.248.117.135" src_port="80" dst_port="41567" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476075782"/>
        <to usec="0" sec="1476075783"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="73.168.90.103"/>
        </slice>
        <from usec="0" sec="1476075600"/>
        <to usec="0" sec="1476076428"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.228.176.102" dst_ip="8.237.51.25" src_port="49371" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476075989"/>
        <to usec="0" sec="1476075993"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.228.161.96"/>
        </slice>
        <from usec="0" sec="1476076146"/>
        <to usec="0" sec="1476076149"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="202.232.253.161" dst_ip="163.45.10.22" src_port="80" dst_port="1126" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476075834"/>
        <to usec="0" sec="1476075838"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="103.119.115.92"/>
        </slice>
        <from usec="0" sec="1476075981"/>
        <to usec="0" sec="1476076011"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="126.42.211.188" dst_ip="163.45.139.37" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476076400"/>
        <to usec="0" sec="1476076404"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="103.243.113.184" dst_ip="163.45.195.231" src_port="443" dst_port="59388" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476076183"/>
        <to usec="0" sec="1476076185"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="174.120.99.174"/>
        </slice>
        <from usec="0" sec="1476075848"/>
        <to usec="0" sec="1476075871"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.116.250.172"/>
        </slice>
        <from usec="0" sec="1476075600"/>
        <to usec="0" sec="1476075604"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="130.69.62.180"/>
        </slice>
        <from usec="0" sec="1476075744"/>
        <to usec="0" sec="1476075755"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="121.124.64.74" dst_ip="202.228.59.203" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476075858"/>
        <to usec="0" sec="1476076459"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.176.159.167"/>
        </slice>
        <from usec="0" sec="1476076029"/>
        <to usec="0" sec="1476076031"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.45.192.86"/>
        </slice>
        <from usec="0" sec="1476075803"/>
        <to usec="0" sec="1476076431"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="92.150.63.190"/>
        </slice>
        <from usec="0" sec="1476075692"/>
        <to usec="0" sec="1476075732"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.228.182.163" dst_ip="17.225.208.139" src_port="61517" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476076164"/>
        <to usec="0" sec="1476076168"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="61.81.90.61" dst_ip="203.65.117.10" src_port="33501" dst_port="123" proto="udp"/>
        </slice>
        <from usec="0" sec="1476075603"/>
        <to usec="0" sec="1476076427"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="203.65.113.200" dst_ip="202.74.108.183" src_port="80" dst_port="60853" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476075614"/>
        <to usec="0" sec="1476075615"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.172.27.243"/>
        </slice>
        <from usec="0" sec="1476075806"/>
        <to usec="0" sec="1476075809"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.176.245.247"/>
        </slice>
        <from usec="0" sec="1476076147"/>
        <to usec="0" sec="1476076151"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="126.111.206.50" dst_ip="203.65.112.212" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476076116"/>
        <to usec="0" sec="1476076281"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="202.228.182.205"/>
        </slice>
        <from usec="0" sec="1476076298"/>
        <to usec="0" sec="1476076390"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.228.161.8"/>
        </slice>
        <from usec="0" sec="1476076493"/>
        <to usec="0" sec="1476076496"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.45.10.8" dst_ip="23.205.217.102" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476076452"/>
        <to usec="0" sec="1476076457"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.172.14.237"/>
        </slice>
        <from usec="0" sec="1476076324"/>
        <to usec="0" sec="1476076340"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.176.198.220"/>
        </slice>
        <from usec="0" sec="1476075645"/>
        <to usec="0" sec="1476075648"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="101.54.86.219" dst_ip="163.45.98.117" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476075994"/>
        <to usec="0" sec="1476075995"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="50.117.188.229" dst_ip="203.65.122.211" src_port="60434" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476076445"/>
        <to usec="0" sec="1476076452"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.166.155.239" dst_ip="163.45.140.185" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476075728"/>
        <to usec="0" sec="1476075730"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="188.183.13.30"/>
        </slice>
        <from usec="0" sec="1476076133"/>
        <to usec="0" sec="1476076142"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="123.56.88.36"/>
        </slice>
        <from usec="0" sec="1476075609"/>
        <to usec="0" sec="1476076186"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.45.194.19" dst_ip="104.66.214.92" src_port="58028" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476075879"/>
        <to usec="0" sec="1476075916"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.176.86.29"/>
        </slice>
        <from usec="0" sec="1476076273"/>
        <to usec="0" sec="1476076372"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.228.182.253" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476075784"/>
        <to usec="0" sec="1476075787"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="135.59.18.26" dst_ip="163.45.19.80" src_port="80" dst_port="49641" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476076120"/>
        <to usec="0" sec="1476076175"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.45.250.39" dst_ip="108.188.162.1" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476076427"/>
        <to usec="0" sec="1476076439"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.65.122.242"/>
        </slice>
        <from usec="0" sec="1476075727"/>
        <to usec="0" sec="1476075730"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.45.77.51" dst_port="30303"/>
        </slice>
        <from usec="0" sec="1476075794"/>
        <to usec="0" sec="1476076500"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="219.130.50.26"/>
        </slice>
        <from usec="0" sec="1476075600"/>
        <to usec="0" sec="1476076077"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="210.87.121.56" dst_ip="202.228.182.171" src_port="80" dst_port="57519" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476076199"/>
        <to usec="0" sec="1476076200"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="104.193.150.209" dst_ip="202.228.182.238" src_port="80" dst_port="56991" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476075949"/>
        <to usec="0" sec="1476075950"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="118.232.237.222" dst_ip="203.65.112.212" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476076476"/>
        <to usec="0" sec="1476076478"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="61.219.56.63"/>
        </slice>
        <from usec="0" sec="1476075619"/>
        <to usec="0" sec="1476075621"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="202.98.45.2" dst_ip="202.98.45.2" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476075730"/>
        <to usec="0" sec="1476076417"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="107.82.241.240"/>
        </slice>
        <from usec="0" sec="1476075600"/>
        <to usec="0" sec="1476076470"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="204.18.175.8" dst_ip="204.18.175.8" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476075848"/>
        <to usec="0" sec="1476076112"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="203.65.117.10" dst_ip="203.65.117.10" proto="udp"/>
        </slice>
        <from usec="0" sec="1476075600"/>
        <to usec="0" sec="1476076501"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="157.227.132.107" dst_ip="157.227.132.107" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476075692"/>
        <to usec="0" sec="1476076476"/>
    </anomaly>
    <anomaly type="notice" value="1.192950,1.817290,999,1 1 1 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="24.44.83.149" dst_ip="202.228.186.108" dst_port="53"/>
            <filter src_ip="66.233.88.136" dst_ip="202.228.186.108" dst_port="53"/>
            <filter src_ip="67.117.7.12" dst_ip="202.228.186.108" dst_port="53"/>
        </slice>
        <from usec="0" sec="1476075600"/>
        <to usec="0" sec="1476076501"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,011,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="122.4.88.160"/>
        </slice>
        <from usec="0" sec="1476076405"/>
        <to usec="0" sec="1476076500"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="163.45.19.112" dst_ip="38.221.25.198" src_port="49190" dst_port="80"/>
            <filter src_ip="163.45.12.130" dst_ip="38.221.25.198" src_port="50361" dst_port="80"/>
            <filter src_ip="163.45.15.59" dst_ip="38.221.25.198" src_port="49389" dst_port="80"/>
        </slice>
        <from usec="0" sec="1476076100"/>
        <to usec="0" sec="1476076136"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.45.237.210" dst_port="993"/>
        </slice>
        <from usec="0" sec="1476075732"/>
        <to usec="0" sec="1476076432"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="31.141.134.59" dst_ip="31.141.134.59" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476075645"/>
        <to usec="0" sec="1476076145"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.65.116.220" dst_port="80"/>
        </slice>
        <from usec="0" sec="1476075633"/>
        <to usec="0" sec="1476076499"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="133.172.117.127" dst_ip="198.171.255.75" dst_port="443"/>
            <filter src_ip="203.65.113.154" dst_ip="198.171.255.75" dst_port="443"/>
        </slice>
        <from usec="0" sec="1476075624"/>
        <to usec="0" sec="1476076500"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="104.66.214.92" dst_ip="104.66.214.92" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476076021"/>
        <to usec="0" sec="1476076488"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="65.155.141.100" dst_ip="65.155.141.100" src_port="58274" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476075874"/>
        <to usec="0" sec="1476076359"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="163.45.234.149"/>
        </slice>
        <from usec="0" sec="1476075833"/>
        <to usec="0" sec="1476075836"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="68.75.18.36" dst_ip="163.45.62.177" dst_port="80"/>
            <filter src_ip="187.119.166.74" dst_ip="163.45.62.177" dst_port="80"/>
        </slice>
        <from usec="0" sec="1476075728"/>
        <to usec="0" sec="1476076063"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="58.39.229.114" dst_ip="202.233.182.144" dst_port="443"/>
        </slice>
        <from usec="0" sec="1476076051"/>
        <to usec="0" sec="1476076069"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,020,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="219.156.14.65"/>
        </slice>
        <from usec="0" sec="1476075603"/>
        <to usec="0" sec="1476075812"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="151.154.214.1" dst_ip="151.154.214.1" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476075626"/>
        <to usec="0" sec="1476075824"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="203.65.113.200" dst_ip="203.65.113.200" src_port="60855" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476075637"/>
        <to usec="0" sec="1476076499"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.65.120.53" dst_port="80"/>
        </slice>
        <from usec="0" sec="1476075717"/>
        <to usec="0" sec="1476076459"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.45.98.40" dst_ip="173.202.184.220" src_port="57304" dst_port="80"/>
        </slice>
        <from usec="0" sec="1476075921"/>
        <to usec="0" sec="1476076067"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="108.188.162.193" src_port="23249" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476075754"/>
        <to usec="0" sec="1476075757"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="103.225.210.241"/>
        </slice>
        <from usec="0" sec="1476076000"/>
        <to usec="0" sec="1476076007"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="210.67.0.225"/>
        </slice>
        <from usec="0" sec="1476076382"/>
        <to usec="0" sec="1476076385"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="218.216.107.97"/>
        </slice>
        <from usec="0" sec="1476075606"/>
        <to usec="0" sec="1476076470"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.80.9.30"/>
        </slice>
        <from usec="0" sec="1476076074"/>
        <to usec="0" sec="1476076077"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.45.26.201"/>
        </slice>
        <from usec="0" sec="1476076486"/>
        <to usec="0" sec="1476076498"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.45.98.175"/>
        </slice>
        <from usec="0" sec="1476076053"/>
        <to usec="0" sec="1476076060"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="121.24.116.175"/>
        </slice>
        <from usec="0" sec="1476076412"/>
        <to usec="0" sec="1476076415"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="157.80.57.221" dst_ip="65.155.141.51" dst_port="80"/>
            <filter src_ip="133.176.35.48" dst_ip="65.155.141.51" dst_port="80"/>
        </slice>
        <from usec="0" sec="1476076247"/>
        <to usec="0" sec="1476076318"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="60.107.164.58"/>
        </slice>
        <from usec="0" sec="1476075752"/>
        <to usec="0" sec="1476075755"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="126.189.237.20"/>
        </slice>
        <from usec="0" sec="1476076382"/>
        <to usec="0" sec="1476076432"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.176.176.233"/>
        </slice>
        <from usec="0" sec="1476076250"/>
        <to usec="0" sec="1476076252"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="68.75.17.210"/>
        </slice>
        <from usec="0" sec="1476076302"/>
        <to usec="0" sec="1476076304"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.228.182.81"/>
        </slice>
        <from usec="0" sec="1476076322"/>
        <to usec="0" sec="1476076325"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.176.217.125" dst_port="443"/>
        </slice>
        <from usec="0" sec="1476075645"/>
        <to usec="0" sec="1476076472"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.233.137.219"/>
        </slice>
        <from usec="0" sec="1476075833"/>
        <to usec="0" sec="1476076464"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.45.18.151"/>
        </slice>
        <from usec="0" sec="1476075795"/>
        <to usec="0" sec="1476076415"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="126.7.86.0" dst_ip="163.45.140.187" dst_port="443"/>
            <filter src_ip="219.184.232.210" dst_ip="163.45.140.187" dst_port="443"/>
        </slice>
        <from usec="0" sec="1476076337"/>
        <to usec="0" sec="1476076361"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="1.51.33.10"/>
        </slice>
        <from usec="0" sec="1476076382"/>
        <to usec="0" sec="1476076385"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.226.248.15"/>
        </slice>
        <from usec="0" sec="1476075893"/>
        <to usec="0" sec="1476075896"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="1.7.42.40"/>
        </slice>
        <from usec="0" sec="1476076490"/>
        <to usec="0" sec="1476076498"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="1.54.162.0"/>
        </slice>
        <from usec="0" sec="1476075948"/>
        <to usec="0" sec="1476076007"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.176.79.240"/>
        </slice>
        <from usec="0" sec="1476076358"/>
        <to usec="0" sec="1476076361"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="104.220.43.24"/>
        </slice>
        <from usec="0" sec="1476076468"/>
        <to usec="0" sec="1476076470"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,011,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="222.162.248.160"/>
        </slice>
        <from usec="0" sec="1476076408"/>
        <to usec="0" sec="1476076469"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.115.227.131"/>
        </slice>
        <from usec="0" sec="1476076105"/>
        <to usec="0" sec="1476076437"/>
    </anomaly>
    <anomaly type="notice" value="0.679655,1.763380,503,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="202.228.178.212" dst_port="80"/>
            <filter src_ip="202.228.178.212" dst_port="443"/>
            <filter src_ip="163.45.99.34" dst_port="80"/>
        </slice>
        <from usec="0" sec="1476075631"/>
        <to usec="0" sec="1476076500"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="111.224.193.147" src_port="12200" dst_port="48111" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476076202"/>
        <to usec="0" sec="1476076204"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="185.87.191.126"/>
        </slice>
        <from usec="0" sec="1476075650"/>
        <to usec="0" sec="1476075738"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="211.40.13.244" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1476076343"/>
        <to usec="0" sec="1476076355"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="106.20.235.53" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1476076396"/>
        <to usec="0" sec="1476076398"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="222.186.41.102" dst_port="3389" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476075657"/>
        <to usec="0" sec="1476075658"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.45.123.106"/>
        </slice>
        <from usec="0" sec="1476075601"/>
        <to usec="0" sec="1476075604"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.233.182.102"/>
        </slice>
        <from usec="0" sec="1476076080"/>
        <to usec="0" sec="1476076343"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.84.81.170"/>
        </slice>
        <from usec="0" sec="1476076256"/>
        <to usec="0" sec="1476076263"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.228.182.67"/>
        </slice>
        <from usec="0" sec="1476076397"/>
        <to usec="0" sec="1476076400"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="111.64.249.88" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476076449"/>
        <to usec="0" sec="1476076453"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="202.228.182.184"/>
        </slice>
        <from usec="0" sec="1476075730"/>
        <to usec="0" sec="1476076111"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="23.223.33.47"/>
        </slice>
        <from usec="0" sec="1476076302"/>
        <to usec="0" sec="1476076304"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.176.118.130"/>
        </slice>
        <from usec="0" sec="1476076127"/>
        <to usec="0" sec="1476076129"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.172.101.92"/>
        </slice>
        <from usec="0" sec="1476075604"/>
        <to usec="0" sec="1476075665"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="105.7.19.54"/>
        </slice>
        <from usec="0" sec="1476075847"/>
        <to usec="0" sec="1476075851"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.65.125.122"/>
        </slice>
        <from usec="0" sec="1476076438"/>
        <to usec="0" sec="1476076442"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="182.194.39.0"/>
        </slice>
        <from usec="0" sec="1476076119"/>
        <to usec="0" sec="1476076122"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="133.113.141.126"/>
        </slice>
        <from usec="0" sec="1476075690"/>
        <to usec="0" sec="1476075693"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,011,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="133.172.87.1"/>
        </slice>
        <from usec="0" sec="1476075761"/>
        <to usec="0" sec="1476075766"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="185.174.202.253"/>
        </slice>
        <from usec="0" sec="1476076358"/>
        <to usec="0" sec="1476076374"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="201.204.145.131"/>
        </slice>
        <from usec="0" sec="1476076484"/>
        <to usec="0" sec="1476076487"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="37.247.119.3"/>
        </slice>
        <from usec="0" sec="1476076053"/>
        <to usec="0" sec="1476076056"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="210.175.49.125"/>
        </slice>
        <from usec="0" sec="1476076176"/>
        <to usec="0" sec="1476076179"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="79.72.149.250"/>
        </slice>
        <from usec="0" sec="1476075743"/>
        <to usec="0" sec="1476075746"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="122.25.240.249"/>
        </slice>
        <from usec="0" sec="1476075607"/>
        <to usec="0" sec="1476075609"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.176.159.121"/>
        </slice>
        <from usec="0" sec="1476076336"/>
        <to usec="0" sec="1476076338"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.228.180.249"/>
        </slice>
        <from usec="0" sec="1476076336"/>
        <to usec="0" sec="1476076338"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="14.251.254.112"/>
        </slice>
        <from usec="0" sec="1476075929"/>
        <to usec="0" sec="1476075931"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,502,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="116.144.20.143"/>
        </slice>
        <from usec="0" sec="1476075837"/>
        <to usec="0" sec="1476075839"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.45.97.112"/>
        </slice>
        <from usec="0" sec="1476076246"/>
        <to usec="0" sec="1476076248"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="171.245.223.15"/>
        </slice>
        <from usec="0" sec="1476075650"/>
        <to usec="0" sec="1476075653"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.172.182.13"/>
        </slice>
        <from usec="0" sec="1476076101"/>
        <to usec="0" sec="1476076104"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.228.183.11"/>
        </slice>
        <from usec="0" sec="1476076439"/>
        <to usec="0" sec="1476076442"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.45.148.12"/>
        </slice>
        <from usec="0" sec="1476075926"/>
        <to usec="0" sec="1476075928"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.80.157.117"/>
        </slice>
        <from usec="0" sec="1476075864"/>
        <to usec="0" sec="1476075867"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.176.201.114"/>
        </slice>
        <from usec="0" sec="1476076161"/>
        <to usec="0" sec="1476076163"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="133.172.118.139"/>
        </slice>
        <from usec="0" sec="1476076026"/>
        <to usec="0" sec="1476076404"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="14.246.128.243"/>
        </slice>
        <from usec="0" sec="1476075630"/>
        <to usec="0" sec="1476075889"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.176.33.244"/>
        </slice>
        <from usec="0" sec="1476075655"/>
        <to usec="0" sec="1476075658"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="202.228.169.115"/>
        </slice>
        <from usec="0" sec="1476075900"/>
        <to usec="0" sec="1476075903"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="79.28.86.242"/>
        </slice>
        <from usec="0" sec="1476075734"/>
        <to usec="0" sec="1476075736"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="133.172.118.136"/>
        </slice>
        <from usec="0" sec="1476076331"/>
        <to usec="0" sec="1476076333"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.172.60.118"/>
        </slice>
        <from usec="0" sec="1476075999"/>
        <to usec="0" sec="1476076001"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.228.180.244"/>
        </slice>
        <from usec="0" sec="1476075725"/>
        <to usec="0" sec="1476075728"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.113.135.111"/>
        </slice>
        <from usec="0" sec="1476075603"/>
        <to usec="0" sec="1476075605"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,901,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="223.244.223.109"/>
        </slice>
        <from usec="0" sec="1476076493"/>
        <to usec="0" sec="1476076495"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="133.172.117.153"/>
        </slice>
        <from usec="0" sec="1476075685"/>
        <to usec="0" sec="1476075691"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="183.190.23.104"/>
        </slice>
        <from usec="0" sec="1476075761"/>
        <to usec="0" sec="1476075763"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,DDoSSYNACKrp">
        <slice>
            <filter src_ip="218.12.247.20"/>
        </slice>
        <from usec="0" sec="1476076441"/>
        <to usec="0" sec="1476076443"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.228.56.233"/>
        </slice>
        <from usec="0" sec="1476076083"/>
        <to usec="0" sec="1476076086"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,501,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.65.120.153"/>
        </slice>
        <from usec="0" sec="1476075669"/>
        <to usec="0" sec="1476075672"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.45.97.98"/>
        </slice>
        <from usec="0" sec="1476076414"/>
        <to usec="0" sec="1476076416"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="59.119.9.17"/>
        </slice>
        <from usec="0" sec="1476076347"/>
        <to usec="0" sec="1476076376"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.176.201.64"/>
        </slice>
        <from usec="0" sec="1476076176"/>
        <to usec="0" sec="1476076179"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.45.148.33"/>
        </slice>
        <from usec="0" sec="1476075951"/>
        <to usec="0" sec="1476075953"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="162.195.52.190"/>
        </slice>
        <from usec="0" sec="1476075883"/>
        <to usec="0" sec="1476075903"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="182.112.147.222"/>
        </slice>
        <from usec="0" sec="1476076139"/>
        <to usec="0" sec="1476076142"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="113.11.184.162"/>
        </slice>
        <from usec="0" sec="1476076066"/>
        <to usec="0" sec="1476076069"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="180.29.42.166"/>
        </slice>
        <from usec="0" sec="1476075642"/>
        <to usec="0" sec="1476075644"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.80.61.58"/>
        </slice>
        <from usec="0" sec="1476075615"/>
        <to usec="0" sec="1476075617"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,901,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="115.48.4.91"/>
        </slice>
        <from usec="0" sec="1476075803"/>
        <to usec="0" sec="1476075806"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="121.202.11.58"/>
        </slice>
        <from usec="0" sec="1476076336"/>
        <to usec="0" sec="1476076338"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.172.202.174"/>
        </slice>
        <from usec="0" sec="1476075602"/>
        <to usec="0" sec="1476076403"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="126.159.10.206"/>
        </slice>
        <from usec="0" sec="1476076324"/>
        <to usec="0" sec="1476076327"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="203.65.112.212"/>
        </slice>
        <from usec="0" sec="1476076159"/>
        <to usec="0" sec="1476076162"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.45.123.47"/>
        </slice>
        <from usec="0" sec="1476075659"/>
        <to usec="0" sec="1476075661"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.139.8.207"/>
        </slice>
        <from usec="0" sec="1476075747"/>
        <to usec="0" sec="1476075750"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.228.59.50"/>
        </slice>
        <from usec="0" sec="1476076395"/>
        <to usec="0" sec="1476076398"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="125.13.69.173"/>
        </slice>
        <from usec="0" sec="1476075665"/>
        <to usec="0" sec="1476075668"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="163.75.62.54"/>
        </slice>
        <from usec="0" sec="1476075600"/>
        <to usec="0" sec="1476075608"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="113.41.192.202"/>
        </slice>
        <from usec="0" sec="1476076426"/>
        <to usec="0" sec="1476076429"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="113.179.117.209"/>
        </slice>
        <from usec="0" sec="1476075752"/>
        <to usec="0" sec="1476075755"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.176.11.78"/>
        </slice>
        <from usec="0" sec="1476075631"/>
        <to usec="0" sec="1476075633"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="211.49.58.204"/>
        </slice>
        <from usec="0" sec="1476075654"/>
        <to usec="0" sec="1476075656"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.65.102.52"/>
        </slice>
        <from usec="0" sec="1476076451"/>
        <to usec="0" sec="1476076455"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="59.119.98.219"/>
        </slice>
        <from usec="0" sec="1476075803"/>
        <to usec="0" sec="1476075997"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="187.118.14.200"/>
        </slice>
        <from usec="0" sec="1476075908"/>
        <to usec="0" sec="1476075910"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.45.222.47"/>
        </slice>
        <from usec="0" sec="1476075866"/>
        <to usec="0" sec="1476076263"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="211.183.254.57"/>
        </slice>
        <from usec="0" sec="1476075732"/>
        <to usec="0" sec="1476075735"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.176.132.187"/>
        </slice>
        <from usec="0" sec="1476075730"/>
        <to usec="0" sec="1476075733"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.176.225.42"/>
        </slice>
        <from usec="0" sec="1476076230"/>
        <to usec="0" sec="1476076233"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="183.100.165.56"/>
        </slice>
        <from usec="0" sec="1476076056"/>
        <to usec="0" sec="1476076059"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="112.94.251.41"/>
        </slice>
        <from usec="0" sec="1476076154"/>
        <to usec="0" sec="1476076157"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="68.75.17.181"/>
        </slice>
        <from usec="0" sec="1476075952"/>
        <to usec="0" sec="1476075954"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.80.11.32"/>
        </slice>
        <from usec="0" sec="1476075654"/>
        <to usec="0" sec="1476075656"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="175.50.231.124"/>
        </slice>
        <from usec="0" sec="1476075692"/>
        <to usec="0" sec="1476076090"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="210.66.123.66"/>
        </slice>
        <from usec="0" sec="1476076064"/>
        <to usec="0" sec="1476076455"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="183.100.14.4"/>
        </slice>
        <from usec="0" sec="1476075930"/>
        <to usec="0" sec="1476075933"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="94.1.219.184"/>
        </slice>
        <from usec="0" sec="1476075918"/>
        <to usec="0" sec="1476075921"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="120.20.132.70"/>
        </slice>
        <from usec="0" sec="1476075995"/>
        <to usec="0" sec="1476075997"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.80.199.57"/>
        </slice>
        <from usec="0" sec="1476075784"/>
        <to usec="0" sec="1476075787"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="122.6.219.198"/>
        </slice>
        <from usec="0" sec="1476075661"/>
        <to usec="0" sec="1476076271"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="85.165.124.197"/>
        </slice>
        <from usec="0" sec="1476076415"/>
        <to usec="0" sec="1476076418"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.80.199.58"/>
        </slice>
        <from usec="0" sec="1476076464"/>
        <to usec="0" sec="1476076466"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="104.119.171.122"/>
        </slice>
        <from usec="0" sec="1476075952"/>
        <to usec="0" sec="1476075954"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.45.19.71"/>
        </slice>
        <from usec="0" sec="1476076275"/>
        <to usec="0" sec="1476076277"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="218.169.49.15"/>
        </slice>
        <from usec="0" sec="1476076387"/>
        <to usec="0" sec="1476076390"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.176.110.206"/>
        </slice>
        <from usec="0" sec="1476076114"/>
        <to usec="0" sec="1476076117"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.45.99.53"/>
        </slice>
        <from usec="0" sec="1476076331"/>
        <to usec="0" sec="1476076333"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.45.12.181"/>
        </slice>
        <from usec="0" sec="1476075720"/>
        <to usec="0" sec="1476075722"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="121.202.11.77"/>
        </slice>
        <from usec="0" sec="1476076375"/>
        <to usec="0" sec="1476076377"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="14.41.117.116"/>
        </slice>
        <from usec="0" sec="1476076336"/>
        <to usec="0" sec="1476076338"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.172.26.176"/>
        </slice>
        <from usec="0" sec="1476076153"/>
        <to usec="0" sec="1476076155"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="218.175.208.137"/>
        </slice>
        <from usec="0" sec="1476076385"/>
        <to usec="0" sec="1476076388"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="5.23.61.49"/>
        </slice>
        <from usec="0" sec="1476076319"/>
        <to usec="0" sec="1476076321"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="207.192.54.137"/>
        </slice>
        <from usec="0" sec="1476076101"/>
        <to usec="0" sec="1476076104"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.228.60.224" dst_ip="69.164.223.55" dst_port="80"/>
            <filter src_ip="202.228.60.224" dst_ip="69.164.223.229" dst_port="80"/>
        </slice>
        <from usec="0" sec="1476075600"/>
        <to usec="0" sec="1476076304"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="133.172.57.33"/>
        </slice>
        <from usec="0" sec="1476075634"/>
        <to usec="0" sec="1476075636"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.45.97.44"/>
        </slice>
        <from usec="0" sec="1476076175"/>
        <to usec="0" sec="1476076478"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.80.33.88"/>
        </slice>
        <from usec="0" sec="1476075607"/>
        <to usec="0" sec="1476075609"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="113.174.201.39"/>
        </slice>
        <from usec="0" sec="1476075926"/>
        <to usec="0" sec="1476075928"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.176.2.168"/>
        </slice>
        <from usec="0" sec="1476075729"/>
        <to usec="0" sec="1476075731"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="117.232.93.86"/>
        </slice>
        <from usec="0" sec="1476076171"/>
        <to usec="0" sec="1476076174"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.172.28.111"/>
        </slice>
        <from usec="0" sec="1476076095"/>
        <to usec="0" sec="1476076098"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,901,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="202.228.180.153"/>
        </slice>
        <from usec="0" sec="1476075624"/>
        <to usec="0" sec="1476075626"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,901,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="121.170.251.88"/>
        </slice>
        <from usec="0" sec="1476075769"/>
        <to usec="0" sec="1476075772"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.45.8.229"/>
        </slice>
        <from usec="0" sec="1476076453"/>
        <to usec="0" sec="1476076455"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="119.51.98.150"/>
        </slice>
        <from usec="0" sec="1476075625"/>
        <to usec="0" sec="1476076343"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.172.11.62"/>
        </slice>
        <from usec="0" sec="1476076250"/>
        <to usec="0" sec="1476076252"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="1.51.4.225"/>
        </slice>
        <from usec="0" sec="1476075906"/>
        <to usec="0" sec="1476075909"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="27.31.211.162"/>
        </slice>
        <from usec="0" sec="1476076089"/>
        <to usec="0" sec="1476076092"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="60.75.242.157"/>
        </slice>
        <from usec="0" sec="1476075829"/>
        <to usec="0" sec="1476076188"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="61.252.133.3"/>
        </slice>
        <from usec="0" sec="1476075632"/>
        <to usec="0" sec="1476075635"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.80.78.251"/>
        </slice>
        <from usec="0" sec="1476075635"/>
        <to usec="0" sec="1476075638"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="89.100.169.68"/>
        </slice>
        <from usec="0" sec="1476075727"/>
        <to usec="0" sec="1476075738"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="220.111.123.70"/>
        </slice>
        <from usec="0" sec="1476076341"/>
        <to usec="0" sec="1476076343"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="14.41.248.134"/>
        </slice>
        <from usec="0" sec="1476075806"/>
        <to usec="0" sec="1476075809"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.45.162.153"/>
        </slice>
        <from usec="0" sec="1476075879"/>
        <to usec="0" sec="1476075882"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="192.185.147.187"/>
        </slice>
        <from usec="0" sec="1476075983"/>
        <to usec="0" sec="1476076239"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="202.228.180.185"/>
        </slice>
        <from usec="0" sec="1476075657"/>
        <to usec="0" sec="1476075659"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="222.225.116.247"/>
        </slice>
        <from usec="0" sec="1476075660"/>
        <to usec="0" sec="1476075662"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.172.141.83"/>
        </slice>
        <from usec="0" sec="1476076349"/>
        <to usec="0" sec="1476076351"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="49.29.89.245"/>
        </slice>
        <from usec="0" sec="1476075852"/>
        <to usec="0" sec="1476075855"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.172.111.50"/>
        </slice>
        <from usec="0" sec="1476075856"/>
        <to usec="0" sec="1476076390"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.45.123.84"/>
        </slice>
        <from usec="0" sec="1476076017"/>
        <to usec="0" sec="1476076020"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="65.220.144.196"/>
        </slice>
        <from usec="0" sec="1476076085"/>
        <to usec="0" sec="1476076087"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="49.247.185.136"/>
        </slice>
        <from usec="0" sec="1476075694"/>
        <to usec="0" sec="1476075696"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="223.198.66.68"/>
        </slice>
        <from usec="0" sec="1476075815"/>
        <to usec="0" sec="1476075818"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,901,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="221.112.138.167"/>
        </slice>
        <from usec="0" sec="1476075916"/>
        <to usec="0" sec="1476075919"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="123.117.223.57"/>
        </slice>
        <from usec="0" sec="1476076144"/>
        <to usec="0" sec="1476076146"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.80.9.117"/>
        </slice>
        <from usec="0" sec="1476075633"/>
        <to usec="0" sec="1476075636"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.228.62.60"/>
        </slice>
        <from usec="0" sec="1476075687"/>
        <to usec="0" sec="1476076450"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,901,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="113.131.144.148"/>
        </slice>
        <from usec="0" sec="1476076181"/>
        <to usec="0" sec="1476076183"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="163.45.17.143"/>
        </slice>
        <from usec="0" sec="1476075738"/>
        <to usec="0" sec="1476075741"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.172.117.254"/>
        </slice>
        <from usec="0" sec="1476075775"/>
        <to usec="0" sec="1476075778"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="209.177.26.174"/>
        </slice>
        <from usec="0" sec="1476076336"/>
        <to usec="0" sec="1476076338"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="49.229.83.130"/>
        </slice>
        <from usec="0" sec="1476076407"/>
        <to usec="0" sec="1476076410"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="195.145.212.123"/>
        </slice>
        <from usec="0" sec="1476076186"/>
        <to usec="0" sec="1476076188"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.45.61.133"/>
        </slice>
        <from usec="0" sec="1476076477"/>
        <to usec="0" sec="1476076479"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.80.194.120"/>
        </slice>
        <from usec="0" sec="1476075616"/>
        <to usec="0" sec="1476075618"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.176.194.120"/>
        </slice>
        <from usec="0" sec="1476076406"/>
        <to usec="0" sec="1476076409"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.80.156.132"/>
        </slice>
        <from usec="0" sec="1476076277"/>
        <to usec="0" sec="1476076280"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.228.183.133"/>
        </slice>
        <from usec="0" sec="1476075933"/>
        <to usec="0" sec="1476075936"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,503,1 1 1 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="163.45.136.148" dst_port="80"/>
            <filter dst_ip="203.65.119.74" dst_port="80"/>
        </slice>
        <from usec="0" sec="1476075600"/>
        <to usec="0" sec="1476076498"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="95.184.247.139"/>
        </slice>
        <from usec="0" sec="1476076006"/>
        <to usec="0" sec="1476076031"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="206.14.140.114" dst_ip="203.65.125.84" dst_port="443"/>
            <filter src_ip="75.221.99.139" dst_ip="203.65.125.84" dst_port="443"/>
        </slice>
        <from usec="0" sec="1476075602"/>
        <to usec="0" sec="1476076500"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="183.205.49.142"/>
        </slice>
        <from usec="0" sec="1476075916"/>
        <to usec="0" sec="1476075919"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.45.193.111"/>
        </slice>
        <from usec="0" sec="1476076376"/>
        <to usec="0" sec="1476076379"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.45.123.144"/>
        </slice>
        <from usec="0" sec="1476076315"/>
        <to usec="0" sec="1476076318"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.172.241.111"/>
        </slice>
        <from usec="0" sec="1476076319"/>
        <to usec="0" sec="1476076325"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.228.181.147"/>
        </slice>
        <from usec="0" sec="1476075838"/>
        <to usec="0" sec="1476075841"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.176.123.149"/>
        </slice>
        <from usec="0" sec="1476076310"/>
        <to usec="0" sec="1476076312"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.139.199.149"/>
        </slice>
        <from usec="0" sec="1476075751"/>
        <to usec="0" sec="1476075757"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="94.63.79.149"/>
        </slice>
        <from usec="0" sec="1476075911"/>
        <to usec="0" sec="1476075913"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="113.8.80.107"/>
        </slice>
        <from usec="0" sec="1476076016"/>
        <to usec="0" sec="1476076018"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="122.6.221.158"/>
        </slice>
        <from usec="0" sec="1476075853"/>
        <to usec="0" sec="1476076416"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="171.214.18.98"/>
        </slice>
        <from usec="0" sec="1476076053"/>
        <to usec="0" sec="1476076056"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.228.180.105"/>
        </slice>
        <from usec="0" sec="1476075945"/>
        <to usec="0" sec="1476075947"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="115.35.151.148"/>
        </slice>
        <from usec="0" sec="1476075920"/>
        <to usec="0" sec="1476076057"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="60.94.81.104"/>
        </slice>
        <from usec="0" sec="1476076363"/>
        <to usec="0" sec="1476076365"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.45.99.154"/>
        </slice>
        <from usec="0" sec="1476076405"/>
        <to usec="0" sec="1476076498"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.228.182.154"/>
        </slice>
        <from usec="0" sec="1476076412"/>
        <to usec="0" sec="1476076415"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.45.99.160"/>
        </slice>
        <from usec="0" sec="1476076141"/>
        <to usec="0" sec="1476076143"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,901,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="131.241.121.66"/>
        </slice>
        <from usec="0" sec="1476075990"/>
        <to usec="0" sec="1476075993"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="68.75.17.93"/>
        </slice>
        <from usec="0" sec="1476075647"/>
        <to usec="0" sec="1476075649"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,901,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="163.75.142.187"/>
        </slice>
        <from usec="0" sec="1476075935"/>
        <to usec="0" sec="1476075937"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="59.118.222.91"/>
        </slice>
        <from usec="0" sec="1476075817"/>
        <to usec="0" sec="1476075883"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="210.83.135.69"/>
        </slice>
        <from usec="0" sec="1476075604"/>
        <to usec="0" sec="1476075606"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="182.148.109.165"/>
        </slice>
        <from usec="0" sec="1476076159"/>
        <to usec="0" sec="1476076162"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.172.85.90"/>
        </slice>
        <from usec="0" sec="1476076395"/>
        <to usec="0" sec="1476076398"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="115.63.141.72"/>
        </slice>
        <from usec="0" sec="1476075690"/>
        <to usec="0" sec="1476075693"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="175.189.127.171"/>
        </slice>
        <from usec="0" sec="1476075771"/>
        <to usec="0" sec="1476075773"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="106.175.147.169"/>
        </slice>
        <from usec="0" sec="1476075972"/>
        <to usec="0" sec="1476075974"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.80.115.76"/>
        </slice>
        <from usec="0" sec="1476076369"/>
        <to usec="0" sec="1476076372"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="122.251.112.177"/>
        </slice>
        <from usec="0" sec="1476076023"/>
        <to usec="0" sec="1476076025"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="14.69.122.95"/>
        </slice>
        <from usec="0" sec="1476076005"/>
        <to usec="0" sec="1476076020"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="222.185.223.162"/>
        </slice>
        <from usec="0" sec="1476075864"/>
        <to usec="0" sec="1476075867"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.172.56.90"/>
        </slice>
        <from usec="0" sec="1476075995"/>
        <to usec="0" sec="1476075997"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="59.47.35.167"/>
        </slice>
        <from usec="0" sec="1476075650"/>
        <to usec="0" sec="1476075653"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="166.134.157.181"/>
        </slice>
        <from usec="0" sec="1476075790"/>
        <to usec="0" sec="1476075792"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.228.175.166"/>
        </slice>
        <from usec="0" sec="1476075633"/>
        <to usec="0" sec="1476075636"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="180.12.60.75"/>
        </slice>
        <from usec="0" sec="1476075652"/>
        <to usec="0" sec="1476075655"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="121.188.107.188"/>
        </slice>
        <from usec="0" sec="1476075794"/>
        <to usec="0" sec="1476076152"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="195.185.18.188"/>
        </slice>
        <from usec="0" sec="1476075724"/>
        <to usec="0" sec="1476075738"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.176.199.170"/>
        </slice>
        <from usec="0" sec="1476076449"/>
        <to usec="0" sec="1476076451"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="171.210.44.74"/>
        </slice>
        <from usec="0" sec="1476076068"/>
        <to usec="0" sec="1476076071"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="81.255.133.193"/>
        </slice>
        <from usec="0" sec="1476075635"/>
        <to usec="0" sec="1476075796"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="223.167.131.254"/>
        </slice>
        <from usec="0" sec="1476075688"/>
        <to usec="0" sec="1476075691"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.228.175.252"/>
        </slice>
        <from usec="0" sec="1476075604"/>
        <to usec="0" sec="1476075606"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,020,1 0 0 0 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="203.65.116.7"/>
        </slice>
        <from usec="0" sec="1476076231"/>
        <to usec="0" sec="1476076316"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.45.98.56"/>
        </slice>
        <from usec="0" sec="1476076110"/>
        <to usec="0" sec="1476076112"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="180.4.168.196"/>
        </slice>
        <from usec="0" sec="1476076339"/>
        <to usec="0" sec="1476076342"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="220.152.221.4"/>
        </slice>
        <from usec="0" sec="1476076071"/>
        <to usec="0" sec="1476076400"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="221.230.53.59"/>
        </slice>
        <from usec="0" sec="1476075680"/>
        <to usec="0" sec="1476075682"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.228.174.201"/>
        </slice>
        <from usec="0" sec="1476075790"/>
        <to usec="0" sec="1476075792"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.228.183.241"/>
        </slice>
        <from usec="0" sec="1476076101"/>
        <to usec="0" sec="1476076104"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.45.5.242"/>
        </slice>
        <from usec="0" sec="1476076199"/>
        <to usec="0" sec="1476076202"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="166.241.28.51"/>
        </slice>
        <from usec="0" sec="1476076187"/>
        <to usec="0" sec="1476076190"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="183.247.42.50"/>
        </slice>
        <from usec="0" sec="1476076171"/>
        <to usec="0" sec="1476076174"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="180.139.173.49"/>
        </slice>
        <from usec="0" sec="1476075915"/>
        <to usec="0" sec="1476075917"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="113.41.189.239"/>
        </slice>
        <from usec="0" sec="1476075765"/>
        <to usec="0" sec="1476075768"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="89.172.125.39"/>
        </slice>
        <from usec="0" sec="1476076215"/>
        <to usec="0" sec="1476076218"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="115.35.93.231"/>
        </slice>
        <from usec="0" sec="1476075747"/>
        <to usec="0" sec="1476075750"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.16.141.40"/>
        </slice>
        <from usec="0" sec="1476076259"/>
        <to usec="0" sec="1476076268"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.176.81.229"/>
        </slice>
        <from usec="0" sec="1476075784"/>
        <to usec="0" sec="1476075787"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.228.180.21"/>
        </slice>
        <from usec="0" sec="1476075602"/>
        <to usec="0" sec="1476075604"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="68.75.18.36"/>
        </slice>
        <from usec="0" sec="1476075685"/>
        <to usec="0" sec="1476075695"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.45.98.44"/>
        </slice>
        <from usec="0" sec="1476076417"/>
        <to usec="0" sec="1476076419"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="183.178.90.223"/>
        </slice>
        <from usec="0" sec="1476076436"/>
        <to usec="0" sec="1476076439"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.45.98.220" dst_port="80"/>
        </slice>
        <from usec="0" sec="1476076337"/>
        <to usec="0" sec="1476076404"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.228.183.232"/>
        </slice>
        <from usec="0" sec="1476076287"/>
        <to usec="0" sec="1476076289"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="116.145.41.216"/>
        </slice>
        <from usec="0" sec="1476075868"/>
        <to usec="0" sec="1476075909"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="120.20.136.28"/>
        </slice>
        <from usec="0" sec="1476076170"/>
        <to usec="0" sec="1476076172"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.172.83.28"/>
        </slice>
        <from usec="0" sec="1476076030"/>
        <to usec="0" sec="1476076032"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.45.226.61"/>
        </slice>
        <from usec="0" sec="1476075790"/>
        <to usec="0" sec="1476075792"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="216.235.198.252"/>
        </slice>
        <from usec="0" sec="1476075600"/>
        <to usec="0" sec="1476075602"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,901,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="114.135.57.219"/>
        </slice>
        <from usec="0" sec="1476076159"/>
        <to usec="0" sec="1476076162"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="221.63.207.249"/>
        </slice>
        <from usec="0" sec="1476076320"/>
        <to usec="0" sec="1476076323"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="183.126.162.25" dst_port="21"/>
            <filter src_ip="183.126.162.25" dst_port="443"/>
        </slice>
        <from usec="0" sec="1476075636"/>
        <to usec="0" sec="1476075964"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="68.75.17.6"/>
        </slice>
        <from usec="0" sec="1476075923"/>
        <to usec="0" sec="1476075925"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.65.119.228"/>
        </slice>
        <from usec="0" sec="1476075717"/>
        <to usec="0" sec="1476075719"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.176.122.7"/>
        </slice>
        <from usec="0" sec="1476076204"/>
        <to usec="0" sec="1476076207"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.176.103.250"/>
        </slice>
        <from usec="0" sec="1476075843"/>
        <to usec="0" sec="1476075846"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="60.70.203.16"/>
        </slice>
        <from usec="0" sec="1476076310"/>
        <to usec="0" sec="1476076312"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="115.42.221.207"/>
        </slice>
        <from usec="0" sec="1476075808"/>
        <to usec="0" sec="1476075811"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="109.197.62.21"/>
        </slice>
        <from usec="0" sec="1476075784"/>
        <to usec="0" sec="1476075787"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.45.99.232"/>
        </slice>
        <from usec="0" sec="1476075939"/>
        <to usec="0" sec="1476075941"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.228.174.247"/>
        </slice>
        <from usec="0" sec="1476075665"/>
        <to usec="0" sec="1476075668"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.228.161.47"/>
        </slice>
        <from usec="0" sec="1476076352"/>
        <to usec="0" sec="1476076354"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="118.249.6.17"/>
        </slice>
        <from usec="0" sec="1476076136"/>
        <to usec="0" sec="1476076185"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="113.72.85.44"/>
        </slice>
        <from usec="0" sec="1476075692"/>
        <to usec="0" sec="1476075695"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="49.29.119.205"/>
        </slice>
        <from usec="0" sec="1476076433"/>
        <to usec="0" sec="1476076436"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="192.10.47.255"/>
        </slice>
        <from usec="0" sec="1476075916"/>
        <to usec="0" sec="1476075919"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,502,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="222.186.38.14"/>
        </slice>
        <from usec="0" sec="1476076163"/>
        <to usec="0" sec="1476076197"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="113.127.203.227"/>
        </slice>
        <from usec="0" sec="1476075701"/>
        <to usec="0" sec="1476075765"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="115.148.110.221"/>
        </slice>
        <from usec="0" sec="1476075854"/>
        <to usec="0" sec="1476075857"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.65.113.227" dst_port="443"/>
            <filter src_ip="203.65.113.227" dst_port="53"/>
            <filter src_ip="203.65.113.227" dst_port="80"/>
        </slice>
        <from usec="0" sec="1476075737"/>
        <to usec="0" sec="1476076407"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.80.156.242"/>
        </slice>
        <from usec="0" sec="1476076101"/>
        <to usec="0" sec="1476076390"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.80.156.247"/>
        </slice>
        <from usec="0" sec="1476075927"/>
        <to usec="0" sec="1476075930"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.45.24.39"/>
        </slice>
        <from usec="0" sec="1476075852"/>
        <to usec="0" sec="1476075855"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.45.98.9"/>
        </slice>
        <from usec="0" sec="1476076283"/>
        <to usec="0" sec="1476076286"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="49.23.154.250"/>
        </slice>
        <from usec="0" sec="1476075942"/>
        <to usec="0" sec="1476075944"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="201.194.84.245"/>
        </slice>
        <from usec="0" sec="1476076151"/>
        <to usec="0" sec="1476076154"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.80.173.44"/>
        </slice>
        <from usec="0" sec="1476076246"/>
        <to usec="0" sec="1476076248"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="113.40.53.195"/>
        </slice>
        <from usec="0" sec="1476076447"/>
        <to usec="0" sec="1476076450"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="131.241.112.26"/>
        </slice>
        <from usec="0" sec="1476075993"/>
        <to usec="0" sec="1476075996"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="40.75.141.248"/>
        </slice>
        <from usec="0" sec="1476075811"/>
        <to usec="0" sec="1476075973"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="202.233.176.134"/>
        </slice>
        <from usec="0" sec="1476076079"/>
        <to usec="0" sec="1476076129"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="17.185.103.119"/>
        </slice>
        <from usec="0" sec="1476076334"/>
        <to usec="0" sec="1476076337"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.65.127.113"/>
        </slice>
        <from usec="0" sec="1476076460"/>
        <to usec="0" sec="1476076463"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,011,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="36.9.15.115"/>
        </slice>
        <from usec="0" sec="1476076406"/>
        <to usec="0" sec="1476076409"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="202.233.176.145"/>
        </slice>
        <from usec="0" sec="1476075722"/>
        <to usec="0" sec="1476075818"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="163.45.136.152"/>
        </slice>
        <from usec="0" sec="1476076015"/>
        <to usec="0" sec="1476076017"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.20.171.27"/>
        </slice>
        <from usec="0" sec="1476075952"/>
        <to usec="0" sec="1476075954"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.153.109.70"/>
        </slice>
        <from usec="0" sec="1476076496"/>
        <to usec="0" sec="1476076498"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="192.238.36.217"/>
        </slice>
        <from usec="0" sec="1476076003"/>
        <to usec="0" sec="1476076112"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.172.101.214" dst_port="443"/>
        </slice>
        <from usec="0" sec="1476075622"/>
        <to usec="0" sec="1476076456"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.65.126.134" dst_ip="85.41.118.164" dst_port="443"/>
            <filter src_ip="203.65.126.134" dst_ip="222.186.38.14" src_port="22"/>
        </slice>
        <from usec="0" sec="1476075607"/>
        <to usec="0" sec="1476076497"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.205.23.5"/>
        </slice>
        <from usec="0" sec="1476076332"/>
        <to usec="0" sec="1476076335"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="17.144.125.117"/>
        </slice>
        <from usec="0" sec="1476076420"/>
        <to usec="0" sec="1476076422"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.65.116.159" dst_port="53"/>
        </slice>
        <from usec="0" sec="1476075863"/>
        <to usec="0" sec="1476076312"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="91.4.191.20"/>
        </slice>
        <from usec="0" sec="1476076172"/>
        <to usec="0" sec="1476076188"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="203.65.127.25" dst_port="23"/>
            <filter src_ip="123.153.169.181" dst_ip="203.65.127.25" dst_port="22"/>
        </slice>
        <from usec="0" sec="1476076073"/>
        <to usec="0" sec="1476076182"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.45.62.169"/>
        </slice>
        <from usec="0" sec="1476076050"/>
        <to usec="0" sec="1476076053"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,502,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="203.65.118.233"/>
        </slice>
        <from usec="0" sec="1476076003"/>
        <to usec="0" sec="1476076006"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="91.4.191.135"/>
        </slice>
        <from usec="0" sec="1476075707"/>
        <to usec="0" sec="1476075709"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="131.241.84.60" dst_ip="151.154.228.135"/>
            <filter src_ip="131.241.84.60" dst_port="443"/>
            <filter src_ip="131.241.142.8" dst_ip="151.154.228.135"/>
            <filter src_ip="131.241.142.8" dst_port="80"/>
            <filter src_ip="131.241.31.185" dst_ip="151.154.228.135"/>
            <filter src_ip="131.241.31.185" dst_port="443"/>
            <filter dst_ip="151.154.228.135" dst_port="80"/>
            <filter dst_ip="151.154.228.135" dst_port="443"/>
            <filter src_ip="131.241.84.60" dst_ip="151.154.228.222" dst_port="80"/>
        </slice>
        <from usec="0" sec="1476075852"/>
        <to usec="0" sec="1476075896"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.65.113.158"/>
        </slice>
        <from usec="0" sec="1476075921"/>
        <to usec="0" sec="1476075924"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="123.248.117.135" dst_ip="203.65.127.156" dst_port="80"/>
        </slice>
        <from usec="0" sec="1476075659"/>
        <to usec="0" sec="1476076303"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="134.136.0.98"/>
        </slice>
        <from usec="0" sec="1476076332"/>
        <to usec="0" sec="1476076385"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.228.186.108" dst_ip="24.44.83.149" src_port="53"/>
            <filter src_ip="202.228.186.108" dst_ip="67.117.7.12" src_port="53"/>
            <filter src_ip="202.228.186.108" dst_ip="66.233.88.136" src_port="53"/>
        </slice>
        <from usec="0" sec="1476075910"/>
        <to usec="0" sec="1476076474"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="123.248.117.44" dst_ip="202.228.56.2" dst_port="80"/>
        </slice>
        <from usec="0" sec="1476075629"/>
        <to usec="0" sec="1476076494"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="203.65.114.6"/>
        </slice>
        <from usec="0" sec="1476075600"/>
        <to usec="0" sec="1476075603"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="202.228.169.197"/>
        </slice>
        <from usec="0" sec="1476075932"/>
        <to usec="0" sec="1476075934"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="54.58.228.8"/>
        </slice>
        <from usec="0" sec="1476075671"/>
        <to usec="0" sec="1476075673"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="163.45.194.163" dst_port="443"/>
            <filter dst_ip="54.28.31.213" dst_port="443"/>
            <filter src_ip="163.45.194.163" dst_ip="204.18.175.8" dst_port="80"/>
        </slice>
        <from usec="0" sec="1476075921"/>
        <to usec="0" sec="1476076482"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="46.179.152.253" src_port="33164" dst_port="53"/>
        </slice>
        <from usec="0" sec="1476076148"/>
        <to usec="0" sec="1476076242"/>
    </anomaly>
    <anomaly type="notice" value="1.192950,1.817290,999,1 1 1 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.172.241.140" dst_port="25"/>
        </slice>
        <from usec="0" sec="1476075600"/>
        <to usec="0" sec="1476076461"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,999,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.176.228.117" dst_ip="17.179.182.198" src_port="54809" dst_port="25"/>
        </slice>
        <from usec="0" sec="1476076336"/>
        <to usec="0" sec="1476076338"/>
    </anomaly>
    <anomaly type="notice" value="0.679655,1.763380,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.45.102.233" src_port="22517"/>
            <filter src_ip="163.45.102.233" dst_port="443"/>
            <filter src_ip="163.45.102.233" dst_port="123"/>
        </slice>
        <from usec="0" sec="1476075605"/>
        <to usec="0" sec="1476076392"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="130.69.162.100" dst_port="25"/>
        </slice>
        <from usec="0" sec="1476075673"/>
        <to usec="0" sec="1476076416"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,504,1 1 1 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.228.183.25" dst_port="443"/>
            <filter src_ip="202.228.183.25" dst_ip="91.4.191.145" dst_port="80"/>
        </slice>
        <from usec="0" sec="1476075607"/>
        <to usec="0" sec="1476075695"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,503,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.176.73.162" dst_ip="222.233.152.201" dst_port="80"/>
        </slice>
        <from usec="0" sec="1476076430"/>
        <to usec="0" sec="1476076440"/>
    </anomaly>
    <anomaly type="notice" value="1.192950,1.817290,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="80.222.124.181" src_port="55179" dst_port="21"/>
        </slice>
        <from usec="0" sec="1476076455"/>
        <to usec="0" sec="1476076501"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="72.229.109.6" dst_ip="203.65.122.211" src_port="60606" dst_port="80"/>
            <filter src_ip="72.229.109.6" dst_ip="203.65.122.211" src_port="60605" dst_port="80"/>
        </slice>
        <from usec="0" sec="1476075813"/>
        <to usec="0" sec="1476075828"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,999,1 1 1 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.45.237.134" dst_port="25"/>
        </slice>
        <from usec="0" sec="1476075823"/>
        <to usec="0" sec="1476076419"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,999,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="210.66.118.114" dst_ip="203.65.127.64" src_port="20919" dst_port="25"/>
        </slice>
        <from usec="0" sec="1476075720"/>
        <to usec="0" sec="1476075723"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,999,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.45.237.157" dst_ip="216.45.10.172" src_port="52872" dst_port="25"/>
        </slice>
        <from usec="0" sec="1476076111"/>
        <to usec="0" sec="1476076114"/>
    </anomaly>
    <anomaly type="notice" value="1.192950,1.817290,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.0.179.69" dst_port="22"/>
        </slice>
        <from usec="0" sec="1476076275"/>
        <to usec="0" sec="1476076321"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,503,1 1 1 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.172.182.115" dst_port="80"/>
            <filter src_ip="133.172.182.115" dst_port="443"/>
        </slice>
        <from usec="0" sec="1476075600"/>
        <to usec="0" sec="1476076491"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="202.233.182.80" src_port="25"/>
        </slice>
        <from usec="0" sec="1476075678"/>
        <to usec="0" sec="1476076349"/>
    </anomaly>
    <anomaly type="notice" value="0.679655,1.763380,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.32.225.131" src_port="4345" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1476076144"/>
        <to usec="0" sec="1476076146"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,504,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.172.240.113" dst_ip="52.5.25.2" src_port="50862" dst_port="443"/>
        </slice>
        <from usec="0" sec="1476075638"/>
        <to usec="0" sec="1476075641"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,503,1 1 1 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.45.98.117" dst_port="80"/>
            <filter src_ip="163.45.98.117" dst_port="443"/>
        </slice>
        <from usec="0" sec="1476075991"/>
        <to usec="0" sec="1476076459"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,503,1 1 1 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.45.99.150" dst_ip="104.195.128.197"/>
            <filter src_ip="163.45.99.150" dst_port="80"/>
            <filter src_ip="163.45.99.150" dst_port="443"/>
            <filter dst_ip="104.195.128.197" dst_port="80"/>
        </slice>
        <from usec="0" sec="1476075987"/>
        <to usec="0" sec="1476076369"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.161.19.188" dst_port="23"/>
        </slice>
        <from usec="0" sec="1476075601"/>
        <to usec="0" sec="1476075896"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="202.74.108.183" dst_ip="203.65.113.200" src_port="60855" dst_port="80"/>
            <filter src_ip="202.74.108.183" dst_ip="203.65.113.200" src_port="60854" dst_port="80"/>
            <filter src_ip="202.74.108.183" dst_ip="203.65.113.200" src_port="60853" dst_port="80"/>
        </slice>
        <from usec="0" sec="1476075600"/>
        <to usec="0" sec="1476076500"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="218.64.43.169" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1476076083"/>
        <to usec="0" sec="1476076095"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,502,1 1 1 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="193.124.1.199" dst_ip="203.65.120.89" src_port="47212" dst_port="22"/>
            <filter src_ip="193.124.1.199" dst_ip="203.65.120.88" src_port="41089" dst_port="22"/>
            <filter src_ip="193.124.1.199" dst_ip="203.65.120.93" src_port="44373" dst_port="22"/>
        </slice>
        <from usec="0" sec="1476075801"/>
        <to usec="0" sec="1476076323"/>
    </anomaly>
    <anomaly type="notice" value="0.679655,1.763380,503,1 1 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="202.228.180.192" dst_ip="61.127.19.191"/>
            <filter src_ip="202.228.180.192" dst_port="80"/>
            <filter src_ip="202.228.180.17" dst_ip="61.127.19.191" dst_port="80"/>
        </slice>
        <from usec="0" sec="1476075654"/>
        <to usec="0" sec="1476076498"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.238.161.239" src_port="6000" dst_port="82"/>
            <filter src_ip="121.238.161.239" src_port="6000" dst_port="80"/>
            <filter src_ip="121.238.161.239" src_port="6000" dst_port="81"/>
        </slice>
        <from usec="0" sec="1476075609"/>
        <to usec="0" sec="1476075624"/>
    </anomaly>
    <anomaly type="notice" value="0.679655,1.763380,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.45.77.28" dst_ip="104.66.214.92" dst_port="443"/>
        </slice>
        <from usec="0" sec="1476075685"/>
        <to usec="0" sec="1476076501"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="202.228.181.236" dst_ip="112.234.110.212" dst_port="80"/>
        </slice>
        <from usec="0" sec="1476075603"/>
        <to usec="0" sec="1476076238"/>
    </anomaly>
    <anomaly type="notice" value="0.679655,1.763380,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="17.225.209.205" dst_ip="163.45.98.74" src_port="443" dst_port="58255"/>
        </slice>
        <from usec="0" sec="1476075998"/>
        <to usec="0" sec="1476076019"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.172.241.41" dst_ip="120.8.10.69"/>
            <filter src_ip="133.172.241.41" dst_port="80"/>
            <filter src_ip="133.172.241.41" dst_port="443"/>
            <filter dst_ip="120.8.10.69" dst_port="80"/>
        </slice>
        <from usec="0" sec="1476075803"/>
        <to usec="0" sec="1476075806"/>
    </anomaly>
    <anomaly type="notice" value="0.982712,1.864470,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="203.65.125.95" dst_ip="203.65.125.95" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476075600"/>
        <to usec="0" sec="1476076356"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.234.116.249" dst_port="23"/>
        </slice>
        <from usec="0" sec="1476076369"/>
        <to usec="0" sec="1476076383"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="49.172.183.112" dst_port="23"/>
        </slice>
        <from usec="0" sec="1476076129"/>
        <to usec="0" sec="1476076142"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="119.172.60.227" dst_port="23"/>
        </slice>
        <from usec="0" sec="1476076091"/>
        <to usec="0" sec="1476076103"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.139.136.238" dst_port="23"/>
        </slice>
        <from usec="0" sec="1476076076"/>
        <to usec="0" sec="1476076087"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.139.200.149" dst_port="23"/>
        </slice>
        <from usec="0" sec="1476076182"/>
        <to usec="0" sec="1476076194"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.34.132.148" dst_port="22"/>
        </slice>
        <from usec="0" sec="1476076226"/>
        <to usec="0" sec="1476076235"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="141.133.21.49" dst_port="23"/>
        </slice>
        <from usec="0" sec="1476076375"/>
        <to usec="0" sec="1476076390"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.131.121.172" dst_port="23"/>
        </slice>
        <from usec="0" sec="1476075997"/>
        <to usec="0" sec="1476076010"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.141.36.179" dst_port="23"/>
        </slice>
        <from usec="0" sec="1476076409"/>
        <to usec="0" sec="1476076421"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="183.255.219.13" dst_port="23"/>
        </slice>
        <from usec="0" sec="1476075604"/>
        <to usec="0" sec="1476075644"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.203.76.111" dst_port="23"/>
        </slice>
        <from usec="0" sec="1476076380"/>
        <to usec="0" sec="1476076400"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="210.0.49.146" dst_ip="163.45.25.10" dst_port="80"/>
        </slice>
        <from usec="0" sec="1476076224"/>
        <to usec="0" sec="1476076418"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="119.173.15.164" dst_port="23"/>
        </slice>
        <from usec="0" sec="1476075659"/>
        <to usec="0" sec="1476075670"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="119.173.175.190" dst_port="23"/>
        </slice>
        <from usec="0" sec="1476075900"/>
        <to usec="0" sec="1476075915"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="60.91.230.60" dst_port="23"/>
        </slice>
        <from usec="0" sec="1476076338"/>
        <to usec="0" sec="1476076351"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,999,1 1 1 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="193.124.1.198" dst_ip="203.65.120.89" dst_port="161"/>
            <filter src_ip="193.124.1.198" dst_ip="203.65.120.91" dst_port="161"/>
        </slice>
        <from usec="0" sec="1476075667"/>
        <to usec="0" sec="1476075677"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.204.87.230" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1476075753"/>
        <to usec="0" sec="1476075807"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.242.91.198" dst_port="23"/>
        </slice>
        <from usec="0" sec="1476076223"/>
        <to usec="0" sec="1476076234"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="212.78.53.15" dst_port="23"/>
        </slice>
        <from usec="0" sec="1476075794"/>
        <to usec="0" sec="1476075806"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="111.236.33.230" src_port="12200" dst_port="10200"/>
        </slice>
        <from usec="0" sec="1476075736"/>
        <to usec="0" sec="1476075738"/>
    </anomaly>
    <anomaly type="notice" value="0.679655,1.763380,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="107.98.88.163"/>
        </slice>
        <from usec="0" sec="1476075897"/>
        <to usec="0" sec="1476075899"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="125.164.11.58" src_port="2657" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1476075644"/>
        <to usec="0" sec="1476075773"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.137.250.123" src_port="3075" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1476075960"/>
        <to usec="0" sec="1476076338"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="193.9.73.177" src_port="28308" dst_port="5900"/>
        </slice>
        <from usec="0" sec="1476076031"/>
        <to usec="0" sec="1476076051"/>
    </anomaly>
    <anomaly type="notice" value="0.679655,1.763380,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="182.1.192.11" src_port="4377" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1476076115"/>
        <to usec="0" sec="1476076117"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.103.146.33" dst_port="1723"/>
        </slice>
        <from usec="0" sec="1476076443"/>
        <to usec="0" sec="1476076446"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="104.16.193.198" src_port="52961" dst_port="9987"/>
        </slice>
        <from usec="0" sec="1476076178"/>
        <to usec="0" sec="1476076289"/>
    </anomaly>
    <anomaly type="notice" value="0.679655,1.763380,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="119.173.187.120" dst_port="23"/>
        </slice>
        <from usec="0" sec="1476075854"/>
        <to usec="0" sec="1476075871"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="211.4.145.239" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1476075671"/>
        <to usec="0" sec="1476076457"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="119.173.72.232" dst_port="23"/>
        </slice>
        <from usec="0" sec="1476075705"/>
        <to usec="0" sec="1476075716"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="210.52.54.150" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1476075955"/>
        <to usec="0" sec="1476075960"/>
    </anomaly>
    <anomaly type="notice" value="0.679655,1.763380,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.118.170.192" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1476075910"/>
        <to usec="0" sec="1476075917"/>
    </anomaly>
    <anomaly type="notice" value="0.679655,1.763380,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="207.31.125.43"/>
        </slice>
        <from usec="0" sec="1476076019"/>
        <to usec="0" sec="1476076020"/>
    </anomaly>
    <anomaly type="notice" value="0.679655,1.763380,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="124.22.152.199" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1476076245"/>
        <to usec="0" sec="1476076259"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,999,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.65.125.122" dst_port="53"/>
        </slice>
        <from usec="0" sec="1476075770"/>
        <to usec="0" sec="1476076443"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="210.14.225.5" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1476075729"/>
        <to usec="0" sec="1476075743"/>
    </anomaly>
    <anomaly type="notice" value="0.679655,1.763380,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="119.173.168.123" dst_port="23"/>
        </slice>
        <from usec="0" sec="1476075845"/>
        <to usec="0" sec="1476075857"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="84.62.125.139" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1476076012"/>
        <to usec="0" sec="1476076028"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.45.143.149" dst_port="23"/>
        </slice>
        <from usec="0" sec="1476076048"/>
        <to usec="0" sec="1476076059"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="58.70.242.64" dst_port="23"/>
        </slice>
        <from usec="0" sec="1476076224"/>
        <to usec="0" sec="1476076242"/>
    </anomaly>
    <anomaly type="notice" value="0.679655,1.763380,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.248.98.0" dst_port="23"/>
        </slice>
        <from usec="0" sec="1476075658"/>
        <to usec="0" sec="1476075678"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,999,1 1 1 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.45.237.136" dst_port="25"/>
        </slice>
        <from usec="0" sec="1476075926"/>
        <to usec="0" sec="1476076017"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="113.147.67.2"/>
        </slice>
        <from usec="0" sec="1476076080"/>
        <to usec="0" sec="1476076492"/>
    </anomaly>
    <anomaly type="notice" value="0.679655,1.763380,011,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="222.214.134.117" src_port="1433"/>
        </slice>
        <from usec="0" sec="1476076203"/>
        <to usec="0" sec="1476076475"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="133.113.134.1" dst_port="53"/>
        </slice>
        <from usec="0" sec="1476075602"/>
        <to usec="0" sec="1476075999"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.142.190.114" dst_port="993"/>
        </slice>
        <from usec="0" sec="1476075667"/>
        <to usec="0" sec="1476076390"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.190.51.7" dst_port="23"/>
        </slice>
        <from usec="0" sec="1476076406"/>
        <to usec="0" sec="1476076422"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="217.233.33.146" dst_port="23"/>
        </slice>
        <from usec="0" sec="1476075975"/>
        <to usec="0" sec="1476075980"/>
    </anomaly>
    <anomaly type="notice" value="0.679655,1.763380,010,1 1 0 0 0 0 0 0 0 0 0 0,DDoSSYNACKrp">
        <slice>
            <filter src_ip="122.4.88.160" src_port="80"/>
        </slice>
        <from usec="0" sec="1476076405"/>
        <to usec="0" sec="1476076493"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="61.137.13.142" dst_port="23"/>
        </slice>
        <from usec="0" sec="1476076065"/>
        <to usec="0" sec="1476076072"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,502,1 1 1 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="192.185.147.186" dst_ip="203.65.124.166" dst_port="53"/>
            <filter src_ip="192.185.147.186"/>
        </slice>
        <from usec="0" sec="1476076109"/>
        <to usec="0" sec="1476076111"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,010,1 1 1 0 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="201.196.229.81" dst_ip="150.196.189.150" src_port="46838" dst_port="2323"/>
            <filter src_ip="201.196.229.81" dst_ip="150.196.189.150" src_port="46838" dst_port="23"/>
        </slice>
        <from usec="0" sec="1476075911"/>
        <to usec="0" sec="1476075913"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.151.159.130" dst_port="23"/>
        </slice>
        <from usec="0" sec="1476076473"/>
        <to usec="0" sec="1476076483"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,999,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.65.100.158" dst_port="53"/>
        </slice>
        <from usec="0" sec="1476075600"/>
        <to usec="0" sec="1476076127"/>
    </anomaly>
    <anomaly type="notice" value="0.679655,1.763380,504,1 1 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="17.134.64.6" dst_port="443"/>
            <filter dst_ip="17.134.64.4" dst_port="443"/>
        </slice>
        <from usec="0" sec="1476075602"/>
        <to usec="0" sec="1476076495"/>
    </anomaly>
    <anomaly type="notice" value="0.679655,1.763380,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="189.29.112.59" dst_port="23"/>
        </slice>
        <from usec="0" sec="1476076040"/>
        <to usec="0" sec="1476076069"/>
    </anomaly>
    <anomaly type="notice" value="0.679655,1.763380,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="136.172.116.19" dst_ip="203.65.113.154" src_port="49060" dst_port="25"/>
            <filter src_ip="136.172.116.19" dst_ip="163.45.237.136" src_port="43319" dst_port="25"/>
        </slice>
        <from usec="0" sec="1476075829"/>
        <to usec="0" sec="1476075889"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,999,1 1 1 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.233.182.80" src_port="80"/>
            <filter dst_ip="202.233.182.80" dst_port="25"/>
        </slice>
        <from usec="0" sec="1476075694"/>
        <to usec="0" sec="1476076474"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.139.118.227" dst_port="23"/>
        </slice>
        <from usec="0" sec="1476076091"/>
        <to usec="0" sec="1476076098"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="67.55.48.51" dst_port="23"/>
        </slice>
        <from usec="0" sec="1476075915"/>
        <to usec="0" sec="1476075917"/>
    </anomaly>
    <anomaly type="notice" value="0.946902,1.774810,999,1 1 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.228.58.1" dst_port="53"/>
        </slice>
        <from usec="0" sec="1476075863"/>
        <to usec="0" sec="1476076469"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,504,1 1 1 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_port="443"/>
            <filter src_ip="163.45.19.80" dst_port="80"/>
            <filter src_ip="163.45.121.26" dst_port="80"/>
        </slice>
        <from usec="0" sec="1476075615"/>
        <to usec="0" sec="1476076482"/>
    </anomaly>
    <anomaly type="notice" value="1.056330,1.903020,901,0 0 1 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="203.65.125.95" dst_ip="203.65.125.95" proto="tcp"/>
        </slice>
        <from usec="0" sec="1476075600"/>
        <to usec="0" sec="1476076356"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,503,1 1 1 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="202.228.62.39" dst_port="80"/>
            <filter dst_ip="203.65.116.32" dst_port="80"/>
        </slice>
        <from usec="0" sec="1476075674"/>
        <to usec="0" sec="1476076434"/>
    </anomaly>
    <anomaly type="notice" value="0.292475,1.761300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.228.183.8" dst_port="443"/>
        </slice>
        <from usec="0" sec="1476076215"/>
        <to usec="0" sec="1476076364"/>
    </anomaly>
    <anomaly type="notice" value="0.679655,1.763380,503,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="202.228.180.213" dst_port="443"/>
            <filter src_ip="202.228.180.213" dst_port="80"/>
        </slice>
        <from usec="0" sec="1476075667"/>
        <to usec="0" sec="1476076482"/>
    </anomaly>
    <anomaly type="notice" value="1.011940,1.873320,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.113.134.1"/>
        </slice>
        <from usec="0" sec="1476075600"/>
        <to usec="0" sec="1476075646"/>
    </anomaly>
    <anomaly type="notice" value="1.011940,1.873320,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.65.116.198"/>
        </slice>
        <from usec="0" sec="1476075600"/>
        <to usec="0" sec="1476075646"/>
    </anomaly>
    <anomaly type="notice" value="0.721273,1.772740,503,1 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.172.56.244" dst_ip="212.3.156.157" dst_port="80"/>
        </slice>
        <from usec="0" sec="1476075600"/>
        <to usec="0" sec="1476075707"/>
    </anomaly>
    <anomaly type="notice" value="1.011940,1.873320,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="202.228.59.194" src_port="80"/>
            <filter dst_ip="202.228.59.194" src_port="443"/>
        </slice>
        <from usec="0" sec="1476075600"/>
        <to usec="0" sec="1476075646"/>
    </anomaly>
    <anomaly type="notice" value="1.230270,1.868350,999,1 0 0 0 0 0 1 1 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="45.200.101.31" dst_ip="203.65.122.194" dst_port="161"/>
        </slice>
        <from usec="0" sec="1476075600"/>
        <to usec="0" sec="1476075646"/>
    </anomaly>
    <anomaly type="notice" value="1.011940,1.873320,502,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="221.63.207.225"/>
        </slice>
        <from usec="0" sec="1476075600"/>
        <to usec="0" sec="1476075646"/>
    </anomaly>
    <anomaly type="notice" value="1.011940,1.873320,999,0 0 0 0 0 0 1 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="203.65.126.115" dst_ip="45.199.11.245" dst_port="3303"/>
        </slice>
        <from usec="0" sec="1476075645"/>
        <to usec="0" sec="1476075691"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,503,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.228.176.77" dst_ip="104.195.123.91" dst_port="80"/>
        </slice>
        <from usec="0" sec="1476075999"/>
        <to usec="0" sec="1476076004"/>
    </anomaly>
    <anomaly type="notice" value="0.721273,1.772740,999,1 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.45.192.111" src_port="30303" dst_port="30303"/>
        </slice>
        <from usec="0" sec="1476075645"/>
        <to usec="0" sec="1476076117"/>
    </anomaly>
    <anomaly type="notice" value="0.721273,1.772740,999,1 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.65.115.195" dst_port="53"/>
        </slice>
        <from usec="0" sec="1476075600"/>
        <to usec="0" sec="1476076084"/>
    </anomaly>
    <anomaly type="notice" value="0.721273,1.772740,999,1 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="122.22.67.59" dst_ip="202.228.59.1" dst_port="53"/>
        </slice>
        <from usec="0" sec="1476075644"/>
        <to usec="0" sec="1476075736"/>
    </anomaly>
    <anomaly type="notice" value="1.230270,1.868350,999,1 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.233.170.237" dst_port="53"/>
        </slice>
        <from usec="0" sec="1476075645"/>
        <to usec="0" sec="1476076466"/>
    </anomaly>
    <anomaly type="notice" value="1.011940,1.873320,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="58.141.94.158" dst_ip="202.228.59.59" src_port="80"/>
        </slice>
        <from usec="0" sec="1476075690"/>
        <to usec="0" sec="1476075736"/>
    </anomaly>
    <anomaly type="notice" value="1.230270,1.868350,999,1 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.65.116.177" dst_port="53"/>
        </slice>
        <from usec="0" sec="1476075603"/>
        <to usec="0" sec="1476076448"/>
    </anomaly>
    <anomaly type="notice" value="1.230270,1.868350,999,1 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.65.113.210" dst_port="53"/>
        </slice>
        <from usec="0" sec="1476075631"/>
        <to usec="0" sec="1476076439"/>
    </anomaly>
    <anomaly type="notice" value="1.192950,1.817290,999,1 1 1 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.75.91.180" src_port="5105"/>
        </slice>
        <from usec="0" sec="1476075625"/>
        <to usec="0" sec="1476076096"/>
    </anomaly>
    <anomaly type="notice" value="0.721273,1.772740,010,1 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="37.61.60.135" dst_port="110"/>
        </slice>
        <from usec="0" sec="1476075602"/>
        <to usec="0" sec="1476076440"/>
    </anomaly>
    <anomaly type="notice" value="1.011940,1.873320,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.65.126.115" dst_ip="45.199.11.245" dst_port="3303"/>
            <filter src_ip="203.65.126.115" dst_ip="95.124.150.107" dst_port="3303"/>
        </slice>
        <from usec="0" sec="1476075825"/>
        <to usec="0" sec="1476075871"/>
    </anomaly>
    <anomaly type="notice" value="1.192950,1.817290,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.179.152.228" dst_port="23"/>
        </slice>
        <from usec="0" sec="1476075808"/>
        <to usec="0" sec="1476076455"/>
    </anomaly>
    <anomaly type="notice" value="1.230270,1.868350,010,1 0 0 0 0 0 1 1 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="111.236.34.113" src_port="12200" dst_port="3128"/>
            <filter src_ip="111.236.34.113" src_port="12200" dst_port="80"/>
            <filter src_ip="111.236.34.113" src_port="12200" dst_port="8080"/>
        </slice>
        <from usec="0" sec="1476076050"/>
        <to usec="0" sec="1476076096"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,503,1 1 1 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.45.98.29" dst_port="443"/>
            <filter src_ip="163.45.98.29" dst_port="80"/>
            <filter src_ip="163.45.99.234" dst_port="443"/>
        </slice>
        <from usec="0" sec="1476075884"/>
        <to usec="0" sec="1476076187"/>
    </anomaly>
    <anomaly type="notice" value="1.011940,1.873320,999,0 0 0 0 0 0 1 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="203.65.126.115" dst_ip="45.199.11.245" dst_port="3303"/>
        </slice>
        <from usec="0" sec="1476076320"/>
        <to usec="0" sec="1476076366"/>
    </anomaly>
    <anomaly type="notice" value="1.011940,1.873320,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.196.141.54" dst_port="54756"/>
        </slice>
        <from usec="0" sec="1476076320"/>
        <to usec="0" sec="1476076366"/>
    </anomaly>
    <anomaly type="notice" value="1.011940,1.873320,010,0 0 0 0 0 0 1 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter dst_ip="95.124.150.107"/>
        </slice>
        <from usec="0" sec="1476076320"/>
        <to usec="0" sec="1476076366"/>
    </anomaly>
    <anomaly type="notice" value="1.011940,1.873320,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="193.163.6.135"/>
        </slice>
        <from usec="0" sec="1476076320"/>
        <to usec="0" sec="1476076366"/>
    </anomaly>
    <anomaly type="notice" value="1.011940,1.873320,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.196.140.166"/>
        </slice>
        <from usec="0" sec="1476076320"/>
        <to usec="0" sec="1476076366"/>
    </anomaly>
    <anomaly type="notice" value="1.011940,1.873320,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.196.140.181" dst_port="54756"/>
        </slice>
        <from usec="0" sec="1476076320"/>
        <to usec="0" sec="1476076366"/>
    </anomaly>
    <anomaly type="notice" value="1.011940,1.873320,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.187.92.74" dst_port="50348"/>
        </slice>
        <from usec="0" sec="1476076320"/>
        <to usec="0" sec="1476076366"/>
    </anomaly>
    <anomaly type="notice" value="1.011940,1.873320,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.65.127.125" src_port="53"/>
        </slice>
        <from usec="0" sec="1476076320"/>
        <to usec="0" sec="1476076366"/>
    </anomaly>
    <anomaly type="notice" value="0.721273,1.772740,999,1 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.233.134.241" dst_port="53"/>
        </slice>
        <from usec="0" sec="1476075941"/>
        <to usec="0" sec="1476076497"/>
    </anomaly>
    <anomaly type="notice" value="1.011940,1.873320,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.228.169.116" dst_port="53"/>
        </slice>
        <from usec="0" sec="1476076320"/>
        <to usec="0" sec="1476076366"/>
    </anomaly>
    <anomaly type="notice" value="1.011940,1.873320,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.228.169.115" src_port="53"/>
        </slice>
        <from usec="0" sec="1476076320"/>
        <to usec="0" sec="1476076366"/>
    </anomaly>
    <anomaly type="notice" value="1.011940,1.873320,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.228.169.115" dst_port="53"/>
        </slice>
        <from usec="0" sec="1476076320"/>
        <to usec="0" sec="1476076366"/>
    </anomaly>
    <anomaly type="notice" value="0.721273,1.772740,999,1 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.228.174.110" dst_port="53"/>
        </slice>
        <from usec="0" sec="1476075959"/>
        <to usec="0" sec="1476076409"/>
    </anomaly>
    <anomaly type="notice" value="1.011940,1.873320,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.45.121.26" src_port="80"/>
        </slice>
        <from usec="0" sec="1476076320"/>
        <to usec="0" sec="1476076366"/>
    </anomaly>
    <anomaly type="notice" value="1.011940,1.873320,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.233.150.108" src_port="53"/>
        </slice>
        <from usec="0" sec="1476076320"/>
        <to usec="0" sec="1476076366"/>
    </anomaly>
    <anomaly type="notice" value="1.011940,1.873320,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="202.228.59.59" src_port="80"/>
        </slice>
        <from usec="0" sec="1476076320"/>
        <to usec="0" sec="1476076366"/>
    </anomaly>
    <anomaly type="notice" value="0.721273,1.772740,999,1 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.228.186.89" dst_port="53"/>
        </slice>
        <from usec="0" sec="1476075799"/>
        <to usec="0" sec="1476076412"/>
    </anomaly>
    <anomaly type="notice" value="1.011940,1.873320,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.45.168.169" src_port="53"/>
        </slice>
        <from usec="0" sec="1476076320"/>
        <to usec="0" sec="1476076366"/>
    </anomaly>
    <anomaly type="notice" value="1.011940,1.873320,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.65.117.49" dst_port="53"/>
        </slice>
        <from usec="0" sec="1476076320"/>
        <to usec="0" sec="1476076366"/>
    </anomaly>
    <anomaly type="notice" value="1.011940,1.873320,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.65.116.159" dst_port="53"/>
        </slice>
        <from usec="0" sec="1476076320"/>
        <to usec="0" sec="1476076366"/>
    </anomaly>
    <anomaly type="notice" value="1.011940,1.873320,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.228.59.94" src_port="53"/>
        </slice>
        <from usec="0" sec="1476076320"/>
        <to usec="0" sec="1476076366"/>
    </anomaly>
    <anomaly type="notice" value="1.011940,1.873320,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="202.228.56.146" src_port="80"/>
        </slice>
        <from usec="0" sec="1476076320"/>
        <to usec="0" sec="1476076366"/>
    </anomaly>
    <anomaly type="notice" value="1.011940,1.873320,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.65.115.195" dst_port="53"/>
        </slice>
        <from usec="0" sec="1476076320"/>
        <to usec="0" sec="1476076366"/>
    </anomaly>
    <anomaly type="notice" value="0.721273,1.772740,999,1 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.228.58.8" dst_port="53"/>
        </slice>
        <from usec="0" sec="1476075942"/>
        <to usec="0" sec="1476076471"/>
    </anomaly>
    <anomaly type="notice" value="1.230270,1.868350,999,1 0 0 0 0 0 1 1 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.80.18.19" dst_ip="202.80.206.248" dst_port="53"/>
        </slice>
        <from usec="0" sec="1476075644"/>
        <to usec="0" sec="1476075691"/>
    </anomaly>
    <anomaly type="notice" value="1.230270,1.868350,999,1 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.65.117.35" dst_port="53"/>
        </slice>
        <from usec="0" sec="1476075600"/>
        <to usec="0" sec="1476076366"/>
    </anomaly>
    <anomaly type="notice" value="1.230270,1.868350,999,1 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.65.117.36" dst_port="53"/>
        </slice>
        <from usec="0" sec="1476075645"/>
        <to usec="0" sec="1476076366"/>
    </anomaly>
    <anomaly type="notice" value="0.679655,1.763380,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.80.199.73" dst_port="443"/>
        </slice>
        <from usec="0" sec="1476075602"/>
        <to usec="0" sec="1476076488"/>
    </anomaly>
    <anomaly type="notice" value="1.015530,1.736000,504,1 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="202.228.176.73" dst_ip="162.228.66.121" src_port="51615" dst_port="443"/>
            <filter src_ip="202.228.176.73" dst_ip="162.228.66.121" src_port="51606" dst_port="443"/>
            <filter src_ip="202.228.176.73" dst_ip="162.228.66.121" src_port="51605" dst_port="443"/>
            <filter src_ip="202.228.176.73" dst_ip="162.228.66.121" src_port="51601" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.994196,1.806120,503,1 1 1 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_port="443"/>
            <filter dst_port="80"/>
        </slice>
        <from usec="0" sec="1476075608"/>
        <to usec="0" sec="1476076498"/>
    </anomaly>
</admd:annotation>
